TRH ResearchLiving research

AI Commerce 2027

How the commerce operating model changes when software can act.

Infrastructure exists. Adoption evidence does not.

Robert HuPublished September 21, 2026Updated October 29, 202625 min read

The short version

AI commerce begins where software receives authority to act inside a commercial system, not where AI starts helping a person decide.
The capability to act now exists at every layer of the stack, but no platform publishes agent-initiated transaction volume, and the one disclosed comparison of an AI-surface checkout against a merchant's own checkout favored the merchant.
Software is gaining authority inside the merchant's business faster than it is gaining unrestricted authority over the shopper's wallet: pricing, restocking, budget allocation and campaign sends can now be executed by software, while every agent purchase I can verify either asks a person to approve it or runs a rule the person set in advance.
Interface ownership and transaction ownership have separated, and every architecture shipped so far gives away the interface while leaving the merchant as merchant of record.
The constraint for 2027 is not model capability but authority design: who is acting, for whom, under what permission, with what evidence retained, and measured how.

What the record actually shows

0: Platforms, networks or retailers publishing agent initiated transaction volumeMy search, October 2026
~1/3: Conversion of Walmart's native checkout test inside ChatGPT, relative to click-through to Walmart.comWIRED
3x: Year over year growth in AI-driven orders to Shopify stores, on a base Shopify calls still smallShopify, Q2 2026 call
63 of 100: Bare brand-name searches for major brands showing an AI Overview by September 30, up from 5 of 98 on July 1Ahrefs
61%: Pairwise agreement between an agent's model of a person and their own preferencesAnthropic Project Swap
18.48%: Of spend sent to fraudulent suppliers by the top earning modelE-Commerce Bench, simulation

What AI commerce means

Most of what gets called AI commerce is AI-assisted ecommerce. The difference is not how advanced the AI is. It is who holds the authority to act.

AI-assisted ecommerce is commerce where AI helps a person decide or perform a task, and the person still takes the action. Recommendations, search summaries, generated product copy, analytics, merchandising suggestions and customer service drafts all sit here. The work gets faster. Accountability does not move.

AI commerce is commerce where software receives enough authority to act inside the commercial system. Assembling a cart, initiating checkout, completing a purchase after approval, changing a price, reallocating an ad budget, sending a campaign or processing a return all sit here. The software is a participant, not an interface a person operates.

The boundary is authority. A feature that writes a better product description is not AI commerce, however capable the model behind it. A feature that changes the live price is, however simple the rule behind it.

Authority arrives in steps. Software that answers tells a person something. Software that recommends proposes a choice. Software that acts prepares something a person could execute, such as a cart. Software that transacts creates an obligation, an order with money attached. Software that operates changes the business itself: prices, inventory, budgets, listings, customer communications. Each step moves a decision from a person to a system, and each one needs a different kind of control.

The two models coexist. Most commerce in 2027 will still be a person on a website or in an app, and nothing in the 2026 record suggests AI-assisted ecommerce is going away. The practical question for an operator is not which model wins. It is which workflows belong to which model, and on what evidence.

Updated October 29, 2026

What changed in this update

This edition rebuilds the report around authority rather than around new products. Four things changed in the evidence.

The consumer transaction thesis needed qualifying. The original edition described 2026 architecture as giving the purchase interface to AI platforms, and did not account for the most visible test of that idea. WIRED reported that Walmart's test of native checkout inside ChatGPT converted at roughly a third of the rate of shoppers who clicked through to Walmart's own site, and Walmart shifted to bringing its own assistant into AI surfaces instead. OpenAI moved its emphasis toward product discovery and now recommends external merchant checkout for most integrations, while keeping native checkout for select partners. Native AI checkout is one of several architectures competing for the transaction, not the default winner. The website is no longer a mandatory handoff. It is also not the inevitable loser.

The merchant operator thesis strengthened sharply. In late September, Amazon gave Seller Assistant workflows that execute restocking and pricing changes under seller guardrails, and put the same assistant inside Claude. Amazon's Full-Funnel Campaigns now allocate one daily budget across four ad formats in real time. Software got write access to the merchant's business faster than to the shopper's wallet, and this edition treats that as the leading edge rather than a side effect.

Trust moved from design to enforcement. Amazon blocked Meta's Muse agent in September, saying the agent did not identify itself. Meta and Sierra announced Personal Agent Protocol, which separates what a customer lets an agent do from what a business allows. Mastercard began testing a score for whether a transaction was initiated by an agent. The questions this report asked in September are now being answered in production, by refusal as often as by acceptance.

Measurement split in two. Google shipped transaction reporting for UCP checkout that starts at the Buy click, alongside Search Console reporting that shows impressions in AI surfaces with no queries or clicks. The transaction half of AI shopping is getting instrumented. The consideration half, what the AI looked at and rejected, is not.

One correction: the original edition described WebMCP as a draft standard behind a browser flag. Shopify had already shipped WebMCP tools across every Liquid storefront six weeks earlier.

The protected sentence still holds, and the evidence since September has made it more precise rather than less true. Infrastructure exists. Adoption evidence does not. Usage of AI shopping assistants is large and published. Agent-initiated transaction volume is still not.

The AI commerce stack

AI commerce is not one technology. It is a sequence of steps, each owned by different systems and often different companies, and authority increases as software moves down it.

The flow

Authority increases ↓

DiscoveryDecidesWhat enters considerationAuthority neededAccess to product data
RecommendationDecidesWhat gets named, and in what orderAuthority neededJudgment about fit
Agent actionDecidesWhat gets prepared: a cart, a booking, a draft changeAuthority neededPermission to act in a session
TransactionDecidesWhether an order is createdAuthority neededCustomer approval or a standing rule
PaymentDecidesWhich credential is used, and whether money movesAuthority neededDelegated, scoped payment authority
FulfillmentDecidesWhether the promise is kept, amended or reversedAuthority neededAccess to merchant systems
MeasurementDecidesWhat counts as the resultAuthority neededA definition someone else will accept

The foundations underneath

Product dataThe record every layer above reads
IdentityWhich agent, operated by whom, acting for whom
PermissionsWhat it is allowed to do here
ProtocolsHow systems exchange the transaction
Merchant systemsOrders, inventory, pricing, service
GovernanceApproval, intervention, evidence
MeasurementWhether any of it worked

At the top of the stack, an error is a bad suggestion a person can ignore. At the bottom, an error is an executed action someone has to reverse. That is why the same AI capability can be harmless in discovery and dangerous in payment, and why most failures in this stack are not model failures. They happen at the handoffs between layers.

Underneath the flow sit the foundations every layer reads: product data, identity, permissions, protocols, merchant systems, governance and measurement. Most of them are not new responsibilities. What is new is how many other systems now read them, and how many of those systems can act on what they read.

One storefront, two front doors

Not a website replaced by an agent. One product record serving two interfaces, maintained by the same team.

Built for people

Human interface

Rendered pages and images
Navigation and search
Merchandising and layout
Session behavior

Built for software

Agent interface

Declared tools and capabilities
Structured catalog and inventory
Transaction and checkout calls
Permissions and identity

Both read the same product data

The 2027 operating model: nine shifts

Each shift separates what changed, the evidence for it, why it matters, what an operator should do about it, and what is still unproven. Where the evidence materially changed a view this report previously held, the revision is stated.

01Discovery becomes machine-mediated
02The merchant website stops being the mandatory handoff, not the inevitable loser
03Commerce gets a software interface
04Measurement splits into consideration and transaction
05Trust becomes an operating layer
06Advertising moves inside the shopping interface
07AI moves from buyer to operator
08Platform power shifts to the operating layer
09Organizations need a governance model for software that acts

Discovery becomes machine-mediated

What changed

The work of exploring options moved from the shopper into software. Shoppers increasingly state an intent at one end and approve a result at the other, while retrieval, comparison and narrowing happen where they cannot see it.

Evidence

DoorDash reported that nearly half of orders placed through its Ask DoorDash assistant between June and August went to local restaurants the customer had never tried before, which the company attributes to finding places that "might not have caught their eye in their usual scroll." A study by Vaer AI for Lightspeed Commerce, covering roughly 460,000 AI responses, found large and small retailers about even among the sources AI systems cited, at roughly 38% each, while large retailers won the lead recommendation about two and a half times as often. Ahrefs found AI Overviews on 5 of 98 bare brand-name searches for major brands on July 1 and on 63 of 100 by September 30, so even navigational queries now arrive with a machine-written description. Amazon says more than 350 million customers used its shopping assistant in the twelve months to June.

Why it matters

"AI visibility" is at least five different outcomes. Retrieval asks whether a product enters the evidence set. Recommendation asks whether it gets named. Product selection asks which item wins. Merchant selection asks who sells it. Transaction asks where it gets bought. Different systems decide each one, and the Lightspeed data shows a retailer can win the first and lose the second. Citation is evidence of retrieval. Recommendation is evidence of selection.

Operator consequence

Product data is now the input to every layer, and the signals that decide selection go beyond content. Availability, delivery speed, return terms and assortment depth are what a recommender needs to be confident that the errand will succeed. Track where in the answer you disappear, not only whether you appear.

What is still unproven

No one has published evidence linking a specific product data change to a measurable change in recommendation outcomes at scale, with a control. The DoorDash data is observational and first party. The Lightspeed study is sponsored, and its full report is available only on request.

Updated view

I previously treated citation and recommendation as one discipline, and described AI as compressing the shopper's exploration. Both need revising. Retrieval and selection share a foundation and then come apart, and the exploration did not shrink. It changed owner.

Evidence notescitation versus recommendation, the messy middle moved into the machine, product data as shared infrastructure

Primary sourcesDoorDash, Text DoorDash, Vaer AI for Lightspeed, AI retailer study, Ahrefs, AI Overviews on branded searches, Amazon second quarter 2026 results

The merchant website stops being the mandatory handoff, not the inevitable loser

What changed

External AI surfaces became legitimate places to shop, but native AI checkout is not automatically winning the transaction. Platforms and retailers are now running several checkout architectures side by side: checkout native to the AI surface, merchant-controlled checkout reached from it, and cart handoff to the merchant's own site.

Evidence

WIRED reported that Walmart's test of OpenAI's Instant Checkout, covering around 200,000 products, converted at roughly a third of the rate of shoppers who clicked through to Walmart.com. Walmart then moved to putting its own Sparky assistant inside ChatGPT and Gemini, with account linking, loyalty and Walmart's own payment. OpenAI did not withdraw native checkout. Its March 24 announcement shifted emphasis toward product discovery and let merchants use their own checkout experiences, and its developer documentation now calls external checkout "the recommended and generally available approach" for developers building on ChatGPT, while checkout with the ChatGPT payment sheet continues as a private beta for select marketplace partners. Google's UCP integration in Merchant Center lets a merchant choose native checkout on Google, cart transfer to its own site, or identity linking, and is rolling out gradually in the United States through an interest form and selection. Shopify made direct checkout in AI Mode and Gemini active by default for eligible stores. TikTok announced Buy Direct on October 5, a native checkout that requires a UCP integration and keeps the brand as merchant of record, available through eligibility-based testing.

Why it matters

Interface ownership is not transaction ownership. Interface ownership is who renders the moment of purchase. Transaction ownership is who holds the order, the money, the customer record and the obligation. Every architecture I have reviewed from 2026, from Google to Microsoft to TikTok, keeps the merchant as merchant of record. What varies is how much of the interface the merchant keeps: its own checkout, its own agent, or neither. What moves with the interface is presentation, cross-sell, behavioral data and, most importantly, the conversation that produced the decision.

Operator consequence

There are now at least four postures per surface: native checkout on the platform, cart transfer to your own checkout, your own agent operating inside the platform, or a plain referral. Each trades conversion, data and control differently. Choose per surface and measure, rather than accepting whichever default your commerce platform ships.

What is still unproven

The Walmart figure is one retailer, one early implementation, and a reported ratio rather than published data. It may say more about that implementation than about native checkout as a model. No platform has published how many merchants use native AI checkout or how it performs, and no merchant has published basket size, return rate or repeat purchase for AI-surface orders against site orders.

Updated view

Revised. The original edition said 2026 architecture "consistently gives the interface away and keeps the transaction." The second half held. The first half was too simple. Native AI checkout neither won nor lost in 2026. It became one of several competing architectures, and the one disclosed comparison shows it is not automatically superior. The pattern among large retailers is to bring their own agent into the AI surface rather than let the surface absorb them. Smaller merchants, enrolled by platform defaults, may experience the opposite.

Evidence noteswhat the retailer still owns when checkout moves, agentic checkout as a platform default, retailers want the traffic, not the loss of the customer

Primary sourcesWIRED on Walmart's ChatGPT checkout test, OpenAI, Powering product discovery in ChatGPT, OpenAI, monetization for apps in ChatGPT, Google Merchant Center, UCP integration hub, Shopify Help, Google AI Mode and Gemini, TikTok, agentic solutions

Commerce gets a software interface

What changed

Storefronts, checkouts and back offices acquired interfaces built for software to operate, and most merchants got them through their platforms rather than through projects of their own.

Evidence

Shopify made WebMCP tools live on August 5 across every Liquid storefront, with nothing to install, covering catalog search, product display, cart updates and the handoff to checkout. On September 28 it extended them into checkout, where an agent can read and update the buyer's active checkout and submit the order after buyer confirmation. Klaviyo exposed more than 260 MCP tools, including one that sends a campaign. Amazon's Seller Assistant plugin brings seller data and actions into Claude, in beta, and Amazon Quick. UCP and OpenAI's Agentic Commerce Protocol define the transaction layer between agent platforms and merchants.

Why it matters

A storefront now has two interfaces: a human interface of rendered pages, and a software interface of declared tools, structured catalog and transaction calls. The visual website does not disappear. It gains a machine-operable counterpart. Shopify's design makes the important choice explicit: the agent's tools "use the same state as the checkout UI," so the person and the software see the same cart, the same totals and the same validation. These interfaces work at different layers. WebMCP operates a page. MCP exposes a vendor's tools. UCP and ACP structure a transaction. Personal Agent Protocol, if it ships, would structure the session around all of them.

Operator consequence

Agent readiness may already exist in your stack without anyone having decided it should. Audit what your platform exposes to software today, and name an owner for what that interface says. A price, a shipping rule or an availability answer now has two readers.

What is still unproven

No WebMCP order volume, conversion rate or error rate has been published. Agent support is limited to Chromium-based browsers, and Shopify's checkout tools exclude several common checkout types. Nobody has published what it costs to keep two interfaces accurate.

Updated view

Corrected. The original edition called WebMCP a draft standard behind a browser flag. It had already shipped at platform scale.

Evidence notesthe storefront's second front door, ecommerce software becoming infrastructure agents query

Primary sourcesShopify, WebMCP on Liquid and Hydrogen, Shopify, WebMCP support for checkout, Klaviyo MCP server documentation, OpenAI, Agentic Checkout Spec

Measurement splits into consideration and transaction

What changed

First-party measurement for AI shopping arrived in 2026, and each instrument covers one half of the journey.

Evidence

Google's Search Console generative AI report shows impressions of a site's pages inside AI Overviews and AI Mode, with no queries and no clicks. Google's UCP Analytics in Merchant Center starts at the Buy click and reports purchases, purchase rate, average order value and cancellations, with no impressions. Merchant Center's AI performance insights compare share of voice on AI surfaces in five markets. Shopify reported that AI-driven traffic and orders to its merchants tripled year over year in the second quarter, while saying "the volume from agentic commerce is still small relative to our massive GMV." Surveys from Global Payments and ACI Worldwide, a week apart, put comfort with AI purchasing at 69% and 7% respectively, because they asked different questions.

Why it matters

There are two measurement problems. Consideration measurement asks what the AI retrieved, compared, rejected and recommended. Transaction measurement asks what happened after the shopper entered the commerce flow. The transaction half now has a real denominator: UCP Analytics divides purchases by Buy clicks. The consideration half still has none. No product reports how often a merchant was eligible for an answer and lost it.

Operator consequence

Reconcile AI-surface purchases against your order system, and cart transfers against completed orders on your own site. Report delegation separately: research, recommendation, cart building, approved purchase, standing authority and unattended orders are six different behaviors, and a single adoption percentage hides which one your business is seeing. Treat "AI-attributed orders" as a description of where a sale completed, not proof the AI created the demand.

What is still unproven

There is no cross-platform definition of an AI impression, no consideration denominator, and no published agent-initiated transaction volume from any platform, network or retailer. Shopify's tripling is a growth rate on an undisclosed base.

Updated view

Revised. The original edition framed this as GEO becoming an operating discipline. The more useful line is between consideration and transaction, because only one side of it is being instrumented, and the side that is not is the one marketers most need.

Evidence notesUCP Analytics and what it cannot see, the adoption definition problem, the measurement problem

Primary sourcesGoogle, UCP Analytics in Merchant Center, Google, Merchant API UCP performance reports, Google Search Central, generative AI performance reports, Shopify second quarter 2026 earnings call transcript

Trust becomes an operating layer

What changed

The industry stopped treating agent trust as one question. Identity, delegation, merchant permission and evidence are being built as separate layers, by separate parties, and the absence of permission is now being enforced.

Evidence

On September 20, Amazon blocked Meta's Muse agent from its store, saying the agent "does not identify itself." On October 6, Meta and Sierra announced Personal Agent Protocol, in which "consumers decide what access to give their personal agents, and companies set parameters for what those agents can do"; its specification had not been published as of this update. Ant International, Mastercard and Visa began Know Your Agent interoperability work in September while keeping each network's own decisioning. Mastercard began United States testing of a score estimating how likely a transaction was initiated by an AI agent. Shopify's checkout documentation states that its agent signature, Web Bot Auth, does not grant permission to place an order. IDEMIA announced payment tokens restricted by merchant, amount, category and time, with proof of consent designed to survive a later dispute.

Why it matters

A transaction initiated by software has to answer six questions. Who is acting: the agent's identity. Who it is acting for: the customer's identity and account. What the customer authorized: the scope of delegation. What the business will allow: merchant permission. What evidence proves it: consent records and logs. What still requires risk judgment: the issuer's or merchant's decision. Identity is not authorization. Authorization is not merchant permission. Merchant permission is not transaction legitimacy. Each layer can pass while the next one fails.

There is a seventh question upstream of all six. Anthropic's Project Swap, a controlled 201-person agent market, found its agents' rankings agreed with participants' own pairwise preferences 61% of the time, and attributed 85% of the market's shortfall to imperfect models of what people wanted rather than to negotiation. An agent can be fully authorized and still buy the wrong thing.

Operator consequence

Decide now what your business will allow an identified agent to do, by action: read a policy, check stock, build a cart, place an order, change an address. Retain evidence of what was authorized and what was executed, because disputes will turn on it.

What is still unproven

Nothing published shows one network accepting another's agent verification without its own check. There is no published dispute or liability framework for an authorized agent's mistake, and no data on false declines of legitimate agent transactions. Personal Agent Protocol is a design, not a deployed standard.

Updated view

Strengthened and sharpened. In September, consumer and merchant authorization were "being built by different parties on different timelines." Personal Agent Protocol proposes putting both grants in one session, and the Muse dispute showed what happens without either.

Evidence notesPersonal Agent Protocol, Know Your Agent, knowing what the shopper wants

Primary sourcesSierra, Introducing Personal Agent Protocol, Mastercard, new trust and intelligence services, Shopify, Checkout WebMCP documentation, Ant International, Know Your Agent interoperability, Anthropic, Project Swap, GeekWire on Amazon blocking Muse

Advertising moves inside the shopping interface

What changed

Paid placement entered conversational shopping, mostly by extending existing retail media systems to a new surface rather than by building new ones.

Evidence

Criteo's documentation defines a retailer's AI shopping assistant as a Sponsored Products page type. Where a retailer enables it, existing campaigns become eligible by default, at standard cost per click, and the retailer's system or its LLM partner extracts keywords from the conversation and passes them as a standard ad request. Albertsons has run it since June. Walmart sells Sponsored Prompts inside Sparky. Amazon reports that shoppers who click its Sponsored Prompts convert 48% more often than those who do not. OpenAI began testing Sponsored Agents on September 16, a labeled conversation with a business's agent after an ad, and reported a $1 billion annualized run rate for ChatGPT Ads. Google and TikTok are both connecting ad units to checkout.

Why it matters

The interface changes more than the auction does. In Criteo's design, the advertising system never reads the conversation. The assistant translates it back into a keyword, and the keyword enters the auction that already exists. The keyword did not disappear in conversational commerce. It moved behind the conversation. Two things genuinely change. Slots shrink, since an assistant typically shows three to five products rather than a page of results. And a new commercial step appears: whoever translates the conversation into a query now shapes which advertisers compete.

Operator consequence

Filter reporting to the assistant surface before bidding on it. If you run an assistant, treat keyword extraction as a commercial system and decide how sponsored results are labeled before switching the inventory on. If a brand-run agent answers questions after an ad, decide what product data grounds it and who approves its claims.

What is still unproven

No platform has published performance data for sponsored placements inside an assistant against search. Amazon's comparison is between shoppers who clicked an ad and those who did not, which is not a measure of the ad's effect. The boundary between organic answer and paid placement is stated by platforms and has not been independently audited.

Updated view

Revised. The original edition framed this shift as advertising becoming conversational. The evidence since then says something more specific: existing retail media infrastructure is absorbing the conversation as a page type, while new conversational formats remain tests.

Evidence notesAI assistants as a retail media page type, the ad click becoming a conversation

Primary sourcesCriteo, AI Assistant page type for retailers, Criteo, Sponsored Products in AI assistants for advertisers, Albertsons Media Collective announcement, OpenAI, Reimagining advertising with AI, OpenAI, ChatGPT Ads run rate

AI moves from buyer to operator

What changed

Software gained the ability to write, not just read, inside merchant systems, and the broadest write access so far arrived on the merchant side rather than the shopper side.

Evidence

On September 23, Amazon said Seller Assistant workflows can "continuously monitor and execute routine tasks like restocking and pricing adjustments," with seller-defined guardrails and "a complete audit trail," and with sellers "reviewing and approving them before they're carried out." Sellers choose whether a workflow only recommends or acts. Amazon's Full-Funnel Campaigns, documented September 29, take a daily budget that Amazon's AI "allocates across sponsored ads, display, video, and streaming TV in real time." Klaviyo's tools let an agent send a campaign to its audience. Anthropic's open-source merchant agent stages every write until a person approves it. Shopify documented official connectors for seven general-purpose assistants that can edit products, collections, inventory and percentage discounts with write access, while blocking refunds, order cancellation and capture, returns, gift cards and changes to payments, taxes and domains for every connected tool. On October 20, Visa, BILL and Billtrust put an agent into live supplier payments with a deliberately narrow mandate: it completes card payments the buyer has already approved, through supplier portals that recognize it with Visa's Trusted Agent Protocol, and Visa says it makes no payment decisions. Long-horizon simulations remain sobering: in E-Commerce Bench, the model that finished with the most assets sent 18.48% of its spend to fraudulent suppliers.

Why it matters

Reading is usually reversible. Writing is not. A bad analysis can be caught before anyone acts on it. A price change, a reallocated budget or a sent campaign has already reached the market. The products shipping now treat delegation level as a setting: Amazon's DVA+ offers a default where AI allocates budget and an advanced mode with format-level control. Choosing the level is itself the strategic decision.

Operator consequence

Grant write authority by workflow, not by tool. Start where actions are frequent, bounded and cheap to reverse, such as restock suggestions and bid adjustments inside a ceiling. Require every executed change to be logged as an event your data can see, and measured against what it was supposed to move. Keep human the decisions that encode what the optimizer cannot see: the objective, the margin, the brand boundary and the standard of proof for scaling.

What is still unproven

No merchant or vendor has published production error, reversal or intervention rates for agent write actions. Amazon's figure that sellers accept recommendations over 90% of the time concerns recommendations, not executed actions. Every long-horizon benchmark runs in simulation.

Updated view

Strengthened substantially. The original edition treated merchant-side agents mainly as a reliability question. They are also where authority is moving fastest. If the largest change in AI commerce happens in operations before it happens in consumer purchasing, the evidence so far points that way.

Evidence noteschannel mix inside the algorithm, when an agent can hit send, proving the change worked

Primary sourcesAmazon, Seller Assistant plugin for Amazon Quick and Claude, Amazon Ads, Full-Funnel Campaigns, Amazon Ads, DVA+, Anthropic, commerce agents repository

Platform power shifts to the operating layer

What changed

Commerce platforms began competing to be the system a merchant operates from, across channels they do not own.

Evidence

Amazon now lets sellers connect eBay, Shopify, TikTok and Walmart accounts to Seller Central, import and link those listings, view orders and fulfill across channels, rolling out to United States sellers at no added cost. Editing a listing once for every channel and a cross-channel profitability view are announced as coming. The same Seller Assistant carries persistent memory of each seller's pricing patterns and inventory cycles, and travels into Claude and Amazon Quick. Instacart's Carrot Ads runs advertising for more than 310 retail partners, and in September Gopuff, which owns its own storefront, fulfillment and ad sales, chose to run its storefront advertising on it. Shopify's managed setting enrolls eligible stores in new AI channels as they appear. Anthropic describes Claude as "your intelligence layer, not a storefront or checkout." On October 29, DoorDash agreed to acquire Instacart, pending shareholder and regulatory approval, which would put Instacart's enterprise technology, Carrot Ads and marketplace under the same owner as DoorDash's delivery network.

Why it matters

Channel ownership is not operating-layer ownership. A merchant can diversify where revenue comes from while consolidating how the business is run. Whoever holds the operating layer holds the memory, the workflows, the cross-channel data and, increasingly, the agent that acts on all three. That position compounds in a way a single sales channel does not.

Operator consequence

Before consolidating operations into any one platform's tools, establish three things: where the memory of your business lives and whether you can export it, which actions that platform's agent can take on channels it does not own, and what it would cost to leave.

What is still unproven

This is the newest shift in the report and the least proven. Amazon's multichannel tools are rolling out, its editing and profitability features are announced rather than live, and no uptake has been published. Amazon says off-Amazon data will not inform its retail decisions. That is a policy commitment, not an audited one. The DoorDash and Instacart agreement is not expected to close before the end of 2027.

Evidence notesretail media becoming infrastructure, Anthropic's intelligence layer

Primary sourcesAmazon, multichannel selling in Seller Central, Instacart and Gopuff announcement, Shopify Help, agentic storefronts, Anthropic, Claude for commerce

Organizations need a governance model for software that acts

What changed

Approval is moving from the transaction to the rule, and the most important permissions are starting to be written as limits on what software may not do.

Evidence

Amazon lists buying items automatically at a set price, and scheduling recurring purchases, among its shopping assistant's capabilities. A person still decides, but in advance, by setting the condition. Payment design follows the same pattern: Stripe's shared payment tokens are scoped to one seller with a maximum amount and an expiry, and IDEMIA's tokens can be restricted by merchant, amount, category and time. Shopify requires an agent to ask the buyer again if a checkout total changes. On the other side, Walmart published a customer letter in September committing that information shared with Sparky will not be used to raise a price or hide lower-priced options: "We price the product, not the person." That arrived as the comment period closed on a proposed Federal Trade Commission policy statement on personalized pricing.

Why it matters

Once software can act, governance is no longer a review of a tool. It is a design for decisions. For each workflow, a business has to answer what software may recommend, what it may draft, what it may execute with approval, what it may execute under a pre-authorized rule, and what it must never do. Then: who owns an error, how a person overrides the system, how permissions are revoked, and how performance is judged from outside the system that produced it. Project Swap adds a useful test: participants who judged the agent's summary of them complete would delegate 34% of a budget without veto rights, against 23% for those who did not. Delegated authority should scale with demonstrated accuracy, not with capability alone.

Operator consequence

Prove the workflow first. Automate second. AI does not fix an ungoverned workflow running on untrusted data. It amplifies it. Before granting execution, the workflow should have a written owner, clean inputs, a known failure mode, a reversal path and a measurement that does not come from the vendor's own optimizer.

What is still unproven

No production merchant has published how often its agents' actions were overridden or reversed. Walmart's commitments are voluntary and unaudited. Whether a standing rule counts as consent in a dispute has not been tested.

Evidence notesnegative permissions and Walmart's pricing promise, payment choice becoming policy, the rail-level argument

Primary sourcesWalmart, letter from the CEO, FTC, proposed policy statement on personalized pricing, Stripe, shared payment tokens, IDEMIA Secure Transactions announcement, Amazon, Alexa for Shopping

The disconfirming case

The strongest case against this report

A report about change should try hardest to disprove itself. These are the counterarguments I take most seriously, and where I think each one stands.

Most AI shopping still involves a human at every decision.
Accepted. Every consumer purchase I can verify involves either per-transaction approval or a rule the person set. That is why this report describes authority shifting, not humans leaving.
Agent-initiated transaction volume remains undisclosed.
Accepted. Shopify reports growth on an undisclosed base and calls the volume small. If 2027 ends with no platform publishing the number, the likeliest explanation is that it is not yet worth publishing.
Native AI checkout may simply convert worse.
Partly accepted. Walmart's experience is the only disclosed comparison, and it went against the AI surface. It is one implementation, not a verdict on the model, and OpenAI, Google and TikTok all still offer native checkout alongside merchant-controlled paths. What it establishes is that native checkout is not automatically superior.
Merchants may resist giving software write authority.
Not yet supported. Amazon and Klaviyo shipped write actions, and Amazon reports high acceptance of its recommendations. Resistance may still appear once errors are visible, which is why reversal data is on the watchlist.
Major retailers may prefer selective integrations over open access.
Accepted, and already happening. Amazon blocks outside agents while opening its seller tools to Claude. Walmart first brought Sparky into other AI surfaces, then announced an Agent Gateway that admits outside agents under Walmart-controlled identity, permissions and transaction rules. Openness is being granted per relationship, not per protocol.
Consumers may not delegate high-value purchases.
Accepted for 2027. The surveys show comfort falling with price, and they measure willingness, not behavior.
Commerce protocols may fragment.
Partly accepted. UCP, ACP, MCP, WebMCP and Personal Agent Protocol operate at different layers, which limits direct conflict, but merchants still face several integrations, and platform defaults are currently doing the integration work for them.
Payment and fraud systems may add friction.
Open. Mastercard's agent score exists because issuers cannot yet tell legitimate agent activity from suspicious activity. Whether that produces friction or approval depends on data nobody has published.
Existing search, marketplaces and retailer apps remain powerful.
Accepted. The largest AI shopping deployments are inside Amazon and Walmart, not outside them.
AI may become another interface rather than a new commerce channel.
Partly accepted for consumers. On the merchant side, the evidence points the other way: software that changes prices and budgets is not an interface.
The largest change may happen in operations before consumer purchasing.
Accepted. This edition was restructured around it.

2027 signal tracker

These are the developments that would most change my confidence. No score and no probability.

Developments that would change confidence in the AI Commerce 2027 thesis
Signal to watch	Why it matters	What it would change in the thesis
Any platform, network or retailer publishing agent-initiated orders as a share of total orders	It is the number that would turn capability into a market	Would retire the protected sentence and reframe Shifts 02 and 04 around volume
A second published comparison of AI-surface checkout against merchant checkout	Walmart's result is the only one	Would confirm or reverse the weakening of Shift 02
Merchants disclosing meaningful revenue from native AI checkout	Separates availability from use	Would show native checkout winning the transaction, not just being offered
Production error, reversal or intervention rates for merchant-side agent writes	Moves reliability evidence out of simulation	Would test whether Shift 07 holds once errors are visible
Personal Agent Protocol v0.1, and who implements it	First attempt to join customer and merchant grants in one session	Would show whether Shift 05's two-grant model reaches production
Cross-network acceptance of agent verification	The moment trust becomes portable rather than coordinated	Would move Shift 05 from coordination to infrastructure
Data on false declines and disputes for agent transactions	Shows whether payment friction is real	Would decide whether payments slow the consumer side
A published dispute and liability framework for authorized agent mistakes	Determines who pays when a permitted agent errs	Would show whether standing rules count as consent in Shift 09
A consideration denominator: how often a merchant was eligible for an AI answer and lost	The missing half of AI measurement	Would close the gap at the center of Shift 04
Published performance for sponsored placements inside assistants	Tests whether the new surface earns a premium	Would show whether Shift 06 stays an absorbed page type or becomes a new stack
Uptake of multichannel operating tools and cross-channel agent actions	Shows whether the operating layer consolidates	Would confirm or remove Shift 08
Post-purchase agents handling returns, amendments and refunds at scale	A purchase an agent cannot amend is an incomplete capability	Would extend the stack's authority past the transaction

2027 AI Commerce Evidence Tracker

Verified developments, newest first, updated through 2027. Entries record what changed, not what was promised, and link forward to the full analysis where one exists.

Tracker of verified AI commerce developments, newest first
Date	Company	Development	Affects	Evidence type	What changed
October 29, 2026	DoorDash and Instacart	Definitive agreement for DoorDash to acquire Instacart (about $17 billion equity value), subject to Instacart shareholder approval and U.S., Canadian and Israeli regulatory clearance; expected to close at the end of 2027 or in the first half of 2028; DoorDash expects to keep Instacart's brand, app and enterprise technology productsRead the analysis	Operating layer	Merger agreement (SEC filing) and company announcement	A delivery network agreed to buy the grocery technology, fulfillment and retail media stack many retailers rent, framing its AI strategy as winning physical fulfillment rather than the assistant; pending, with no combined AI product announced
October 26, 2026	Shopify	Knowledge base built into the admin under Agentic: storefront-drafted facts stay unpublished until approved, admin-linked facts publish when Shopify creates them, replacing the Knowledge Base app (retired January 15, 2027)Read the analysis	Software interface	Platform changelog and documentation	Non-product facts for AI agents became a merchant-approved, field-level record inside the platform; no AI channel is named as querying it and no outcome data is published
October 26, 2026	The RealReal	Tightened bot defenses so outside agents find it much harder to log in, add to cart and check out, while they can still surface listings, after a reported Muse test repeatedly renewed 20-minute cart holds on one-of-one items without a purchaseRead the analysis	Trust	Company statement reported by The Verge	A retailer separated discovery from cart and checkout permissions for outside agents, and the trigger was a reservation, not a purchase
October 21, 2026	Meta	Reported more than 10 million Muse setups in the US and Canada in about six weeks, about 25% of setups using it on a given day, shopping as the top use case (over 25% of weekly actives) and an average purchase over $200 including travelRead the analysis	Measurement	Earnings call	A consumer agent published usage and purchase-size figures, but no purchase count, transaction volume or weekly active base; transaction fees remain planned, not charged
October 21, 2026	Walmart	Announced Agent Profiles (launching within a month) and an invitation-only Agent Gateway beta that connects outside agents through Sparky over MCP, with customer approval or spending limits and no card access for agentsRead the analysis	Trust	Company announcement	A retailer defined outside agents as separate, revocable users of a customer's account instead of blocking them or requiring its own agent; no participants or usage disclosed
October 20, 2026	Visa, BILL and Billtrust	Live pilot in which BILL's Payment Agent completes buyer-approved supplier invoice payments through Billtrust portals using Visa's Trusted Agent Protocol and tokenized credentialsRead the analysis	Buyer to operator	Company announcement	An agent moved real business payments, but only by executing instructions already approved on the buyer side; no volume disclosed
October 16, 2026	Shopify	Checkout MCP and Cart MCP support UCP buyer consent (2026-08-25): analytics, preferences, sale or sharing, and marketing with email and SMSRead the analysis	Trust	Platform documentation	Consent state can travel with agentic checkout, but no AI platform has said it sends it
October 15, 2026	Google	Universal Cart live in U.S. Search and Gemini, with checkout on Google or a one-way transfer to the merchant's cartRead the analysis	Website handoff	Company announcement and documentation	The May announcement became a live product. The shopping state now sits with Google until checkout, and no usage has been disclosed
October 2026	Shopify	Official connectors let merchants manage products, collections, inventory and percentage discounts from ChatGPT, Claude, Gemini, Grok, Meta Muse, Perplexity and Microsoft CopilotRead the analysis	Buyer to operator	Platform documentation	Catalog work moved into general-purpose assistants, while refunds, captures, cancellations, returns, gift cards, payments, taxes and domains stayed blocked for every connected tool
October 11, 2026	Google	UCP Analytics in Merchant Center, with an alpha API covering AI Mode and Gemini, reporting Buy clicks, purchases, purchase rate, AOV and cancellationsRead the analysis	Measurement	Platform documentation	The transaction funnel for AI checkout got a denominator. Consideration, what the AI looked at before the Buy click, still has none
October 6, 2026	Sierra and Meta	Personal Agent Protocol announced, with Genesys, Instinct, Rocket, Shopify, Stripe and Walmart as named partnersRead the analysis	Trust	Company announcement	Customer access and business permission proposed as two grants in one session. Specification not yet published
October 5, 2026	TikTok	Buy Direct, a native in-feed checkout that requires a UCP integration, and a Shopping Assistant, both in eligibility-based testing	Website handoff	Company announcement	Another surface offered native checkout while keeping the brand as merchant of record
September 30, 2026	Mastercard	A score estimating how likely a transaction was initiated by an AI agent, in United States testing	Trust	Company announcement	Networks began giving issuers a signal for agent activity rather than inferring it from behavior
September 29, 2026	Amazon Ads	Full-Funnel Campaigns allocate one daily budget across sponsored ads, display, video and streaming TV in real timeRead the analysis	Buyer to operator	Product documentation	Budget allocation and channel mix moved inside the optimizer by default
September 28, 2026	Shopify	WebMCP tools extended into checkout, with order placement after buyer confirmationRead the analysis	Software interface	Developer changelog	The software interface reached checkout, while agent identity was explicitly separated from permission to buy
September 25, 2026	Walmart	CEO letter: information shared with Sparky will not be used to raise a price or hide lower-priced optionsRead the analysis	Governance	Company commitment	A retailer published limits on what its assistant may do with what it knows
September 24, 2026	Anthropic	Project Swap, a controlled 201 person agent marketRead the analysis	Trust	Company research, controlled experiment	Imperfect models of what people wanted, not negotiation, accounted for most of the shortfall
September 23, 2026	Amazon	Seller Assistant workflows that execute restocking and pricing under seller guardrails, a plugin for Claude and Amazon Quick, and multichannel tools in Seller Central	Operating layer	Company announcement	Merchant-side write authority and cross-channel operations arrived in the same release
September 22, 2026	Shopify and Google	Direct checkout in Google AI Mode and Gemini is active by default for eligible Shopify stores, while Shopify's managed setting automatically enrolls eligible stores in new agentic storefront channels as they become availableRead the analysis	Website handoff	Vendor documentation	Agent checkout arrived as a platform default with an opt out, moving the evidence from named retailer implementations to platform level distribution
September 20, 2026	Amazon	Blocked Meta's Muse agent from shopping on Amazon.com, saying the agent did not identify itself	Trust	Trade reporting with company statement	Merchant permission was enforced against an agent rather than debated
September 18, 2026	Ant International	Account for Agent, a business account for agent use built on know your agent enabled smart contractsRead the analysis	Trust	Company announcement	Agent identity machinery pointed at merchant operations rather than only at buyers
September 16, 2026	Tapestry and Google	Coach and Kate Spade purchasable in Gemini and AI Mode through UCP, checkout via Google Pay with no redirect	Website handoff	Company release, primary	A named brand shipped agentic checkout in production, with explicit consumer approval per transaction
September 16, 2026	OpenAI	Sponsored Agents test, plus ChatGPT Ads for Shopify merchantsRead the analysis	Advertising	Company announcement	A labeled commercial conversation appeared after the ad click, separate from the assistant
September 15, 2026	Cloudflare	Separate search, training and agent crawler controls, with Disallow AI TrainingRead the analysis	Trust	Vendor product change	Access to content became four decisions instead of one
September 9, 2026	Ant International, Mastercard, Visa	Know Your Agent interoperability collaborationRead the analysis	Trust	Joint announcement	The industry aligned on the questions about an agent, while each network kept its own decision
August 31, 2026	Alibaba Qwen team	E-Commerce Bench, a 365 day simulated store operation across 18 models	Buyer to operator	Independent research, simulation	Showed the top earning model was also among the worst at avoiding fraudulent suppliers
August 31, 2026	Google	Generative AI performance report in Search Console expanded worldwideRead the analysis	Measurement	Platform documentation	Site owners got a first party view of appearances in AI surfaces, with no queries or clicks
August 5, 2026	Shopify	WebMCP tools live on every Liquid storefront and the Hydrogen developer preview, with nothing to installRead the analysis	Software interface	Developer changelog	An agent interface shipped as a platform default rather than an app
August 5, 2026	Shopify	Second quarter call: AI-driven traffic and orders to Shopify stores tripled year over year, with agentic volume "still small relative to our massive GMV"	Measurement	Earnings call	Growth was disclosed on an undisclosed base, which is still not transaction volume
June 23, 2026	Criteo and Albertsons	Sponsored Products running inside a retailer's AI shopping assistant, defined by Criteo as a page typeRead the analysis	Advertising	Company announcement and documentation	Retail media absorbed the assistant into existing campaigns, bids and reporting
May 20, 2026	Google	Universal Cart, UCP in ad formats, AI performance insights in Merchant Center	Website handoff	Company announcement	Cross retailer carts and share of voice measurement entered the same stack
March 24, 2026	OpenAI	Shifted emphasis toward product discovery and let merchants use their own checkout experiences	Website handoff	Company announcement	Native AI checkout became one option among several rather than the presumed path
March 18, 2026	Walmart	WIRED reported that Walmart's native checkout test inside ChatGPT converted at roughly a third of the rate of click-through to Walmart.com	Website handoff	Trade reporting	The one disclosed comparison favored the merchant's own checkout, and Walmart moved to its own agent inside AI surfaces
February 10, 2026	W3C, Google, Microsoft	WebMCP draft published, early Chrome implementation behind a flag	Software interface	Standards draft	A page level way for sites to declare tools to agents entered standardization
January 2026	Google and partners	Universal Commerce Protocol released as an open standardRead the analysis	Website handoff	Company announcement	A shared structure for agent to merchant transactions became available

What 2027 is actually about

The version of this story told loudest is that consumers will hand their shopping to agents. The evidence does not support that for 2027. Every agent purchase I can verify still begins with a person approving it or setting the rule, and the one disclosed comparison of native AI checkout against a retailer's own checkout favored the retailer.

What has changed is quieter and harder to reverse. Commerce systems are now built on the assumption that software may be a participant. Storefronts expose tools. Payment tokens carry limits. Merchants decide which agents may enter. Ad systems translate conversations into auctions. And inside the merchant's own business, software has started changing prices, moving budgets and sending campaigns under rules a person wrote.

That is why the practical 2027 question for an operator is not whether to believe in agentic commerce. It is which decisions you are prepared to let software execute, under what limits, with what evidence retained, and measured by whom.

If software can already act inside your business, what have you actually decided it is allowed to do?

Where this builds on earlier research

The pillar pages hold the frameworks this report builds on: generative engine optimization for how AI systems find, describe and recommend products, and agentic engine optimization for what changes when software evaluates and buys. The evidence notes beneath each shift link to the full analysis of individual developments, and the tracker links forward as new research is published.

Method and sources

Claims are drawn from primary sources where they exist: company announcements, product documentation, developer changelogs, earnings calls and published research. Where a figure comes from a company describing its own product, it is attributed to that company. Benchmark results come from simulations and are not evidence about production performance. Survey results measure stated willingness, not behavior. Absence of evidence is reported as the limit of my own search rather than proof of absence. In particular, I found no published agent-initiated transaction volume from any platform, network or retailer as of October 12, 2026. If that number exists somewhere I have not looked, this report should change first where it says so.

AI Commerce 2027

The short version

What AI commerce means

What changed in this update

The AI commerce stack

One storefront, two front doors

Human interface

Agent interface

The 2027 operating model: nine shifts

Discovery becomes machine-mediated

What changed

Evidence

Why it matters

Operator consequence

What is still unproven

Updated view

The merchant website stops being the mandatory handoff, not the inevitable loser

What changed

Evidence

Why it matters

Operator consequence

What is still unproven

Updated view

Commerce gets a software interface

What changed

Evidence

Why it matters

Operator consequence

What is still unproven

Updated view

Measurement splits into consideration and transaction

What changed

Evidence

Why it matters

Operator consequence

What is still unproven

Updated view

Trust becomes an operating layer

What changed

Evidence

Why it matters

Operator consequence

What is still unproven

Updated view

Advertising moves inside the shopping interface

What changed

Evidence

Why it matters

Operator consequence

What is still unproven

Updated view

AI moves from buyer to operator

What changed

Evidence

Why it matters

Operator consequence

What is still unproven

Updated view

Platform power shifts to the operating layer

What changed

Evidence

Why it matters

Operator consequence

What is still unproven

Organizations need a governance model for software that acts

What changed

Evidence

Why it matters

Operator consequence

What is still unproven

The strongest case against this report

Most AI shopping still involves a human at every decision.

Agent-initiated transaction volume remains undisclosed.

Native AI checkout may simply convert worse.

Merchants may resist giving software write authority.

Major retailers may prefer selective integrations over open access.

Consumers may not delegate high-value purchases.

Commerce protocols may fragment.

Payment and fraud systems may add friction.

Existing search, marketplaces and retailer apps remain powerful.