What websites blocking AI agents means for your work

AI agents built by Meta, OpenAI, xAI and others are being turned away by popular websites. According to The Verge, Yelp says it only allows agents that pay for its data licensing program. Delta Air Lines is preventing agents from booking tickets. JPMorgan Chase and Charles Schwab are blocking them from accounts, citing security concerns. The main point for you: whether an agent can finish a task now depends on each website’s own rules, not on how smart the agent is.

The background you need

A chatbot answers questions. An AI agent goes a step further and acts for you. It opens web pages, clicks buttons, fills in forms and completes a checkout. The Verge describes the pitch: agents that book a dinner reservation, clean out your inbox or buy new shoes on your behalf.

To do that, an agent usually works the website the way you would. It reads the page, finds the right field and presses the button. Most websites were built for people at a keyboard, not for software that shops for them. A site can still notice when something other than a person is clicking, and it can refuse.

Two older ideas help here.

Crawlers are programs that read web pages in bulk. Search engines use them to build an index. AI companies use them to gather training data. Websites have had ways to manage crawlers for a long time.

Anti-bot systems are defenses that look for automated behavior and then block it or challenge it, often with a puzzle that proves you are human. They exist to stop scalpers, scammers and hackers. An AI agent is a different kind of visitor from a crawler. It acts for one person on one task. Yet it can look like the bots these systems were built to stop.

Sites have several reasons to say no:

• Rules. Websites have terms of service, and they can decide who may use the site and how.
• Ads. Many sites earn money when people see ads while they browse. A bot that goes straight to checkout skips them.
• Data. Some sites sell access to their information. An agent reading it for free undercuts that business.
• Security. Sites that hold money or personal accounts are especially careful about who gets in.

An analogy. Think of an agent as a personal assistant you send to a store with a shopping list. The store can let the assistant in, ask for a fee, or turn them away at the door.

The analogy breaks in one important way. A human assistant is one visible person. An agent is software. To a site’s defenses, it can look like the automated traffic those defenses were built to stop. So an agent can get turned away even when the store had no rule against assistants.

What actually changed

Some of this was already true.

Amazon banned Perplexity’s agentic shopping feature last year and sued the startup, The Verge reports. Amazon said it had repeatedly asked Perplexity to stop. Perplexity argued that Amazon does not want agents on its platform because fewer human shoppers would see its ads. The Verge says that concern is an actual issue for Amazon.

A judge later ordered Perplexity to stop its agents from shopping on Amazon. An appeals court overturned that ruling in August, and Amazon has since filed an amended complaint. The legal question is still open.

Cloudflare, a company that sits between many websites and their visitors, added a one-click block for AI crawlers in 2025. It then began blocking crawlers that scrape sites for both search indexing and AI training at the same time.

Here is what is new. In recent weeks, users of Meta’s Muse, xAI’s Grok, OpenAI’s Dots and Instinct have reported blocks on top websites, according to The Verge. Named companies have now confirmed their positions:

• Yelp only allows agents that pay into its data licensing program.
• Delta blocks agents from booking tickets.
• JPMorgan Chase and Charles Schwab block agents from accounts, citing security concerns.
• Amazon said Muse’s continued access violates its site policies. There are also reports that Grok, Instinct’s agent and Dots cannot use Amazon.

Some users say Cars.com and Amtrak used to work with their agents and no longer do. The Verge says this suggests other companies could be quietly blocking agents.

Meta has taken a different route than fighting Amazon. It has partnered with Walmart, Gap, Sephora, Best Buy and others so Muse can shop on their sites. Shopify has also opened its network of storefronts to agents.

Meta’s public position is this: “Turning away a personal agent means turning away the customer behind it.”

Partnerships do not remove every barrier, though. Reports on Reddit suggest Google is blocking some accounts that use Muse, flagging them for suspicious activity. Other users report trouble checking out on Walmart despite its Meta partnership.

What it means for PMs, analysts and other knowledge workers

The key point is that access is decided one site at a time. That matters more than any feature list. An agent that can book a trip in a demo is only useful to you if the airline, hotel and expense tools in your actual workflow let it in. Here is what to do about it.

Check the sites, not the agent. Before you delegate a task, list every site it touches. Travel, banking and review data are areas where The Verge reports confirmed blocks. Don’t count on an agent to finish a booking or pull your account data there.

Expect quiet failures. The Cars.com and Amtrak reports suggest a site can change without notice. An agent that worked last month may stall halfway through today. Confirm results yourself. Look for the actual confirmation email or the receipt, not just the agent’s summary.

Prefer sanctioned routes. Partnerships and paid programs, like Meta’s retail deals, Shopify’s storefronts and Yelp’s licensing, are where agents are most likely to work. Even then, the Walmart checkout reports show that friction can remain.

When you evaluate tools, ask vendors directly which sites their agent is supported on, and what happens when it gets blocked.

If you own a product or website, this is a decision you will face too. Yelp, Delta and Meta show three options: charge for access, refuse it, or partner. Your anti-bot settings may already be making the choice for you without anyone deciding.

Watch next:

• The Amazon and Perplexity case
• Whether more sites copy Yelp’s pay-to-access model
• More human-check prompts on everyday sites. Chris Canal, CEO of the AI safety evaluator EquiStamp, told The Verge these blocks will make the web more “annoying” to use.

What we don’t know yet

• How widespread quiet blocking is. The Cars.com and Amtrak reports come from users, and those companies have not confirmed blocking.
• What OpenAI and Google plan to do. The Verge asked both for comment and did not immediately hear back. Instinct declined to comment.
• How the courts will settle it. The Amazon case could shape whether a site can legally keep out an agent that acts for a paying customer.
• What access will cost. The Verge does not report what Yelp charges or how many agent makers have signed up.
• How many failures are on purpose. Some blocks may come from general anti-bot systems rather than a decision to refuse agents. The reports do not say how often that happens.