The web is splitting into agent-friendly and agent-hostile…

Amazon, Delta, Yelp, JPMorgan Chase, and Charles Schwab have all confirmed blocks on personal AI agents. Meanwhile Shopify, Walmart, Gap, Sephora, and Best Buy are letting them in — and small storefronts riding those networks are getting routed buyer traffic by default.

Amazon, Delta, Yelp, JPMorgan Chase, and Charles Schwab have all confirmed, through reporting at The Verge, Bloomberg, CNBC, TechCrunch, and The Next Web, that they’re turning personal AI agents away at the door. Shopify, Walmart, Gap, Sephora, and Best Buy are letting them in. That split, which has crystallized over the last two weeks, is becoming the most consequential distribution variable in B2C commerce since mobile.

The agents in question are real buyers. Meta’s Muse, xAI’s Grok, OpenAI’s Dots, and Instinct are now shopping, booking, and transacting for users at scale. The Verge reported on October 17 that users of these agents have reported blocks preventing them from performing tasks across top websites. Yelp will only route agents that pay into its data-licensing program; others, it told TechCrunch, “will likely fail.” Delta’s Heena Chavda said the airline is “continuing to evaluate” external agents. Charles Schwab’s CEO Rick Wurster told Bloomberg Television the firm blocks outside agents “between tens and twenties of times per week,” steering clients to Schwab’s own assistant, Charley. Jamie Dimon put it plainly on JPMorgan’s October 13 earnings call: “You don’t want rogue agents.”

The quieter story is on the other side of the wall. An open standard being developed by Meta, Walmart, Stripe, Sierra, Genesys, Rocket, NiCE, and Decagon is aimed at defining how agents communicate with businesses for online commerce. Shopify’s storefront network is open by default. A small retailer on Shopify is, right now, agent-readable to millions of delegated buyers. A comparable storefront behind Cloudflare’s September 15 default, which blocks user-launched agents on any ad-serving page with no exclusion directive available, is invisible.

Most founders don’t know which side they’re on. The access variable is set by defaults they never configured, a point we’ve covered in prior reporting. This is the kind of distribution shift LemonLime is built to surface for small B2C businesses before the founder notices the traffic has already rerouted.

The pattern echoes the mid-2000s SEO bifurcation, when sites indexable by Google quietly absorbed the demand of sites that weren’t. The gatekeeping has moved up the stack. The economics haven’t.

The web is splitting into agent-friendly and agent-hostile zones. Small storefronts on Shopify are getting the sales.

Sources