Shopify lets browser agents complete checkout — 3-D Secure stays with the buyer
On 28 September 2026 Shopify switched on WebMCP tools for checkout: browser agents can read the checkout, fill in fields and submit the order once the buyer has confirmed. The capability goes to all eligible Shopify merchants automatically, with no configuration. As soon as 3-D Secure or a blocking extension requires input, control goes back to the human.
What happened
On 28 September 2026 Shopify announced WebMCP support for checkout in its own developer changelog. Browser agents get four tools: read the checkout (including messages and order details after completion), update supported fields, submit the order after the buyer has confirmed, and navigate back to the storefront. Where the process needs input from the buyer, for example for 3-D Secure or a blocking checkout extension, the tools hand control back to them. According to Shopify, eligible merchants receive the capability automatically and no configuration is required. TechCrunch names Gil Greenberg, product manager for agentic commerce at Shopify, as the source of the announcement. The storefront and cart tools were already live, so Shopify now covers the entire journey through to order confirmation.
Who is affected
All online merchants on Shopify, who can now receive orders triggered by an agent in the customer's browser — without having switched anything on. Indirectly also payment service providers and merchants on other systems, who will now be asked why their checkout is unreadable for agents.
Analysis
A week ago the story was a single agent, Meta's Muse, which is to pay via Shop Pay (our piece of 23 September). Now Shopify is opening its checkout in principle to any browser agent that speaks the protocol. That is the bigger step, because it no longer requires a partnership. Amazon locks agents out, Shopify throws the door wide open — and defines the point at which the human has to take over again.
That point is the most interesting part of the announcement for merchants. The agent may do everything except strong customer authentication. That is logical, because the liability shift for card payments hinges on 3-D Secure. Anyone who receives a chargeback after an agent order will therefore still argue with what the customer confirmed themselves, not with what the agent did. I set out the open questions in my commentary on liability in agentic payments; this announcement does not solve them, it only makes them more urgent. The changelog says nothing about countries or an opt-out.
What to do now
- Shopify merchants: check in the admin and with the payment service provider whether agent orders can be recognised in the order data — otherwise there is no basis at all in a dispute.
- Know the exemptions from strong customer authentication in your own checkout: every exemption that saves friction for humans also saves the proof of liability for agents.
- If you are not on Shopify: clarify with your own provider whether and how agents can operate your checkout, before customers try it out.