On February 17, Amazon updated its Business Solutions Agreement with a new Agent Policy. Effective March 4 — this Tuesday — every AI tool operating on Amazon must comply with a set of rules that are worth reading in full.
Agents must identify themselves in every HTTP request by including "Agent/[agent name]" in the user agent string. They cannot "mimic the speed or pattern of human keystrokes, page navigation, or other interactions." They cannot circumvent CAPTCHAs. They must "respond truthfully to any question or prompt seeking to determine if interactions are coming from a human or a computer." And Amazon reserves the right to "block, limit, modify, or control" agent access at will.
Read the whole thing and a pattern emerges: Amazon just built a technical framework for identifying, monitoring, throttling, and killing any AI agent operating on its platform. The kill switch is literal — it's in the policy language.
Read it and you might think: reasonable. Transparency around bots, protections for the platform. Fine.
Now look at the other side of the ledger.
Amazon's "Buy for Me" agent is currently scraping third-party merchant sites — pulling product data, prices, and listings from retailers who never agreed to it — and surfacing those results inside Amazon's shopping interface. More than 180 merchants on Shopify, Squarespace, WooCommerce, and Wix have had their products listed on Buy for Me without consent. The merchants didn't opt in. There's no kill switch for them. There's no self-identification in HTTP headers. Amazon just helps itself to their catalog.
I wrote about this in Instant Checkout. Bobo Design Studio, a small jewelry and gift business, experienced what happens when Amazon's agent shops the open web without guardrails. The agent placed a $0 order — navigating to an external site, attempting checkout, failing silently. The merchant received an order notification with no payment and no customer contact information. The human customer has no idea the transaction failed. They're waiting for a package that will never arrive. In another case, the agent miscategorized a vinyl sticker as a pair of pants. This keeps happening — routine failures from an agent being deployed on merchants who never asked for it.
Amazon demands that competitors' agents self-identify, respond truthfully, and accept shutdown on demand. Amazon's own agent operates on the open web with no such obligations.
And Amazon is currently suing Perplexity for doing, on Amazon's listings, roughly what Buy for Me does to everyone else. Perplexity's Comet agent browses external sites to complete purchases. Amazon says that violates their terms — alleging Perplexity disguised its agent as a Chrome browser and refused to self-identify. The same behavior Amazon's new policy prohibits is the same behavior Amazon's own agent performs, just pointed in the other direction.
The pattern is deliberate.
The One-Way Valve
The structure of what Amazon is building is a one-way valve. Commerce flows toward Amazon — its agent can browse, scrape, and surface products from anywhere on the internet. Commerce does not flow away — competitors' agents cannot access Amazon's marketplace without complying with Amazon's rules, identifying themselves in every HTTP request, and accepting shutdown on demand.
The net result: Amazon's addressable market expands (the open web becomes its catalog) while its competitors' access to Amazon shrinks. Every order Buy for Me converts is an order that runs through Amazon. Every order Perplexity might have closed on an Amazon listing is one Amazon can now throttle.
In Instant Checkout, I describe this as Amazon's shift from "everything store" to "everything agent." Amazon would rather be your agent than your everything store. The store is just a fulfillment node. The agent is where the relationship lives. Buy for Me, Rufus, Alexa+ — they're all moves in this direction. Amazon's thirty years of purchase history, logistics infrastructure, and Prime loyalty aren't just retail advantages anymore. They're training data for the agent that mediates your entire shopping life.
The BSA update is the legal scaffolding for that transition. It ensures Amazon controls which agents can reach its marketplace while its own agent reaches everywhere else.
There's also a data angle that doesn't get enough attention. The ML training prohibition in the new BSA isn't just about agents. Amazon sellers and their tool vendors are sitting on enormous datasets of marketplace behavior — search performance, conversion rates, competitive pricing patterns, ad response. Prohibiting ML training on Amazon data closes the door on anyone building a model that could compete with Amazon's own intelligence layer. As I describe in the book's chapter on the walled garden problem: Amazon is blocking agent access to reviews and product data at the exact moment it's deploying its own agent to scrape everyone else's. The platforms that accumulated the richest commercial datasets over the past two decades are closing the gates just as agents arrive to query them.
The Microsoft browser wars had a similar structure. Microsoft used Windows distribution to expand IE while making Netscape's access to Windows users more difficult. The FTC was interested in that one. In 2026, they're less likely to be. The current FTC posture is roughly "show us actual consumer harm before we act." Amazon can play this for a while — especially after CEO Andy Jassy said at Davos that Amazon would allow external agents "as long as there is an appropriate value exchange." The BSA update defines what "appropriate" means: on Amazon's terms, with Amazon's kill switch, under Amazon's surveillance.
What This Means for Brands
The March 4 deadline is real. Every third-party automation tool in your stack — repricing, PPC management, inventory systems — needs a confirmed BSA compliance check before Tuesday. If a vendor can't confirm they're compliant, treat it as a liability. Amazon can revoke access from non-compliant agents without warning, and the policy language is broad enough to cover most automated software.
The deeper implication is structural. Amazon is signaling that it views the agent layer as a competitive weapon, not neutral infrastructure. The platform will decide which agents can reach your products, under what conditions, and for how long. That's a different relationship than the one most sellers have assumed.
This doesn't mean leaving Amazon — for most brands, that's not realistic. But it means diversifying your agent-surface exposure now, while the alternatives are still early. OpenAI's Instant Checkout just went live to 800 million ChatGPT users. Google's UCP launched on Etsy and Wayfair in the same week. Shopify merchants can now reach ChatGPT, Google, Perplexity, and Copilot from a single admin setup. Etsy went live on two major AI checkout surfaces in the same month and the stock jumped 16%.
The brands that show up across agent surfaces will be discoverable. The brands that rely on a single platform — especially one that's actively building walls — will find the window narrowing.
The sellers who wait until Amazon tightens further are going to have fewer options.
The Honest Concession
The asymmetry doctrine is probably not illegal. It might not even be wrong, from a pure platform-self-interest perspective. Every major platform has tried to control access to its ecosystem while expanding its own reach. Google indexed everyone's content and then competed with their businesses. Meta built WhatsApp business tools and also kept the ad targeting. This is what scaled platforms do.
But it does mean that "Amazon is a sales channel" is increasingly an incomplete description. It's a sales channel that requires your AI tools to self-identify in HTTP headers and respond truthfully when asked if they're bots — while Amazon's own agent browses the open web with no such constraints, scraping merchants who never agreed to participate, sometimes placing orders that silently fail.
The terms of the relationship are shifting. The brands that recognize that shift now will have more room to maneuver than the ones that figure it out when Amazon's next BSA update lands in their inbox.