AI AGENTS • PERMISSIONS • MONEY
AI Shopping Agents: What Changes When Software Shops for You?

Shopping agents can move beyond product recommendations into comparison, cart building and delegated checkout. That can save time, but it also means the consumer is handing software more information about preferences, budgets and buying authority than a traditional search box ever needed.
Shopping can be broken into five agent tasks
A shopping journey usually involves understanding the need, discovering products, comparing options, deciding which trade-offs matter and completing the purchase. AI agents can increasingly participate in each stage. The more of that chain is delegated, the less the consumer sees directly before money moves.
That makes goal definition important. 'Buy me a good laptop' is vague. 'Find a 14-inch Windows laptop under £900, at least 16 GB RAM, returnable for 30 days, from these merchants, and ask before checkout' gives the agent a much safer decision boundary.
Comparison quality depends on what the agent can see
An agent cannot compare a market it does not have access to. Merchant integrations, product feeds, ranking agreements and technical compatibility can shape which options enter the comparison. A system may appear to search broadly while actually using a narrower commercial ecosystem.
Consumers should therefore ask whether results are sponsored, whether merchants are excluded, how prices are refreshed and whether the agent can distinguish total cost from headline price. Delivery, warranties, returns and recurring fees can matter more than a small price difference.
Delegation creates a new form of commercial influence
Traditional online advertising targets the person. Agentic commerce creates an incentive to influence the system acting for the person. Merchants may optimise product data, offers or machine-readable descriptions to become more attractive to shopping agents in the same way websites once optimised for search engines.
That is not automatically abusive. Better structured data can improve comparison. The risk appears when commercial incentives are hidden or when the agent's ranking logic is difficult for the user to inspect. A household should not assume 'AI chose it' means the result was neutral.
Returns are part of the purchase decision
A shopping agent that chases the lowest price can make poor choices if returns are expensive, customer support is weak or the merchant has restrictive conditions. Good automation needs to treat refundability, delivery reliability and warranty terms as first-class constraints rather than details discovered after the parcel arrives.
For expensive items, require the agent to show the final shortlist and the important terms before payment. Autonomy should increase only when the cost of being wrong is low.
Subscriptions deserve a separate approval rule
A one-off £8 purchase and a £8 monthly subscription are not the same financial commitment. Agents need to recognise recurring payments, trials that convert, minimum terms and auto-renewal. Otherwise a cheap-looking purchase can create months of unwanted spend.
Set a rule that any recurring commitment requires explicit confirmation, even if the first payment sits below the normal spending limit. That creates a clear boundary around future obligations.
Shopping agents can learn a very detailed picture of the household
Preferences, addresses, sizes, family members, medical needs, budget limits and purchase history can all become useful context for better recommendations. The same data can also be sensitive. An agent connected across email, calendars and accounts may infer far more than a normal retailer sees.
Share only the information the task needs. A grocery agent does not need access to work documents; a travel booking agent does not need unrestricted access to every bank statement. Privacy improves when each task has a narrower context.
A manipulated product page can become an action problem
Agents often read external content. If a page contains malicious instructions or misleading structured data, the risk is not only that the model repeats a false claim. A highly privileged agent might alter the search, disclose information or take an unintended action. Security guidance therefore treats external content as untrusted input.
The user-facing equivalent is simple: keep purchase authority narrow, use merchant allowlists where possible and require approval when the agent's recommendation changes materially from the original request.
Use autonomy where mistakes are cheap
Reordering a familiar household item from an approved merchant can be a sensible delegated task. Choosing insurance, booking a complex trip, buying expensive electronics or accepting a long contract carries more downside. The level of autonomy should track the consequence of a mistake.
A good shopping agent should make routine buying boring, not make consequential spending invisible. Keep the final decision visible whenever price, commitment, identity or safety meaningfully changes.
Continue from here
Evidence baseline
- UK NCSC — Thinking carefully before adopting agentic AI
- OWASP — AI Agent Security Cheat Sheet
- Google Developers — Agent protocols and payment authorisation
Google's Universal Commerce Protocol and payment work, alongside Mastercard and Visa's agentic-commerce programmes, show that shopping agents are moving toward real transaction infrastructure rather than remaining recommendation demos.
Do not let convenience hide the final merchant
A human shopper normally sees the retailer before paying. An agent can collapse that step into a recommendation and checkout. Keep the merchant, delivery terms, return window and total price visible at the approval point so the user can tell what relationship is actually being created.
This is particularly important when a shopping agent can move between marketplaces, third-party sellers and direct retailers. The same product name can sit behind very different service and return conditions.
Reordering familiar goods is a sensible first use case
Delegation works best when the preference is already known: the same pet food, household consumable or approved office supply, from an acceptable merchant, below a fixed price. The agent has less ambiguity and the consequences of a mistake are easier to contain.
Use complex or expensive purchases as supervised tasks. Let the agent research and compare, but keep the human in control of the final trade-offs when quality, finance, safety or long-term commitment matters.
Set substitution and price-ceiling rules
If an item is unavailable, decide whether the agent may substitute it, how different the replacement can be and the maximum price increase allowed. Without those rules, a harmless stock shortage can turn a routine reorder into a purchase the user would never have chosen.