Walmart Opens Its Store to Third-Party Shopping Agents, on Its Own Terms

On 21 October 2026 Walmart opened its store to third-party AI shopping agents and set the rules they must follow. It announced the Walmart Agent Gateway, an MCP-based route through which agents admitted to its invitation-only beta can shop for a customer for companies and developers; Agent Profiles, due within a month, which give each agent its own profile and spending controls inside the customer’s account; and published terms for AI agents, with agents that break them blocked from the site.

What Walmart launched

The Agent Gateway. Walmart says agents that shop by driving a browser through its website are “slow and error-prone,” and the Gateway gives them a faster, more reliable path using MCP. It is a beta “for companies and developers,” with access requested at walmart.com/agents, where Walmart says access is limited and by invitation only. Walmart says it also helps an agent find a customer’s usual items, such as a particular bread or milk, without sharing the customer’s personal information or wider purchase history with the agent.

Agent Profiles. Today an agent signs in with the customer’s own account, so its purchases are mixed with the customer’s. Agent Profiles, which Walmart says will launch within the next month, give each agent a dedicated profile so its activity can be seen separately. Walmart compares it to adding someone as a cardholder on a credit card. The first time an agent shops through the Gateway, Walmart creates its profile automatically; the customer then signs in to Walmart to authorize and link it, and sets the controls:

• require approval for every purchase, or let the agent buy within a spending limit (Walmart gives $50, $100 and $200 as examples);
• see each agent’s purchases separately from their own;
• turn permissions off or delete a profile at any time.

Agents see the same prices a person sees on Walmart.com, with offers and fees shown before purchase.

Terms for AI agents. Purchases need customer approval by default, and Walmart may require more approvals even within a spending limit. Agents must not act beyond what the shopper intends, do not receive payment card information, and cannot add or change payment methods. They may access only the information a task needs and the customer allows. Walmart’s returns process applies, including when an agent does not act as intended. Agents that do not follow the terms will be blocked.

Why it matters

This is the largest US retailer writing its own agent-authorization rules rather than waiting for a standard. The controls it describes, a scoped identity for each agent, a spending cap, approval by default, and no card details passed to the agent, are the same ones the protocols are still drafting: AP2’s mandates at the FIDO Alliance, Mastercard’s Verifiable Intent, the Personal Agent Protocol (which Walmart is one of the industry partners developing with Sierra and Meta), and EMVCo’s draft Intent Services. Walmart has implemented its own version at the merchant, and agents must accept its terms to shop there.

The protocol choice is also worth noting. Walmart names MCP, the general tool-access standard, not a commerce protocol such as UCP or ACP, even though it already sells through UCP-powered surfaces. For merchants, it is a sign that an MCP endpoint plus published agent terms may be how large retailers open to agents first. For agent builders, it means the spending limit and approval rules are set by the merchant, per account, rather than carried in a credential the agent brings.

What is not yet known: which agents and companies have been admitted to the beta, when Agent Profiles actually ship, and whether Walmart will expose the same controls through UCP or the Personal Agent Protocol. Walmart published no developer documentation with the announcement.

See also MCP explained, AI shopping agent payment authorization, and the agentic commerce timeline.

FAQ

What did Walmart announce on 21 October 2026? The Walmart Agent Gateway, an MCP-based beta for companies and developers; Agent Profiles, due within a month; and terms for AI agents, with agents that break them blocked.

How do Agent Profiles control what an agent can spend? The customer can require approval for every purchase or set a spending limit, such as $50, $100 or $200. Walmart may still ask for approval within the limit, and the customer can turn permissions off or delete the profile at any time.

Does the agent get the customer’s card details? No. Agents do not receive payment card information and cannot add or change payment methods. Walmart’s returns process applies, including when an agent does not act as intended.

Which protocol does the Agent Gateway use? MCP. The announcement does not mention UCP or ACP.