The agentic web just hit a wall built by everyone else. Users of Meta’s Muse, xAI’s Grok, OpenAI’s Dots and Instinct report that assistants which browsed freely a month ago are now refused at major sites.
The refusals come with reasons. Yelp will only serve agents that pay into its data licensing program. Delta is stopping third-party agents from booking tickets for customers. JPMorgan Chase and Charles Schwab confirmed they block agent access to accounts on security grounds.
Some blocks are unannounced. Users say Cars.com and Amtrak stopped working for their agents, which suggests quiet filtering rather than public policy. Amazon set the precedent last year by banning Perplexity’s shopping agent and suing the startup.
The incentives are not mysterious. An agent that books, buys or files claims for a human removes the session where a company upsells, tracks behavior or collects a login. It also arrives without a clear answer on liability when a purchase goes wrong.
For the labs, the promise of an assistant that handles your errands now depends on permission from thousands of sites that have no shared standard for granting it. Until one exists, capability demos will keep outrunning access.
