Walmart AI Shopping Agents Get Spending Limits and MCP Gateway

What Walmart announced

Walmart has decided that AI shopping agents should be governed, not banned. On October 21, the retailer laid out three linked pieces for agent-driven shopping at Walmart and Sam's Club: Agent Profiles, the Walmart Agent Gateway, and a published set of terms that every agent has to follow.13 CEO John Furner presented the plan at the Masters of Scale Summit in San Francisco and described it as groundwork for a time when agents become a normal way to shop.1

Agent Profiles, which Walmart says will arrive within the next month, give each authorized agent its own profile inside a customer's Walmart account. Purchases the agent makes are listed separately from the customer's own orders.17 Shoppers can either approve every purchase or let the agent buy on its own up to a limit they choose. Walmart gave $50, $100 and $200 as examples.19 The company compares the setup to adding an authorized user to a credit card: the extra user can spend, but the account holder sets the ceiling and can see the activity.18 Any Walmart account can use the feature, and a Walmart+ membership is not required.1

The Agent Gateway is a Model Context Protocol (MCP) server. Approved agents use it to search Walmart's online inventory and complete purchases, instead of clicking through a website built for people.1 The terms set the rules for agent behavior, and Walmart says agents that break them will be blocked from its site.8

The payments design is the real story

The consumer features get the attention, but the payments design is where Walmart has made its most careful choices. Under the terms, agents never receive a customer's payment-card information, and they cannot add or change payment methods. Approval is required by default, so autonomous spending is something a customer has to switch on. Walmart also keeps the right to ask for extra approval even when a purchase falls inside the agent's limit.8

The effect is that Walmart, not the agent, holds the credentials. The agent can start a purchase, but it is spending against a payment relationship that stays inside Walmart's systems. The same idea extends to customer data. When an agent asks for a shopper's usual items, such as a preferred sourdough or brand of milk, Walmart finds them on its side and does not hand over the customer's wider purchase history.13 PPC Land points out what that means commercially: first-party purchase data, which powers Walmart's advertising business, never leaves Walmart.13

This is not happening in isolation. On the same day, Anthropic launched Claude Duet, which can make user-approved purchases through Stripe Link's wallet for agents. It pays with a single-use virtual card tied to the approved transaction and never sees the full card number.4 Mastercard reportedly ran a demonstration in which an AI agent paid two vendors nine times out of one approved budget, using its Agent Pay for Machines engine.12 American Express has introduced an intent check for purchases made by AI agents.5

Across these efforts, the industry appears to be agreeing on a basic model for agent payments: a person authorizes, a budget limits what can be spent, and the credential stays hidden from the agent. Where they differ is in who holds the controls. Walmart's version is the merchant-side form of that model, while Stripe and the card networks are building it into the payment rails. One fintech commentator compared Walmart's design with its own single-use-card approach and conceded that Walmart offers something it lacks: a standing limit that lets small purchases go through without the owner tapping to approve each one.14

Returns, refunds and who carries the risk

Walmart has answered one awkward question directly. Its normal returns process applies to agent orders, including when an agent does something the customer did not intend.1 TechCrunch sees this as a customer-friendly term that could reassure early users who worry about being stuck with things a faulty agent bought.1 PPC Land makes a sharper point: the clause puts the cost of agent mistakes on Walmart's existing returns process, rather than leaving shopper and agent maker to argue over who is responsible.13

Responsibility for data is split. Anything a customer tells an agent is covered by the agent provider's privacy policy. Walmart's Privacy Notice covers only what the agent passes on to Walmart.11 For a shopper, that means two companies, two policies, and no clear way to see what one has told the other. PPC Land notes that neither of Walmart's documents explains how a customer could review what an agent has shared with the retailer.13

Where the coverage diverges

Most reports agree on the main facts, but several differ on details that matter to developers and shoppers.

How live the gateway is. One financial summary describes the gateway as launched on announcement day.2 Other coverage says Walmart is starting with a beta for companies and developers.7 PPC Land, reading Walmart's beta page, describes an early program that is invitation-only, has limited access and can be suspended at any time.13 The beta reading is better documented, and readers should treat the gateway as a pilot, not a finished product.

Which agents are connected. Some reports say the gateway lets ChatGPT, Gemini and Meta's Muse connect to Walmart's systems.182 Others say Walmart lists those as existing conversational-commerce partners but has not said which agents will use the gateway first.14 Walmart has relationships with all three, but nothing published confirms that any of them is running on the new gateway.

What the spending limits are. One trade report presents $50, $100 and $200 as set options for autonomous spending.7 Walmart's own wording treats them as examples. PPC Land adds that Walmart has not said whether a limit applies per order, per day or per month.13 For a payments product, that is a significant gap.

How the gateway works. PPC Land found a detail on the beta page that the newsroom post leaves out: the gateway connects agents through Sparky, Walmart's own assistant, rather than giving them raw access to the catalogue.13 If that holds, outside agents would be talking to Walmart's AI, not shopping freely. That is a more controlled setup than the "welcome mat" headlines suggest.

The Amazon contrast, and why Walmart chose this route

Nearly every outlet frames the news against Amazon. From about September 20 or 21 (reports differ by a day), Amazon blocked Meta's Muse agent from buying on Amazon.com. It said the agent violated its Conditions of Use and that it had never agreed to Muse operating on its store.1113 Walmart, by contrast, already counts Muse among its integrations.11 TechCrunch adds that travel and booking sites have also shut agents out entirely.1

The "Walmart opens, Amazon closes" framing is accurate as far as it goes, but it hides what the two companies have in common. Both are asserting control over their checkout. Amazon uses blocking. Walmart uses a sanctioned channel with terms, rate limits, category restrictions, and the threat of a ban.13 The legal background helps explain why. In August, the Ninth Circuit vacated the injunction that had kept Perplexity's Comet agent out of Amazon accounts, which left retailers with contracts and technical tools rather than computer-crime claims. Walmart's announcement relies on exactly those tools.13

Walmart's own history with agents also explains its caution. It was a launch partner for OpenAI's Instant Checkout. An executive later said purchases made inside ChatGPT converted three times worse than sending shoppers out to Walmart's site, and OpenAI shut the feature down in March.13 Routing outside agents through Sparky suggests Walmart learned from that: it will take agent traffic, but on its own systems.

How much demand is there?

The infrastructure is ahead of consumer demand. According to Coveo's 2026 Commerce Relevance Report, only 16% of shoppers are comfortable letting an AI assistant find and buy products for them.2 Mizuho analyst David Bellinger said the controls should build confidence in an "experimental" way of buying, and noted that commitment from top management seems to be making it real.2 Even the more welcoming retailer has had problems: one report says Walmart attributed some failed Muse purchases to interrupted payment checks rather than deliberate blocking.5

Verifying agents is another unsolved problem. Arkose Labs reported that only 2.3% of legitimate agent sessions carried verified Web Bot Auth signatures.13 Walmart promises "verified identities" but has not explained how it will check them.13

Analysis

Walmart is betting that when agents start doing the shopping, the winning retailers will be the ones that write the rules, not the ones that refuse entry. Its main choices are to keep payment credentials and purchase history inside Walmart, make human approval the default, and send agents through its own assistant. Together they let Walmart take agent orders without giving up the customer relationship. Finimize puts it simply: Walmart wants to be the default retailer for AI checkouts.6

The next month will show whether this works in practice. Key questions are when Agent Profiles actually launch, whether major agents move from browser automation onto the gateway, and whether Walmart clarifies how its spending limits work. Until then, this is a well-designed plan that has not yet been tested at scale.