Walmart builds controls for AI agents to shop for customers

Walmart is creating separate profiles, permissions and a gateway for AI shopping agents, turning customer control into retail infrastructure.

Walmart builds controls for AI agents to shop for customers

Walmart is building a formal way for AI agents to shop on behalf of customers without simply behaving like the customer. Its planned Agent Profiles will give each authorized agent a separate identity inside a shopper's account, while the Walmart Agent Gateway will provide a direct route for agents to find products and complete permitted tasks.

The announcement moves agentic commerce into a more consequential phase. The question is no longer only whether an assistant can recommend or buy a product. It is whether a retailer can identify the software taking the action, limit what it is allowed to do and show the customer exactly what happened afterward.

Table of contents

Jump to each section:

Walmart is separating the agent from the shopper

Today, an AI agent that shops through a customer's Walmart account signs in as that customer. Purchases made by the person and the software therefore appear together, leaving little visible distinction between direct action and delegated action.

Agent Profiles are designed to change that. Walmart says each authorized agent will receive a dedicated profile connected to the customer's account. Shoppers will be able to review an agent's purchases separately, require approval for every transaction, allow purchases within a customer-set spending limit or remove the agent's access.

That separation is more important than it may look. A conventional login proves access to an account. A dedicated agent profile can also establish who acted, under which permission and within what boundary.

Delegation becomes useful only when it is legible.

AI commerce will reward brands that are safe to recommend
AI commerce is moving discovery, recommendation, and checkout into assistants. Brands now need product data and governance that make them safe to recommend.

The gateway turns agent access into retail infrastructure

Walmart is also preparing an invitation-only beta of its Agent Gateway for companies and developers. The retailer says current agents may try to use websites built for people, a process that can be slow, unreliable and prone to failed steps. The gateway gives agents a more direct connection to current product and fulfillment information instead of forcing them to imitate browsing behavior.

The system is intended to help an agent find a customer's usual products without exposing the customer's broader purchase history to that agent. Walmart also describes verified identities, controlled permissions, observable actions, category restrictions, rate limits and compliance guardrails as parts of the gateway design.

This is the deeper platform move. Walmart is not only making its storefront easier for agents to navigate. It is deciding the terms under which external software can participate in its commerce environment.

The common assumption is that agentic commerce reduces friction by removing steps. The contrasting reality is that safe delegation introduces new steps around identity, permission and review. The strategic implication is that trust infrastructure may become the feature that makes automation commercially usable.

Control becomes part of the customer experience

Walmart's agent terms make the operating boundaries explicit. Customer approval is the default, the retailer can require additional confirmation, and an agent cannot add or change payment methods. Agents may access only the information needed for the task and permitted by the customer, while providers remain responsible for how their own apps handle information.

The retailer also says its existing returns process applies if an agent does not act as intended. Prices shown to an agent will match the prices available to a person on Walmart.com, with applicable offers and fees disclosed before purchase.

These details turn governance into something the shopper can experience directly. Approval settings, spending limits, separate purchase records and revocable access are not background compliance mechanisms. They are interface choices that tell the customer what delegation means.

In agentic commerce, permission is part of the product.

That changes the role of trust in retail marketing. A brand may still need strong product information and persuasive positioning to be selected by an agent. But the transaction also depends on whether the retailer and agent can show that the recommendation, permission and purchase were handled within rules the shopper understands.

What marketers should know about delegated shopping

Walmart's model offers an early view of how marketing and commerce operations may need to adapt when software can act for the customer rather than merely advise them.

Product data has to support decisions. An agent needs current information about availability, variants, fulfillment and restrictions before it can choose responsibly. Weak product records become a barrier to distribution, not merely a merchandising problem.

Permissions shape conversion. A recommendation may still require approval, fit within a spending boundary or trigger extra review. Marketers will need to understand where those controls interrupt, confirm or strengthen the path to purchase.

Agent activity needs its own measurement. When delegated purchases are separated from direct purchases, teams gain a new behavioral category to analyze. The useful question will be how agent involvement changes discovery, basket composition, repeat behavior and returns, not simply how many orders an agent completed.

Trust claims need operational proof. Brands and retailers cannot rely on reassuring language alone. The customer needs visible controls, clear records and a practical remedy when the software behaves unexpectedly.

The related ContentGrip analysis of AI commerce argues that brands will increasingly compete to be safe for assistants to recommend. Walmart adds another dimension to that idea: the commerce environment itself must be safe for the customer to delegate into.

This will pull marketing closer to product data, customer identity, legal policy, payments and service operations. Those functions determine whether an agent can represent an offer accurately, complete an authorized purchase and preserve the relationship after the order.

Agentic commerce is often described as a new interface for convenience. Walmart's announcement suggests the durable advantage may come from something less visible: a retailer's ability to make automated action accountable. The brands and platforms that earn a place in delegated shopping will be those that make autonomy understandable before they make it effortless.

This article is produced by ContentGrow. ContentGrip is a live example of the Branded Newsroom model we build for B2B companies. See how it works →
Book a discovery call (for brands & publishers) - ContentGrow
Thanks for booking a call with ContentGrow. We provide scalable and tailored content creation services for B2B brands and publishers worldwide. Let's chat a bit about your content needs and see if ContentGrow is the right solution for you! IMPORTANT: To confirm a meeting, we need you to provide your