On Monday, March 9, 2026, Amazon secured a landmark legal victory against the AI startup Perplexity, with a federal judge granting a preliminary injunction to block the startup’s autonomous “Comet” shopping agents from accessing the Amazon marketplace.
The ruling, issued by U.S. District Judge Maxine Chesney in San Francisco, marks the first major judicial boundary set for the “agentic commerce” era, where AI assistants act on behalf of human users.
The Core Dispute: Consent vs. Authorization
The case hinged on a critical new legal distinction in the age of AI. Perplexity argued that because users had provided their own Amazon login credentials to the Comet browser, the agent had “permission” to shop.
However, the judge ruled in favor of Amazon’s argument:
- User Consent is Not Platform Authorization: While a user can give an AI permission to act for them, that does not grant the AI the legal right to access a private, password-protected server (Amazon’s marketplace) against the platform owner’s explicit terms.
- Deceptive Tactics: The court found “strong evidence” that Perplexity purposely configured Comet to disguise itself as a standard Google Chrome browser to bypass Amazon’s bot-detection systems.
- Financial Harm: Amazon proved it spent over $5,000 (the threshold for “computer fraud”) specifically on engineering hours to build new filters to block Comet’s “concealed” traffic.
The Court’s Order (March 9, 2026)
The injunction imposes several strict requirements on Perplexity:
| Requirement | Deadline / Status |
| Immediate Block | Perplexity must stop Comet from accessing any password-protected Amazon systems. |
| Data Destruction | Perplexity has been ordered to destroy all copies of Amazon data it previously collected via its agents. |
| Compliance Certification | The company has 30 days to certify to the court that all such data has been deleted. |
| Administrative Stay | A 7-day stay was granted until March 16, 2026, to allow Perplexity to seek an emergency hold from the Ninth Circuit Court of Appeals. |
Why Amazon Fought the “Shopping Agent”
While Perplexity marketed Comet as a “privacy-respecting” convenience tool, Amazon viewed it as an existential threat to its business model:
- “Invisible” Ads: AI agents do not have “eyeballs” to see the billions of dollars in sponsored products and display ads that Amazon relies on for its $68B+ advertising revenue.
- Marketplace Integrity: Amazon argued that autonomous agents skip personalized recommendations and quality-control systems, potentially leading to errors in delivery times and pricing accuracy.
- Security Risk: Amazon cited a 2025 “prompt injection” vulnerability in the Comet browser that could have allowed attackers to hijack a user’s session to steal personal data.
The “Walled Garden” Precedent
This ruling is being viewed as a “knockout punch” for the dream of permissionless “all-in-one” AI assistants. By siding with the platform owner, the court has effectively endorsed a “Walled Garden” model.
For AI startups, the message is now clear: if you want your agents to interact with logged-in accounts on major platforms like Amazon, Netflix, or Uber, you will likely need to negotiate a formal license or API agreement rather than relying on a user’s permission to scrape the site.
