A federal judge just drew a hard line on what AI agents can and cannot do on your behalf. US District Judge Maxine Chesney issued an order blocking Perplexity's Comet browser from placing orders on Amazon, ruling that Amazon presented "strong evidence" the AI agent accesses user accounts "without authorization."
The ruling targets Perplexity's browser-based AI agents, which are designed to handle tasks like online shopping autonomously. The idea is straightforward: you tell the AI what you want, and it navigates websites, fills in forms, and completes purchases for you. Amazon's argument, which the court found persuasive, is that Perplexity's tool does this without proper authorization from the retailer, effectively acting as an uninvited middleman between customers and the platform.
This case matters because it sets an early legal marker for the entire AI agent space. Every major AI company - OpenAI, Google, Anthropic - is building agents that interact with websites and services on behalf of users. The question of whether an AI agent needs permission from the service it's accessing (not just from the user who deployed it) has been largely theoretical until now. Judge Chesney's ruling suggests the answer is yes, at least when it comes to accessing authenticated user accounts on third-party platforms.
For Perplexity, this is a direct hit to the Comet browser's value proposition. Shopping automation was a headline feature. For the broader industry, it signals that AI agents operating on the open web will likely need formal agreements with the platforms they interact with - similar to how API access works today. Building an agent that logs into someone's Amazon account and clicks "Buy Now" is legally different from a user doing it themselves, even if the user asked the agent to do it.
The practical takeaway: AI agents that act within closed environments (your own files, your own apps) face fewer legal hurdles than agents that reach into third-party platforms. Companies building agentic products will need to negotiate access rather than assuming the web is an open playground.