The Problem With Shopify's Pay-Without-Approval Setting

If the shopper is signed in, search can use saved sizes. The agent builds a cart and, on a Shopify store, calls complete_checkout after the shopper confirms the total and the card. Claude and ChatGPT can run that sign-in. If the store is not on Shopify, the shopper approves the buy inside the Shop app, and the agent receives a one-time card number for that store's own page. Shopify's changelog says this is what was missing before: the agent could find the product, then lost the shopper on the way to the store's website.

Asking first is still the default. Shopify's help page says the agent fills in your name, your address, and the items, and you approve. Mia Sato at The Verge, writing the same afternoon, said buyers must approve each purchase. Shopify has been describing the agent as a personal shopper you can give house rules, like a budget ceiling or a preference for fast shipping.

The other switch is optional, and it changes who has to be in the room. In the Shop app you open Account, then Connections, then the agent, and turn on Pay without approval. The same screen calls it Allow agent to pay for me. You pick a weekly, monthly, or total budget. After that, the agent tries the last card you used. If the charge fails, it tries the other cards in the wallet. Shopify's help text is plain about what happens next. You are responsible for purchases inside the budget you set, even if the agent misunderstood you or bought something you did not expect. If you dispute one of those charges, Shopify says the attempt "might be unsuccessful."

Shop also says it is not responsible for how the agent uses your information, or for whether the agent follows your instructions. When the agent buys, it accepts the store's shipping, refund, and return rules on your behalf. Turning the connection off later does not pull back what was already shared: your name, email, phone, addresses, and the last four digits of a saved card. For some checkouts Shop uses a limited-use credential, a token or a one-time virtual card, then charges your real card. The statement line looks like SHOPPAY* plus the store name.

A tap on a total is a small yes. It gets smaller once the cart was built by something that already knows your shoe size. A budget says how much money can leave. It is silent on which object comes back. Shopify has already warned you that the agent may get the request wrong. The help page's sample line is modest enough to be funny: "Don't buy items from stores that don't accept returns."

Any agent can now search the catalog and check out, with no special partnership required. The first time one of them buys the wrong thing inside a limit you set, Shopify's own page already says that purchase is yours.