Estimated read time: 7 minutes
On August 4, the Ninth Circuit handed Perplexity a win that Amazon really did not want it to have. The appeals court vacated the preliminary injunction that had kept Comet, Perplexity’s agentic AI browser, from shopping on Amazon.com. The reasoning matters more than the result: the court held that when Comet browses Amazon on your behalf, it is you, the user, who is accessing Amazon under the federal computer fraud law. Not Perplexity. That one sentence of legal logic just reshaped the fight over whether AI agents get to use the open web the way people do. If you sell anything online, this is your problem now too, in the best and worst ways.
Table of Contents
What the court actually said
The case turns on the Computer Fraud and Abuse Act, the 1986 anti-hacking statute that somehow keeps ending up at the center of every modern internet fight. Amazon’s argument was that Perplexity’s Comet browser accessed Amazon’s servers without authorization. Amazon had told Perplexity to stay off, Comet kept showing up, and under Amazon’s reading that made Perplexity a trespasser.
The Ninth Circuit did not buy it. The panel reasoned that Comet acts at the direction of a human user, with that user’s own Amazon login, using credentials stored on the user’s own device. So the person doing the accessing is the account holder, who is very much authorized to shop on Amazon. Perplexity is the toolmaker, not the intruder. On that logic, the court found Amazon was unlikely to succeed on its CFAA claim and vacated the preliminary injunction that had been in place since the district court sided with Amazon.
It is the first time a federal appeals court has answered the question that every AI company has been nervously circling: when an AI agent uses a website on behalf of a person, who is legally at the keyboard? For now, in the Ninth Circuit, the answer is the person.
How we got here
Comet is Perplexity’s agentic browser. Give it a task and it will browse, compare, log in, and buy, the same way you would, just faster and without getting distracted by a lightning deal on air fryers. That last capability is exactly what spooked Amazon. A shopping agent that completes purchases is also a shopping agent that skips Amazon’s ads, its sponsored placements, its recommendation carousel, and every other part of the page where Amazon makes its real margin.
Amazon accused Perplexity of disguising Comet’s automated traffic as ordinary browsing, violating its terms of service, and accessing customer accounts without Amazon’s permission. Perplexity countered that Comet only ever acts with the user’s permission, that credentials never leave the user’s device, and that Amazon’s real objection was to consumers choosing an assistant Amazon does not control. The district court granted Amazon its injunction, Comet was banished, and Perplexity appealed. Now the injunction is gone and the agents are back.
If you want the broader map of who is building these agents and what they can already do, we broke that down in our AI agent rundown. The short version: every major lab is shipping one, and shopping is the use case they all demo first.
Why Amazon fought this so hard
Amazon is not worried about one browser. It is worried about the business model math. Amazon’s advertising business generates tens of billions of dollars a year by charging sellers for placement in front of human eyeballs. An AI agent does not have eyeballs. It parses the product data, ignores the sponsored slots, and buys whatever best matches the user’s request. Multiply that behavior across millions of shoppers and the most profitable real estate in e-commerce quietly stops mattering.
There is also the control question. Amazon has spent two decades making itself the default starting point for product search. If shopping moves into assistants, the default starting point becomes whichever agent the customer talks to, and Amazon becomes a warehouse with an API it never agreed to expose. Companies do not litigate this aggressively over principle. They litigate like this over existential threats.
What it means for anyone who sells online
Here is where this stops being an Amazon story and starts being a you story. If AI agents can legally shop retail sites on behalf of users, then agents are now a customer segment, and they behave nothing like human visitors.
Agents read data, not design. Your beautiful hero image and carefully split-tested button color mean nothing to a shopping agent. Structured product data, accurate specs, visible pricing, and clean schema markup mean everything. If your store’s product information is buried in images or vague copy, an agent will simply pick the competitor whose data it can parse.
Your analytics are about to get weird. Agent traffic looks like a visitor who lands, goes straight to the product, and converts or leaves in seconds. Bounce rate, session duration, and funnel metrics all get noisier. Before you rewrite a landing page because conversion dipped, check whether the visitors you lost were ever human.
Blocking agents is now a business decision, not a legal default. This ruling weakens the assumption that a site can wave the CFAA at any automated visitor it dislikes. You can still use bot management tools and terms of service, but if the agent is acting for a legitimate logged-in customer, turning it away may just mean turning away the sale. Small stores, frankly, have less to lose here than Amazon does. You are probably not monetizing sponsored placement. You just want the order.
Discovery is shifting upstream. The same logic that applies to agents applies to AI search surfaces generally, something we covered in depth in our look at how AI is transforming Google search. The businesses that win the next few years are the ones whose products and content are legible to machines that shop and summarize on humans’ behalf.
The fine print nobody should skip
Two caveats before anyone declares total victory for the bots. First, the Ninth Circuit was explicit that its decision is tied to the factual record in this specific case. It vacated a preliminary injunction, which is a fight about likelihood of success, not a final judgment. The underlying litigation continues, and a fuller record could still change the outcome.
Second, the court did not bless everything agents do. It answered a narrow question about who accesses a server under one statute. Contract claims, trademark theories, and plain old technical countermeasures are all still on the table, and Amazon has lawyers the way other companies have employees. Anyone who watched the Musk v. Altman verdict knows how long these AI legal sagas run, and how much can flip on appeal. This is the opening ruling of the agentic commerce era, not the closing one.
FAQ
What did the Ninth Circuit actually decide?
It vacated the preliminary injunction that barred Perplexity’s Comet browser from Amazon, holding that Amazon was unlikely to win its Computer Fraud and Abuse Act claim because the users, not Perplexity, are the ones accessing Amazon when Comet shops on their behalf.
Does this mean AI agents can access any website now?
No. The ruling is narrow, tied to this record, and only addresses one statute in one circuit. Sites can still pursue contract claims and deploy technical defenses. But it is the first appellate signal, and it points toward user permission mattering more than site permission.
Is the Amazon v. Perplexity case over?
No. This was a preliminary injunction appeal. The underlying case continues in the district court, and further appeals are likely whichever way it goes.
What should a small e-commerce business do about AI shopping agents?
Make your product data machine-readable: accurate titles, specs, pricing, availability, and schema markup. Watch analytics for agent-like behavior before making design decisions, and think twice before blocking automated buyers who are completing real purchases.
Related Coverage
- Musk v. Altman Verdict: the other AI courtroom drama, and what the jury got right
- AI Agent Showdown: who is building agents and what they can actually do
- Google AI Search Transformation: how machine-mediated discovery is rewriting traffic
Faceted Media Magazine covers business, AI, and entrepreneurship for the people building what’s next.