Agents Got Front Doors This Week. Nobody Built the Locks.

Five different platforms rebuilt the door between your business and an AI agent this week. None of them agreed on who gets to walk through it.

That's the pattern underneath this week's news. Google gave Gemini its own work email and a tasks inbox so it can act like a new hire with system access. TikTok wired a shopping assistant straight into the feed with one-click checkout. A startup called Tab, valued at $300M, started texting people to book their travel. Meanwhile Sierra and Meta are still drafting the actual standard for how an agent proves who it's acting for — v0.1 isn't due until later this month — and Amazon, Walmart, Yelp, and eBay are already blocking agents at the gate rather than wait for it. If you run a storefront, a booking flow, or anything with a login page, the agents showed up before the rulebook did.

Models + launches

OpenAI's GPT-6 rollout to ChatGPT's 1.2B weekly users shipped with something it's calling Intelligent UI this week — answers render as tappable buttons, forms, charts, and mini-tools instead of plain text, landing in paid tiers first with free tiers close behind [1]. The chat box stops being a text field and starts being a UI canvas the model generates on the fly. Any workflow you've built around "ChatGPT gives you text back, I parse it" is worth a second look at what a generated interface could replace instead.

Tooling shifts

Zapier folded its standalone Agents product into a single "AI" step inside regular Zaps [2]. That sounds like a rebrand until you read what it fixes: agents can now use triggers, paths, and filters alongside deterministic steps, approvals are set per-tool instead of all-or-nothing, and a run that blows past 75 tasks pauses for a human instead of looping forever on your dime. Pricing is legible too — 1, 3, or 5 tasks per run depending on model tier, visible per-run in Zap History instead of showing up as a surprise on the invoice. If you shelved Zapier Agents over runaway cost or "it approved itself" complaints, this rebuild is worth a second look.

SMB angles

Google's agentic Gemini mode ships to businesses first, and it doesn't act like a chatbot — it gets its own work email address and a tasks inbox, plugging straight into Slack, Jira, Confluence, Workspace, and Microsoft 365 [3]. Early testers include On, Shopify, and PayPal. It also picks which model runs your task — including Claude — unless you override it. That's a vendor deciding your model-routing policy by default, which is a bigger decision than it sounds like on a feature list.

TikTok built the same instinct into the feed itself: a conversational AI shopping assistant with one-click checkout, built on Shopify, Stripe, Salesforce, and Shoplazza's commerce rails [4]. TikTok Shop did roughly $15.8B in 2025 US sales — about 18% of US social commerce, per eMarketer — so if you sell there, your product page just stopped being the last stop before purchase.

Source: TechCrunch — TikTok rolls out an AI shopping assistant and one-click checkout

Adjacent to watch

The standard for letting any of this happen safely doesn't exist yet. Meta and Sierra are drafting Personal Agent Protocol, an open OAuth-based spec for how a personal AI agent authenticates with a business — Shopify, Stripe, Walmart, Genesys, Instinct, and Rocket are already at the table, with v0.1 due later this month [5]. Under the proposed model, the consumer decides what access their agent gets; the business decides what it's allowed to do once it's in the door. Until that spec ships, every platform is answering that question on its own.

Some are answering it with "no." Amazon has blocked Meta's Muse agent outright. Walmart's own agent-checkout partnership still breaks on human-verification buttons. Yelp charges agents for a data license, and eBay bans "unauthorized agents and actions" by name [6]. A September 15 Cloudflare crawler-default change knocked personal agents offline on ad-supported pages as a side effect — collateral damage, not policy. If you're betting on agentic commerce landing on your checkout flow this year, the spec it needs doesn't exist yet, and your own site's bot defenses are probably the thing actually stopping it today, whether you configured them for that reason or not.

And the agents keep showing up anyway. Tab emerged from stealth this week at a $300M valuation, texting users over iMessage and WhatsApp to book travel and order groceries, pitching "your card lives in a vault Tab itself never sees" as the whole product [7]. It's the third personal-agent-commerce entrant logged this week alone, counting Google's Gemini push and the TikTok assistant. The volume of agents expecting to transact on your site is compounding faster than most SMBs' bot-traffic policy is.

Five platforms decided who gets through your front door this week. You weren't in the room for any of them.

Line up what actually shipped against what's still missing, and the gap is the story:

flowchart TD
  Start([This week's signal]) --> Opened[Agents got new front doors]
  Start --> Missing[Nobody agreed on the lock]
  Opened --> O1["Google: agentic Gemini gets<br/>its own email + tasks inbox"]
  Opened --> O2["TikTok: shopping assistant<br/>+ one-click checkout in-feed"]
  Opened --> O3["Tab: $300M personal agent<br/>texts you to book + order"]
  Opened --> O4["OpenAI: chat box becomes<br/>a tappable UI canvas"]
  Missing --> M1["Sierra/Meta still drafting<br/>agent-to-business auth standard"]
  Missing --> M2["Amazon, Walmart, Yelp, eBay<br/>already blocking agents case by case"]
  Missing --> M3["Zapier: approvals exist<br/>per-tool, not platform-wide"]
  O1 --> Verdict[[Every platform picked a door.<br/>Nobody agreed on a lock.]]
  O2 --> Verdict
  O3 --> Verdict
  O4 --> Verdict
  M1 --> Verdict
  M2 --> Verdict
  M3 --> Verdict

Sources

[1] OpenAI — GPT-6 for everyone — openai.com [2] Zapier — Zapier Agents is now AI by Zapier — zapier.com [3] TechCrunch — Google brings agentic AI to Gemini, starting with businesses — techcrunch.com [4] TechCrunch — TikTok rolls out an AI shopping assistant and one-click checkout — techcrunch.com [5] Sierra — Introducing Personal Agent Protocol — sierra.ai [6] TechCrunch — The next hurdle for AI agents: getting websites to let them in — techcrunch.com [7] TechCrunch — Another personal AI assistant has launched: meet Tab, which emerged from stealth with a $300M valuation — techcrunch.com

None of this means lock your site down and wait for the standard. It means deciding your agent-access policy on purpose instead of discovering it by accident the next time a CDN's default changes. I map exactly this kind of access boundary into every agentic automation engagement I run — the same discipline behind how I scoped what could reach what when I rebuilt The Hub's stack. I wrote the operator checklist for agent checkout back in May. Re-read it this week — the traffic it's checking for just got a lot heavier.

The short version

• Google's agentic Gemini ships to businesses first — its own work email, a tasks inbox, and it picks the model (including Claude) unless you override it
• TikTok wired an AI shopping assistant with one-click checkout straight into the For You feed, on Shopify/Stripe/Salesforce rails
• Sierra and Meta are drafting Personal Agent Protocol, the open standard for how agents authenticate with a business — v0.1 isn't due until later this month
• Amazon, Walmart, Yelp, and eBay are already blocking or charging agents at the gate, each with its own rule, with no shared standard to point to
• Tab launched at a $300M valuation, the third personal-agent-commerce entrant logged this week, texting users to book and order on their behalf
• Zapier folded Agents into regular Zaps with per-tool approvals and legible per-run pricing — one mainstream tool actually made agent governance visible
• The bottom line: every major platform picked a door for agents to walk through this week. Nobody's agreed on the lock yet — that's a policy decision sitting on your desk, not theirs