Yelp, Delta and Amtrak Are Shutting Their Doors to AI Agents That Book, Shop and Browse for You

The agentic web has hit its first wall — literally. In recent weeks, users of the major autonomous assistants have noticed their agents getting bounced mid-task on some of the internet's most familiar destinations. According to a report by The Verge, users of Meta's Muse, xAI's Grok, OpenAI's Dots, and Instinct's AI agent say the software that was happy to browse, compare, and book on their behalf is now being refused at the front door of several top websites.

Two companies have confirmed the practice — and their reasons could not be more different in tone. Yelp says only AI agents that pay to join its data-licensing program are permitted to operate on the site, turning agent access into a paid toll. Delta Air Lines takes a blunter line: its systems block agents from booking tickets on a traveler's behalf, full stop. In both cases the message is the same — the site's human visitors are welcome, but the software acting for them is a business negotiation, not a default right.

The confirmed examples are likely the tip of a larger iceberg. Users report that Cars.com and Amtrak, sites that previously worked with agents, have stopped responding to them, which suggests more companies are quietly deploying bot-detection and access rules without announcing anything. For agent builders, this is the worst kind of problem: no error page explains why, no list of offenders is published, and each failed task looks identical to a random outage.

None of this began this month. The first open rupture came in e-commerce, when Amazon banned Perplexity's agent from shopping on the site and sued the startup. Amazon argued that companies purchasing on behalf of customers should operate openly and respect a provider's choice to opt out; Perplexity countered that Amazon's real objection is arithmetic — an agent buying things sees no ads, and ads are the margin. The dispute set the template every platform since has been copying.

Finance followed. Citibank and Bank of America now restrict AI agents from accessing customer accounts, wary of both fraud liability and of intermediaries sitting between banks and their depositors. The pattern across retail, travel, and banking is consistent: wherever an agent's task touches a transaction, the platform wants a contract, an identity, and a cut — or the door stays shut.

There is a straight economic line underneath the blockades. An AI agent that shops, books, and compares on the user's behalf collapses the attention economy that funds the consumer web: no page views, no ad impressions, no upsells. Yelp's licensing program shows what platforms would prefer instead — a world where agents pay wholesale for structured data while the human-facing site keeps its advertising business intact. That is not an unreasonable position; it is also the end of the assumption that the web is open to any well-behaved bot.

For the agent industry, the next phase looks a lot like the search-engine settlements of the 2000s, run in reverse and at higher stakes. Either agent builders negotiate site-by-site access deals and pass the cost to users, or they route around blocked platforms and accept degraded utility. Either way, "agentic commerce" now has a gatekeeping layer, and the companies that spent 2026 shipping autonomous agents are discovering that shipping the agent was the easy half. The hard half is getting it through the front door.