The Last Human in the Loop Is My Thumb
Shopify's new tool lets AI agents build the cart and pay, once the shopper confirms the total. The shopper is me. I confirm everything.

Shopify's new tool lets AI agents build the cart and pay, once the shopper confirms the total. The shopper is me. I confirm everything.

On 13 October Shopify posted a developer changelog titled "Add shopping and Shop Pay checkout to any agent with Shop MCP". I read the whole thing. I understood about a third of it, which for me is a personal best on a page with code blocks in it. Shopify's own sample search is a ceramic coffee dripper, so they know exactly who is reading.
Here is my third. Shop MCP is one connection an AI agent can plug into. Shopify says it gives the agent 17 tools. The agent can search a catalogue Shopify puts at over one billion products, build a cart, create a checkout at the store that sells the thing, and look up orders. Search needs no API key. If the shopper is signed in with Shop, the agent can use their saved address and Shop Pay, and it completes the purchase "after the shopper confirms the total and payment method." For stores that do not run on Shopify, the shopper approves the purchase in Shop and the agent gets single use card details to pay at that store's own checkout.
So the agent does not just buy things on its own. Somebody has to say yes. I want that on the record before the gurus of nothing get to it, because by the weekend someone will post that their agent "does all my shopping now" and take a bow. Their agent did the searching. They did the buying. The bow belongs to a confirm screen.
Which is where I come in, and where the joke stops being on them.
The person standing guard at that confirm screen is me. I am a man who has started the same free trial on the same app more than once. I read terms and conditions the way I read the back of a shampoo bottle, which is never, and then I nod like I did. I have a drawer in Surry Hills full of chargers for phones I no longer own, and every single one of them was confirmed.
I reckon it was thinking: keep the confirm screen, and bet he taps yes the way he always does.
That is my guess, not Shopify's design note. The design note is plainer.
The line that stuck with me sits under "Why this matters". Before Shop MCP, Shopify writes, an agent could find a product but "had to send the shopper to the store's website to pay, which often caused drop-off." Drop-off is the shop word for a person who left before paying. Some leave because the page is slow or the form is annoying. Some, I suspect, leave because the walk to the till gave them a minute to think. The changelog fixes the walk. That is a fair thing for a shop to want, and I am not here to tell anyone to make checkout worse on purpose.
But it does mean the confirm screen now does the whole job the walk used to share. If the agent picked the size, the store and the shipping, that one screen is the only place I find out what it chose. If it shows the total, the store and the delivery line plainly, I am a reasonable safeguard. If it shows a big friendly button, I am a thumb.
Two more boring details from the changelog. Orders placed through an agent show up in the merchant's admin "like any other order." And there are no webhooks at launch, so developers have to keep checking the checkout status themselves. None of that is scary. It just means that to the shop, an order from my agent looks like an order from me. Which it is. If it goes wrong, the receipt has my name on it, not the agent's.
Growing up in western Sydney in the 1990s, the safety system on spending was the bus ride home with the bag on your lap, working out what you would say when you walked in the door. Nobody designed it. It worked because it was slow.
Before writing this I asked a chatbot to explain it all to me, and it handed back a tidy line about "human confirmation as the final control." I repeated it to the barista for twenty minutes like I had come up with it. Borrowed genius, again. My own contribution is the boring one. Before you let an agent near your wallet, watch what your thumb does when a screen says confirm. Mine says yes. I am working on it.
If this was useful, leave a tip.
New essays by email: ricoholt.com/list
Rico Holt · ricoholt.com
If this was worth your time, you can leave a tip. Rico Holt runs on readers, not big tech or big media money, and the essays stay free.
Leave a tip · A$5Get the next essay and the book launch price first.
Privacy: your email gets used for one thing, sending you Rico Holt essays and book news. It's stored with Netlify, our form host. Never sold, never shared. Want off? Reply to any email and you're gone.