Walmart Will Let an AI Assistant Do Your Supply Run. Set the Limits Before It Does.
AI shopping assistants are getting their own profiles, spending limits and rules at Walmart and Sam's Club. Here is the one-page plan to write before anyone connects one to a company account.
By John Martines · October 25, 2026 · 6 min
Walmart is opening Walmart.com and Sam's Club to AI shopping assistants, with a spending limit or an approval for every order. Amazon is keeping them out. Here is what that means for the office supply run, and the limits to set first.
It's Thursday afternoon at a small contracting company. The office manager types into an assistant: "We're low on paper towels, printer paper, coffee and the blue nitrile gloves. Reorder what we got last month." Ten minutes later the cart is built, the order is placed and a text lands on the owner's phone: "Agent order, $184.37. Arriving Saturday."
Nobody drove to the store. Nobody clicked through forty product pages. And if the limits were set right, nobody got a surprise.
That afternoon is close now. On October 21, 2026, Walmart said it is opening Walmart.com and Sam's Club to AI shopping assistants, with rules about what they may buy. Here is what it means for the supply run, and what to decide first.
An AI shopping assistant, also called an agent, is an assistant that doesn't only suggest products. It searches, fills the cart and places the order for you. ChatGPT, Google's Gemini and Meta's new Muse can all do some version of this.
Walmart announced three pieces:
Agent Profiles. Each assistant you use gets its own profile inside your Walmart account. Its orders show up separately from yours, so you can see what the assistant bought. You choose how much freedom it gets: approve every order, or let it buy on its own up to a spending limit you set. Walmart's examples were $50, $100 and $200. Walmart compared it to adding an authorized user to a credit card. You can delete a profile at any time. Reports say profiles roll out next month.
The Agent Gateway. This is the connection assistants use to search Walmart and Sam's Club and place orders. It uses MCP, the Model Context Protocol, the standard AI assistants use to connect to other software. It starts as an invitation-only beta for companies and developers.
Rules for agents. Agents may not see card details or change payment methods. They get only the information the task needs. They must stay within what the shopper asked for. Walmart says its normal returns process applies when an agent gets it wrong, and that agents that break the rules will be blocked.
How it got here:
- September 8, 2026: Meta launched Muse, a personal AI agent that can shop, book travel and send email, first in the US. It asks for approval before it completes a purchase.
- September 20: Amazon started blocking Muse from its store. Amazon said Muse didn't identify itself while browsing and raised concerns about how it handles customer logins. Meta disputes that.
- Late September: Shopify and Meta said Muse can browse Shopify stores and check out with Shop Pay.
- October 21: Walmart announced Agent Profiles, the Agent Gateway and its rules for agents.
- October 22: 1Password launched 1Password for Agents. When an assistant reaches a login page, you approve the login on your own phone and 1Password fills it in, so the assistant never sees the password.
So the big stores have picked sides. Walmart, Sam's Club and Shopify stores are letting agents in, with rules. Amazon is keeping outside agents out for now.
Most small businesses run a supply run of some kind. Paper and toner for the office. Gloves, wipes and cleaning supplies for a dental practice. Coffee, cups and snacks for the break room. Fasteners and shop rags for a contractor. It is small money each time, done often, by whoever has a spare hour.
That is exactly the job an assistant is good at, and exactly where an assistant with no limits can do quiet damage.
Small mistakes add up. A case of 12 when you meant one. The name brand instead of the store brand. A reorder of something you stopped using. No single order looks wrong. The card statement does.
The assistant may not ask. With a spending limit, orders under the limit go through without a tap from you. That's the point, and it's also the risk.
It's a new login to protect. Anyone who can talk to the assistant can now shop on your account. A shared assistant on a shared office computer is a shared credit card.
The good news: Walmart built the controls you need. A separate profile, an approval setting and a limit. You just have to decide what to put in them.
1. Write the supply list on one page. What you reorder every month, roughly how many and roughly what it costs. Paper, toner, gloves, coffee. This becomes the assistant's job description. It's also useful the next time a new hire does the run.
2. Pick your two numbers. First, the most a single order may ever cost. Second, the amount under which the assistant may order on its own. For most offices, start by approving every order for the first month. Then set a low limit once you've seen what it does. Our free [Agent Permission Planner](/tools/agent-planner) helps you sort which jobs an assistant may do alone and which need a person.
3. Decide who gets the text. Every agent order should notify one named person, ideally not the person who asked for it. Two sets of eyes on every order is the cheapest control there is.
4. Use a company account and a company card. Connect the assistant to a business account, not someone's personal Walmart login. Use a card with its own low limit if your bank offers one. If something goes wrong, you want it on one card that's easy to freeze.
5. Never paste a password into a chat. If an assistant asks for the store login, use the store's own connection or a password manager that fills it in for you. A password pasted into a chat sits in a history you no longer control.
6. Check the agent's orders monthly. Because Walmart keeps agent orders separate, this takes five minutes. Compare them to the supply list. Return what doesn't belong, and adjust the list or the limits.
- Is the assistant connected to a company account, with its own profile?
- Is every order approved by a person, or is there a written limit below which it may order alone?
- Who gets notified of each order, and is it a different person from the one who asked?
- Is the card on the account one you can freeze in a minute, with a limit that matches the job?
- Can you see which orders came from the assistant, and does someone look each month?
Stores are writing the rules for AI assistants now, and they don't agree yet. Walmart is letting them in with limits. Amazon is keeping outside ones out. More stores and suppliers will pick a side over the next year, including the ones you buy parts and materials from.
You don't need to connect anything this month. Profiles aren't even out yet. What you need is the one-page list and your two numbers, written down before anyone in the office connects an assistant to the company card. Then when the option shows up, saying yes takes five minutes, and the surprise charges never happen.
---
Sources (checked October 24, 2026). Walmart Agent Profiles, spending limits, the $50, $100 and $200 examples, the authorized-user comparison and the Agent Gateway: "While Amazon blocks AI agents, Walmart rolls out the welcome mat" (TechCrunch, Oct 21, 2026) and "AI shopping wars: Walmart welcomes AI agents while Amazon blocks Muse" (Axios, Oct 21, 2026). Agent rules, returns, extra approvals and the invitation-only beta: "Walmart to let AI agents shop for customers; sets guardrails" (Chain Store Age, Oct 2026), "Walmart lets AI agents buy within customer-set limits such as $50 or $100" (PPC Land, Oct 2026) and "Walmart launches tools for AI agents to shop for customers" (KSL, Oct 2026). Muse launch and approvals: "Meta Launches Muse AI Agent to Run Errands, Book Travel, and Shop" (TechRepublic, Sept 2026) and Engadget (Sept 2026). Amazon blocking Muse and Meta's response: "Amazon locks out Meta's Muse in agentic shopping standoff" (Adweek, Sept 2026) and Retail Gazette (Sept 2026). Muse on Shopify with Shop Pay: Let's Data Science (Sept 2026). 1Password for Agents: 1Password press release (Oct 22, 2026) and 9to5Google (Oct 22, 2026).