Goofre™Agentic Commerce Orchestrator™

Home / Blog / How AI agents buy

Foundations

How do AI agents buy from online stores?

4 min read · Foundations · 12 October 2026

AI agents buy from online stores by querying structured protocol endpoints across access, comprehension, trust, transactability, and reliability layers rather than rendering visual pages. Instead of scanning HTML markup for keywords, autonomous crawlers read machine manifests to verify real-time inventory, pricing, and checkout parameters before executing purchases.

The machine-to-machine shift in B2B procurement

Gartner projects 90% of B2B purchases will route via AI agents by 2028, routing over $15 trillion machine-to-machine. B2B buyer workflows are moving from manual search inputs to automated agent queries.

Data from Adobe Analytics shows AI traffic to U.S. retail sites grew 393% YoY in Q1 2026 across over 1 trillion visits. When an autonomous crawler acts on behalf of a buyer, it does not browse categories or evaluate hero banners. It requests machine endpoints directly. Storefronts that fail to expose structured discovery protocols are filtered out during initial evaluation.

A human shopper and an AI agent visit the same store differently A human browses categories, looks at hero banners and reads the page. An AI agent requests the store's /.well-known/ucp manifest, reads the catalog and checkout endpoints, verifies inventory and pricing, then executes the purchase. If the store returns raw HTML or a redirect, the agent marks it non-transactable. A HUMAN SHOPPER Browses categories Looks at hero banners Reads the page AN AI AGENT Requests/.well-known/ucp Reads catalog andcheckout endpoints Verifies inventoryand pricing Executes thepurchase Raw HTML or a redirect? Marked non-transactable.
A human browses the page. An agent asks the store's endpoints for data and stops if they don't answer in a form it can read.

To understand the protocol requirements behind this shift, read our overview on what is agentic commerce.

Why traditional SEO fails autonomous AI crawlers

Standard search engine optimization focuses on ranking HTML pages for human clicks. Keywords, meta tags, and surface-level schema markup inform answer engines for text citations, but they fail when an agent attempts transaction execution.

When an AI agent evaluates a product, it looks for deterministic execution rules. A page returning standard Schema.org JSON-LD may state a price, but if the backend cart endpoint requires dynamic session cookies or returns an unhandled 404 on API checkout requests, the agent aborts.

Consider, in simplified form, what an agent expects when it requests /.well-known/ucp:

{
  "version": "2026-01",
  "capabilities": [
    "dev.ucp.shopping.checkout",
    "dev.ucp.shopping.fulfillment"
  ],
  "payment_handlers": [ "..." ],
  "signing_keys": [ { "kty": "EC", "crv": "P-256", "...": "..." } ]
}

A simplified illustration of what the manifest declares (capabilities, schema version, payment handlers and signing keys), not the full specification.

If your server returns raw HTML or an unparsed redirect, the crawler marks the store non-transactable. Learn more about core protocol specs in our guide on what is UCP.

Multi-layer protocol conformance for storefront transactability

To complete an end-to-end purchase, an AI agent requires explicit conformance across five distinct technical layers:

  1. Access layer: exposes machine-readable endpoints without aggressive bot-blocking or JavaScript rendering requirements.
  2. Comprehension layer: delivers unambiguous product specifications, attributes, and unit economics.
  3. Identity and trust layer: validates merchant identity and cryptographic signatures, such as the signing keys a UCP manifest publishes and AP2 payment authorisations.
  4. Transactability layer: provides programmatic checkout paths, tax calculations, and payment handling.
  5. Reliability layer: maintains continuous state synchronization between store inventory databases and agent queries to prevent price or stock discrepancies.
The five layers an AI agent checks, in order, before it buys Access, comprehension, identity and trust, transactability and reliability. The agent passes through each layer in turn and only buys if all five hold. If any layer breaks, the agent skips the merchant. 01AccessMachine-readable endpoints, no bot-blocking or JavaScript wall 02ComprehensionUnambiguous specifications, attributes and unit economics 03Identity and trustMerchant identity and cryptographic signatures check out 04TransactabilityProgrammatic checkout, tax calculation, payment handling 05ReliabilityPrice and stock still match between catalog read and cart All five hold: the agent buys Any layer breaks: the agent skips the merchant
Each layer gates the next. A store that fails early never gets to show what it does well later.

If any layer breaks, the agent skips the merchant. A failure in reliability, such as stock reporting discrepancies between catalog read and cart submission, triggers an immediate checkout drop.

Preparing your Magento storefront for agentic purchasing

Magento Open Source storefronts do not include native machine syndication rails. Unlike closed platforms that syndicate through proprietary apps, Magento stores require explicit, store-by-store protocol configuration.

Static schema plugins and point-in-time scanners generate audit reports, but they do not maintain real-time endpoint state or prevent protocol drift. As protocol specifications update and store catalogs change, continuous readiness monitoring keeps endpoints compliant. Review implementation steps in our guide to Magento agentic readiness.

Is your store readable by the agents that buy?

Goofre™ checks a Magento store across all five layers the way an agent reads it, and keeps it compliant as specifications and catalogs change.

For merchants →