The Agentic Shift: Retail Agentic Commerce, the Race has Started


Sunday 15th March 2026

The Agentic Shift: Agentic Retail, Under Starter's Orders

When delegated buying arrives, the winners will be the assured operators.

In 20 seconds

This week’s shift: Retail is moving from “AI-assisted shopping” to “delegated buying”, where intent stays live and an agent can wait, decide, and execute.


Why it matters: Discovery will drift into chat and assistants, but the hard parts of commerce, identity, delegation, fulfilment, returns, and liability, sit deeper in the stack and will be the gating factor.


The decision it forces: Do you compete at the interface, or in the infrastructure that makes agent-led transactions reliable.

What happened
The signals are converging: forecasts are now large enough to justify near-term investment, behavioural data shows AI-driven shopping traffic is rising and getting “higher intent”, and payment rails are standardising how an agent can pay without exposing credentials.

Why it matters
When agents sit between customers and retailers, the definition of “good commerce” shifts from persuasion to execution, and fulfilment becomes a ranking signal; agents can buy in seconds, but they can’t deliver a package, and the 3PL is the invisible kingmaker.

The decision it forces
If customers increasingly arrive as agents, leaders have four practical postures:

  1. block them as potentially malicious or at best, scraping your catalog (Amazon wins order blocking access for Perplexity's AI shopping 'agent')
  2. entertain them via controlled endpoints (MCP/WebMCP - agents learning to browse better),
  3. build a first-party agent to defend the relationship (Walmart introduces its Sparky virtual assistant to new shoppers)
  4. prepare for agent-to-agent commerce where identity, delegated authority, and evidence are explicit (no examples of A2A in production for retail yet)

Do you want Situation Room updates delivered to your inbox?

What we’re tracking this week

Forecasts are now big enough to change roadmaps

  • “60% of brands” using agentic AI by 2028 - this a proxy for channel enablement (Gartner Jan 2026)
  • “One in two retailers” assessing agentic AI; “20%” already deployed agents somewhere in the value chain (PwC Mar 2026)
  • US agentic shoppers could drive $190B–$385B by 2030 (10–20% of US e-commerce) (Morgan Stanley Dec 2025)
  • Europe: “100+ EUR bn” revenue impact and “up to 15%” of European e-commerce spend by 2030 (PwC Mar 2026)

2.7 Behavioural proof: AI shopping traffic is rising and looks more engaged

Milo and the pink Sambas. What “agentic retail” looks like in the real world

I use Milo, the AI Shopper as the simplest illustration of what changes when buying becomes delegated. You tell an assistant what you want, for example a specific colourway and size, set your constraints, and then you walk away. The agent keeps watching the market, compares options, and triggers the purchase when conditions are met. That turns shopping from a session into an always-on intent.

The retail implication is immediate: the “decision moment” shifts earlier, because the customer expresses intent once, then the agent does the repetitive work. For brands and marketplaces, this changes how demand shows up, how competition is evaluated, and how conversion is captured.

Why does that matter?

Here are a couple of observations.

What it signals in the agentic stack

Retail agentic commerce has a simple lifecycle, and each step stresses a different part of the stack:

  • Intent capture: the customer delegates a goal and constraints (price cap, size, delivery window).
  • Evaluation: the agent compares offers and trade-offs (price, authenticity, shipping speed, returns policy).
  • Execution: the agent pays and places the order within delegated limits (payment tokens, mandates, step-up approval).
  • Fulfilment and service: the agent tracks shipping, handles changes, returns, refunds, and disputes.

The point is that “agentic” is not a better search box. It is delegated execution across the full order lifecycle.

What changes for retailers

Three shifts matter most.

First, your product truth must be machine-consumable. Agents need structured signals: real-time availability, true price, shipping promise, returns rules, and authenticity guarantees. If that information is incomplete, inconsistent, or hidden behind friction, you fall out of the agent’s shortlist.

Second, fulfilment becomes a ranking algorithm. Anurag Singh’s point is blunt and correct: agents can buy in seconds but they cannot deliver a package, and the 3PL quietly becomes the differentiator because it determines whether you can keep promises at scale. If your fulfilment performance is variable, the agent learns that, and it routes elsewhere.

Third, liability moves closer to the brand. When the buyer is software, disputes will not disappear. They will become more frequent unless you build clear delegation limits, step-up checks for high-risk actions, and evidence-grade logs that show what the customer authorised.

Where it can go wrong

Agentic retail amplifies the familiar failure modes: fraud, returns abuse, inventory errors, and “too good to be true” offers. But the tempo changes. If an agent can search, purchase, and request a refund in a tight loop, attackers will try to automate that loop faster than your traditional controls can react. The other risk is silent brand damage: the agent has a bad experience once, and quietly stops recommending you.

Practical next steps

Pick one high-value journey and make it agent-ready end-to-end: structured offer data, clear fulfilment promises, defined delegation limits for payment and refunds, and a human-in-the-loop checkpoint for the actions you would never allow to run unattended. Then test it with a real agent workflow, not a demo script.

What's underneath this weeks headlines?

Visibility becomes a data problem, not a marketing problem

If Milo is the shape of the customer experience, then the retail question becomes painfully practical: will an agent be able to find your products, represent them accurately, and trust the commercial terms enough to execute? That is not SEO. It is structured product truth.

A good example is Azoma’s Agentic Merchant Protocol (AMP). Their pitch is not “another AI shopping assistant”. It is a merchant-side system of record: canonical, machine-native product catalogues, distribution of that truth across the open web and agent surfaces, and visibility into how agents are describing and ranking products.

This maps directly to what Stripe described in its own production learnings: the product catalog is the entry point, but agents want it in different formats, inventory needs to be verified close to real time, and variants make everything harder than it looks in a demo.

For retail leaders, the action here is simple and boring, which is why it gets skipped: treat product data as a commercial asset. That means consistent identifiers, clean attributes, clear policies, and machine-readable fulfilment promises. Syndigo is making the same point from a product content angle: if your data is incomplete or inconsistent, customers get a worse experience and agents learn to route elsewhere.


The payments layer is moving, but disputes and liability are the real test

Agentic payments are becoming technically feasible. The harder question is whether the operating model is ready.

Stripe’s “10 lessons” post is worth reading because it is written by people who have actually hit the edge cases. The key theme is that “making it work” is not one capability. It is the full lifecycle: ingestion-ready catalog data, real-time availability, checkout, and then everything that happens when the customer changes their mind or claims they never meant to buy.

That leads straight into what MajorMatters calls the agentic commerce dispute crisis. Their argument is not that the payments protocols are wrong. It is that the dispute system we have today assumes a human buyer and human evidence, and agent-led transactions break that evidence chain. IP logs and browser fingerprints do not help when the buyer is software, and the industry does not yet have reason codes, workflows, and standards for “cryptographic intent records” in chargeback representment.

Retail translation: if you are serious about agent-led checkout, you need to build three things in parallel, not sequentially:

  • permission and limits (what the agent is allowed to do)
  • evidence (what the customer authorised, and what the agent executed)
  • fulfilment and returns discipline (because operational variance becomes reputational variance when agents are ranking you)

This is where the fulfilment point bites: agents can compress buying into seconds, but they cannot deliver a package, and they cannot absorb the reputational cost when your 3PL misses the promise. Fulfilment becomes part of the trust model.

An offer from Jamie and Gam (Trusted Agents)

2 hour Executive Briefing

If you are feeling slightly overwhelmed by how quickly retail is moving from “AI shopping experiments” to payments, protocols, and operational risk, that reaction is rational. The early signal is noisy, and the incentives push vendors to talk about interfaces, not liability.

Trusted Agents exists to shorten the loop. We run a 48–72 hour executive briefing burst that aligns product, commerce, ops, security, and legal on three things: what is changing, what is actually at risk, and what you can pilot safely in the next 90 days without betting the business.

If you want the pragmatic version of this conversation, DM me on LinkedIN.

3 Organizations making this real

  • Data Sapien
    Consumer-side data and device-native orchestration, which matters when agents need trusted context without turning privacy into a liability.
  • XGEN AI
    Retail-focused AI for merchandising and shopping experiences, useful for teams trying to make “assistive AI” operational before full delegation arrives.
  • Shipwire
    A reminder that fulfilment is a platform capability, not an afterthought, and that speed and reliability are what agents will learn to optimise for.

Disclaimer: we have no commercial interests in any of these organisations. We are tracking them because they are building parts of the infrastructure layer that will unlock agentic commerce.

Where to focus now

If your team is trying to decide what to do this quarter, I’d simplify it to three questions.

  1. Can an agent understand our offer without guessing?
    If the answer depends on scraping your site or interpreting marketing copy, you have a product truth problem before you have an agent problem.
  2. If an agent buys, can we prove what was authorised?
    Not just “the payment went through”, but “this was the mandate, these were the limits, and this is the execution trace”.
  3. Are we operationally consistent enough to be ranked by machines?
    Fulfilment performance, returns, refunds, and customer service outcomes will become part of how agents learn to route.

Trusted Agents

An advisory firm specialising in Agentic Commerce, Digital Trust and Customer Empowerment.

Read more from Trusted Agents
When the customer arrives as an agent. The story of NYC's MyCity Chatbot

Tuesday 31st March 2026 When the Customer Arrives as an Agent As AI agents begin to browse, compare, negotiate, and buy on behalf of customers, businesses need a clear way to recognise them, trust them, and set limits on what they can do When the customer arrives as an agent, businesses will need to decide whether to block, ignore, tolerate, recognise, or trust that new channel. Photo by David Hurley on Unsplash Hi, welcome to the Trusted Agents situation room. We help leaders decide where...

Sunday 29th March 2026 The Agentic Shift: From Legal Work to Legal Systems Why the next phase of legal AI is about operating model, not just productivity A new trajectory for legal services Photo by Valentin Karisch on Unsplash You’re in the Trusted Agents Situation Room. Each post gives you the signal behind the headlines and the practical implications for strategy, operations, and trust. And when you’re ready, we help you build, not just plan, with an integrated delivery crew that can...

Wide-eyed, not malicious. Just optimising. That’s how agents create operational havoc.

Tuesday 23rd March 2026 The Situation Room is brought to you by Trusted Agents Free Cancellation Was Built for Humans The Missing Layer Is Agentic Resource Planning Wide-eyed, not malicious. Just optimising. That’s how agents create operational havoc. Photo by Michelle Tresemer on Unsplash If you gave a personal travel agent permission to save you money, what would it actually do? Most people assume the polite version: it watches prices, waits patiently, and books once when the price is...