The RealReal says AI agents face tougher bot defenses

The RealReal's CTO told The Verge new bot defenses make it much harder for AI agents like Meta's Muse to log in, add to cart and check out.
What it means for founders
- Agent access is granted, not assumed. A retailer can restrict login and checkout for agents with a configuration change, so any product that buys on users' behalf carries platform risk on every merchant it touches.
- Agents expose rules built for human patience. Cart holds, waitlists and drops assume people get bored. Audit any scarce resource in your product that an agent could hold indefinitely.
- Read-only access may become the compromise. The RealReal says agents can still surface its listings while transactions get harder. Expect more merchants to split discovery from purchase.
- Watch October 29. The RealReal reports third-quarter results that day, per its release, a chance for management to address agent traffic.
The story
The RealReal, the resale marketplace for authenticated luxury goods, says it has reconfigured its bot defenses so that AI agents struggle to complete purchases on its site, The Verge reported on Monday, October 26. Luke Friang, the company's CTO, said in an email to the outlet that the change addresses a Muse use case the publication had flagged, and that signing in, carting items and checking out are now far harder for any agent. Agents can still find RealReal listings and send Muse users to the product pages, he said.
The loophole that prompted it
On The RealReal, putting an item in your cart holds it for 20 minutes, during which no one else can buy it. In a report published Thursday, October 22, Verge features writer Mia Sato described telling Meta's Muse agent to load the ten newest listings from one brand into her cart, then put them back each time the hold lapsed. The agent kept at it all day, with no purchase intended, until she stopped it. With a $12 monthly plan sold for early access to new items, an endlessly renewed hold shuts other buyers out.
Before the fix, Friang had told The Verge by email that the company stayed open to third-party agents, sign-ins included, while guarding against automation that disrupts the shopping experience. Now he says protections will keep getting stronger as agent shopping evolves.
A patchwork of doors
The RealReal joins a growing list of companies limiting what outside agents can do. Amazon blocked Muse in September, per GeekWire via The Verge, and Amazon later confirmed to The Verge that it had asked Meta to remove Amazon from Muse. Target told The Verge that agents may reach some parts of its site and not others, and that it has safeguards against unauthorized bots entering customer accounts or making transactions. Enki has also covered how Delta, Yelp and Chase are turning agents away. Others are moving the other way, as when Walmart opened its store to AI shopping agents.
The stakes are rising for Meta. Per The Verge's account of Meta's third-quarter earnings call, the company said shopping leads Muse usage to date, with an average order above $200. Sensor Tower data cited by TechCrunch puts Muse at 10.2 million U.S. downloads within 40 days of launch. Meta did not immediately respond to The Verge about the change. For the earlier report, Meta spokesperson Tracy Clayton told The Verge in an email that Muse "is designed to always ask permission before buying."
What we don't know yet
- How the new defenses tell agents from people, and whether human shoppers will meet more friction.
- Whether The RealReal will change the 20-minute hold or offer agents a sanctioned way to buy.
- Whether Meta will adjust how Muse handles reservation systems like this one.
Sources
Enki Daily
Get stories like this every weekday morning.
The day's AI stories for founders, each with what it means for your company. Free.
More in Policy & Safety
- Cohere flags Qwen's attempted Beijing bucket upload

For founders: Reasoning text is not a guardrail. Enforce policy on the actual tool call, since Cohere's case shows the stated plan and the action can diverge.
TechCrunch · 18h ago - r/opensource bans AI, turns away non-English speakers

For founders: One launch channel just closed to most AI startups. If your open source project wraps a model, ships an agent or was written with an AI coding assistant…
The Verge · 2d ago - Meta postpones new business terms to November 20

For founders: Your website may be in scope. As reported, the terms cover content on sites associated with a Meta business account, not only news outlets.
The Verge · 4d ago - Pennsylvania enacts law on labeling deceptive AI ads

For founders: Creative tool makers inherit the problem. The posted text puts the duty on advertisers rather than model vendors, but if you sell AI image, video or voice…
The Verge · 3d ago - Google policy lets Gmail and Photos data shape ads

For founders: Audit the accounts your team works in. Anyone who linked work files in Gmail or Drive to Personal Intelligence may be passing company context into a system…
The Verge · 4d ago