Small online stores: what an AI agent can and can't do with your software

• Last verified October 28, 2026
• Updated Oct 28, 2026Published Oct 28, 2026

Online shops with a handful of people tend to run on a stack of rented software: a storefront or marketplace account, an email and text list, a payment processor, a shipping app, a help desk inbox, a review app, something for sales tax and an ad account. This page looks at which of those Meta's Muse, or another connector-based AI assistant, can reach now, what routine store work it could take on, and where an owner or staff member should stay in the loop. It's meant for shops of one to ten people selling physical or digital goods to consumers. Wholesale and B2B portals, dropshipping suppliers, enterprise commerce suites and anything about investing or lending are out of scope.

Each statement on this page carries a label saying what backs it up:

How we built it: our research covered store, marketing, shipping, support and tax vendors' help and developer pages, along with federal statutes, FTC and FCC rules, two court opinions and Federal Register notices, and every source lists the day we read it. We didn't link an AI assistant, Muse included, to a live shop, payment account or ad account, didn't buy a label or send a message, and didn't test any of these tools. A vendor's documentation tells you what the product is supposed to do, not whether it suits your store.

Short version

• Among the tools Meta's launch post lists for Muse are Shopify, Klaviyo, Stripe, Intuit QuickBooks and Canva, plus your Facebook and Instagram business accounts. Meta says the complete list lives in Muse's app settings, which we didn't review. (Confirmed by vendor 1)
• Shopify says its Muse connector can't refund, cancel or capture orders, mark them paid, process returns or touch gift cards, even after you grant write access, and that it only reads orders and customer records. (Confirmed by vendor 6)
• WooCommerce, BigCommerce, Square, Wix and Shippo each publish their own MCP servers; WooCommerce's is a developer preview, BigCommerce's store tools are a closed beta and Square's is in beta. (Confirmed by vendor 11 14 16 17 23) Meta's launch list leaves all five off, so reaching them from Muse takes a custom connector, and Meta doesn't vet those.
• Some of these tools act on real money: Shippo says buying a label charges your account and its hosted server has no test mode, and BigCommerce warns that a refund made through its tool returns money to the shopper and can't be reversed there. (Confirmed by vendor 23 14) Begin with read access.
• Under the FTC's consumer review rule, a business can't write or buy reviews that misstate who the reviewer is or what they experienced, and from paying for reviews on condition that they're positive or negative. (Confirmed by the FTC 38) An agent that drafts reviews for your own products is a liability.
• Under the FTC's mail and internet order rule, a store has to have a reasonable basis for any shipping time it states, or for shipping within 30 days when it states none. (Confirmed by the FTC 37) Don't let an agent promise delivery dates the warehouse can't keep.

Stack map

Swipe the table sideways to see every column →

If you want a custom connector

Tools missing from Meta's list need some kind of bridge, set up by you or a developer: Zapier's MCP server, an MCP server the vendor runs, or code a developer writes on top of the vendor's API. According to Meta's help center, Muse keeps a custom connector's credentials in its Secure Credentials Store but doesn't review custom connectors or their data handling, lets many connectors be limited to retrieving information, and may keep in Muse's memory what it learned from a tool after you disconnect it. (Confirmed by vendor 2) Meta's guidelines for connector builders require approval for actions like purchases and sending email, with no Always allow option for them, and say read access to financial data is fine but tools that transfer money between accounts aren't being accepted at the moment. (Confirmed by vendor 3) For a shop, the safe pattern is one connector per tool, read-only first, signed in as a staff account with no more access than the task needs.

Jobs you could hand off today

Swipe the table sideways to see every column →

We haven't tried any of these ourselves. Results depend on your plan, your staff permissions and how each connector is set, so start with a handful of products or orders and have someone check the output before trusting it.

Keep these out

• Refunds, cancellations and chargebacks. Shopify blocks its connector from refunds, cancellations, returns and marking orders paid, whatever access you grant. (Confirmed by vendor 6) BigCommerce says only to grant its order-modify permission if you want the agent able to refund, warns that a refund can't be undone through the tool, and says resubmitting one can refund a shopper twice. (Confirmed by vendor 14) Stripe makes a person confirm refunds and outbound payments requested through its MCP. (Confirmed by vendor 10) We found no vendor documentation for answering chargebacks or disputes through an assistant. (Unverified) Keep money going back to customers in a person's hands.
• Live price changes. The Shopify connector can change variant prices and create discount codes on products that are already for sale. (Confirmed by vendor 6) BigCommerce holds new promotions disabled until a person enables them. (Confirmed by vendor 14) Have a person approve every price on a live listing.
• Ad spend. Meta's ads connectors can create and edit campaigns, and Meta's July 16, 2026 update added ads MCP server rules so a business portfolio admin with full control can limit what agents do, from budget changes to catalog updates. (Confirmed by vendor 33) Set those rules before connecting an agent, and keep budgets and bids with a person.
• Marketing that goes out without review. Klaviyo's MCP includes a send_campaign tool that mails a campaign to its configured audience. (Confirmed by vendor 9) Gorgias lists create_message, reply_and_close and apply_macro as tools that reach customers, and says whether your assistant asks before running them is set in the assistant, not in Gorgias. (Confirmed by vendor 25) Have a person read every send.
• Buying postage. Shippo charges for each label bought through its server and offers no test mode there; test keys work only against its regular API. (Confirmed by vendor 23)

Risks to keep a person on

Shipping promises and delays

16 CFR 435 requires a reasonable basis for expecting to ship within the time a seller states, or within 30 days if no time is given (50 days when the buyer is applying for credit to pay). When a store can't ship on time, it must offer the buyer a choice between agreeing to the delay or canceling for a prompt refund, no later than the original deadline. A prompt refund means within 7 working days, or within one billing cycle for a credit sale. A seller without records of its shipping basis faces a rebuttable presumption that it lacked one. (Confirmed by the FTC 37) An agent drafting "where's my order?" replies shouldn't quote dates or skip the delay notice.

Reviews and testimonials

Part 465 forbids writing, creating or selling a review that misrepresents that the reviewer exists, used the product or had the experience described; offering pay or perks conditioned on a review's sentiment; posting reviews by officers or managers without disclosing the connection; claiming the reviews on display are all of them when negative ones are held back; and knowingly buying or selling fake social-media indicators such as followers or views for a commercial purpose. (Confirmed by the FTC 38) Judge.me says reviews created through its API can't be marked verified or deleted. (Confirmed by vendor 27) Use an agent to ask buyers for reviews, never to write them.

The FTC's Endorsement Guides say an endorsement has to reflect the endorser's honest opinion, advertisers should guide and monitor the people promoting them, and a material connection such as a free or discounted product must be disclosed clearly, even when no post was required in return. (Confirmed by the FTC 39) Influencer seeding and gifted-product campaigns need that disclosure in every draft.

Subscriptions and recurring orders

The Restore Online Shoppers' Confidence Act makes it unlawful to charge for a negative option sold online unless the seller discloses all material terms clearly before collecting billing information, gets the buyer's express informed consent before charging, and offers a simple way to stop recurring charges. (Confirmed by Congress 45) A separate section bars charging for a post-transaction third-party offer online unless its seller discloses the terms up front, including that it isn't affiliated with the store. (Confirmed by Congress 46)

The FTC's 2024 click-to-cancel amendments are gone: in Custom Communications v. FTC, the Eighth Circuit granted the petitions for review and vacated the rule. (Confirmed by court ruling 47) A final rule effective Feb. 12, 2026 put the Negative Option Rule back to the text in force before the 2024 amendments. (Confirmed by the FTC 48) The statute above still applies. Keep an agent away from subscription terms and cancellation flows.

Marketing email

The CAN-SPAM Act bars misleading subject lines in commercial email, requires a working opt-out and a valid physical postal address, and gives senders 10 business days to honor an unsubscribe. (Confirmed by Congress 41) The FTC's CAN-SPAM rule adds that a sender can't charge a fee or ask for anything beyond an email address and opt-out preferences, or make the person do more than reply to an email or visit one web page, to unsubscribe. (Confirmed by the FTC 40) An agent shouldn't build lists from customer service conversations or edit unsubscribe settings.

Marketing texts

The FCC's rule requires prior express written consent before an advertising or telemarketing call made with an autodialer or a prerecorded or artificial voice reaches a cell phone. (Confirmed by the FCC 43) The FCC's Nov 25, 2026 change to how people revoke consent to calls and texts lets a sender choose one exclusive way to opt out: a reply with a standard word such as "stop," "unsubscribe" or "cancel," an automated voice or key-press option, or an opt-out web page or phone line of the sender's choosing. The chosen method has to be disclosed clearly in each message, a sender that picks none must honor any reasonable request, and each revocation has to take effect within ten business days of receipt. Opting out in response to a marketing text ends all marketing texts from that sender, and a confirmation text is allowed only if it carries no promotion. (Confirmed by the FCC 44) Don't let an agent change your texting keywords or start new text lists.

"Made in USA" claims

Part 323 treats an unqualified Made in USA label as deceptive unless final assembly or processing happens in the United States, all significant processing happens there, and all or virtually all of the ingredients or components are made and sourced there. The rule covers mail order catalogs and promotional material, electronic ones included. (Confirmed by the FTC 42) An agent writing product copy shouldn't add origin claims your suppliers can't back up.

Sales tax

In South Dakota v. Wayfair, the Supreme Court overruled the physical presence rule of Quill, holding that South Dakota's law, which reached sellers with more than $100,000 of sales or 200 or more separate transactions in the state each year, could satisfy the nexus requirement, and it sent the case back to the state court. (Confirmed by court ruling 49) That threshold is South Dakota's 2016 law as the Court described it. We didn't check any state's current economic nexus threshold, marketplace facilitator rules or filing deadlines for this page. (Unverified) Avalara's MCP can create tax transactions and nexus records, (Confirmed by vendor 29) so keep registrations and filings with you or your tax preparer.

Card data

Shopify says it's certified Level 1 PCI DSS compliant, that this extends by default to every store it powers, and that Shop Pay keeps customer details on its PCI compliant servers. (Confirmed by vendor 35) Stripe says it's a PCI Service Provider Level 1 and helps with the self-assessment questionnaire when you use its Checkout or Elements. (Confirmed by vendor 36) Card numbers should never pass through a chat with an agent.

Product safety

Treat this page as a summary of published sources, not as legal, advertising or tax advice. Marketplace policies, your payment processor's terms and state law can add duties this page doesn't cover.

FAQ

Can Muse run my Shopify store?

Part of it. Shopify says the connector doesn't replace your Shopify admin, which you still need for payments, taxes, domains and getting a store ready to launch. (Confirmed by vendor 6)

Will Muse send my Klaviyo campaigns on its own?

Meta's launch post promises Muse won't publish, send or spend anything until you approve it, and Klaviyo describes Muse scheduling sends with your approval. (Confirmed by vendor 1 8) A custom connector to Klaviyo's MCP server is a different matter; use its read-only setting until you trust it.

Can an agent reach my Etsy or Amazon shop?

Only through an app you register with each marketplace's API: Etsy's seller app or Amazon's self-authorized private app. (Confirmed by vendor 12 13) Neither is on Meta's launch list.

What does Zapier cost here?

Can an agent buy shipping labels for me?

Shippo's server and ShipStation's GitHub server both have label tools, and Shippo charges for each label. (Confirmed by vendor 23 22) Keep label buying manual until you've checked a batch.

Changes to this page

Swipe the table sideways to see every column →

Found a mistake or a newer source? Send it through Corrections, with a link to the source, and we'll recheck the claim and record the change here.