# US Appeals Court Overturns Amazon Injunction Against Perplexity's Comet Browser

On August 4-5, 2026, the Ninth Circuit Court of Appeals vacated a preliminary injunction that had temporarily barred Perplexity from operating its AI-powered Comet browser on Amazon’s platform. The dispute centered on Perplexity’s Comet browser, whose AI assistant allows users to carry out tasks—including shopping on Amazon—autonomously on behalf of users. Amazon had argued this violated its terms of service by automating shopping without permission, but the appeals court disagreed.

The court’s reasoning was groundbreaking: it held that when an AI agent performs actions on behalf of a user (like shopping on Amazon), it’s the user—not the AI company—who legally “accesses” the site. This interpretation effectively legitimizes AI agents that autonomously browse, compare prices, and complete transactions, removing a major legal cloud over Perplexity and setting favorable precedent for the entire AI agent category. The ruling suggests that platforms like Amazon may need to negotiate commercial agreements with AI companies rather than relying on terms-of-service enforcement to block AI-driven traffic.

The decision has implications far beyond Perplexity and Amazon. OpenAI’s rumored “Operator” agent, Google’s Gemini-powered shopping assistants, and future AI tools that automate web interactions all benefit from this precedent. If courts consistently rule that AI agents act as user proxies rather than independent actors, it removes a key legal weapon platforms have used to block automation. This could accelerate the development of AI agents that perform complex, multi-step tasks across the web—from booking travel to managing finances—without requiring explicit permission from every website they interact with.

## Fast Facts

- **Ruling Date:** August 4-5, 2026 (Ninth Circuit Court of Appeals)
- **Case:** Amazon v. Perplexity (preliminary injunction vacated)
- **Core Legal Question:** Who “accesses” a website when an AI agent acts on behalf of a user?
- **Court’s Answer:** The user, not the AI company, is the legal accessor
- **Product at Issue:** Perplexity Comet browser with AI shopping assistant
- **Precedent Impact:** Favorable for all AI agents that autonomously browse and transact on the web

## Legal Reasoning Flow

```
+--------------------------------------------------------------------------+
|              Ninth Circuit Legal Reasoning: AI Agent Access              |
+--------------------------------------------------------------------------+
[Amazon's Terms of Service]
- Prohibits automated access without permission
- Designed to block bots, scrapers, price trackers
               │
      ┌────────┴──────────────────────────────────────────┐
      ▼                                                   ▼
[Amazon's Argument]                                 [Perplexity's Defense]
- Comet browser = automated bot                     - Comet acts as user's agent/proxy
- Violates ToS, should be enjoined                  - User initiates and directs actions
                                                   - AI is tool, not independent actor
               │                                           │
               └──────────────────┬────────────────────────┘
                                  ▼
                       [Ninth Circuit Ruling]
                       - User legally "accesses" site
                       - AI company does not access
                       - Injunction VACATED
                       - RESULT: Comet can operate on Amazon
+--------------------------------------------------------------------------+
```

## AI Agent Legal Liability Matrix

The table below outlines how different legal theories apply to AI agent actions:

 | Legal Theory | Application to AI Agents | Amazon v. Perplexity Precedent | Enterprise Implication |
|---|---|---|---|
| **Terms of Service Violation** | Platforms claim AI agents violate ToS prohibiting automation | Court ruled user, not AI company, accesses site—ToS binds user, not AI provider | AI agents can automate user-authorized actions without platform permission |
| **Trespass to Chattels** | Platforms sue for unauthorized use of server resources | Not directly addressed, but reasoning suggests user authorization legitimizes access | Enterprises using AI agents should ensure user consent to avoid trespass claims |
| **Copyright Infringement** | AI agents copy content while browsing | Not addressed in this case; separate from CNN/News Corp lawsuits | AI agents may still infringe copyright by reproducing protected content in outputs |
| **Unfair Competition** | Platforms claim AI agents free-ride on their investment | Not addressed, but commercial alternatives (licensing deals) may be more viable than litigation | Platforms may negotiate revenue-sharing with AI companies rather than litigate |
| **Agency Law** | AI acts as user’s legal agent | Court implicitly accepted agency theory: AI acts on user’s behalf | Enterprises should document user authorization for AI agent actions to strengthen agency defense |

## Real-World Utility & Policy Implementation

### The 4-Step AI Agent Compliance Playbook

1. **Document User Authorization:** Implement clear user consent flows before AI agents perform actions on external websites. Capture explicit authorization (e.g., “Click to authorize Comet to shop on Amazon on your behalf”) and store consent records. This strengthens the agency theory defense that the AI is acting as the user’s proxy, not independently.

1. **Respect Technical Access Controls:** Even if courts rule AI agents are user proxies, enterprises should still honor robots.txt, rate limits, and API terms where available. Aggressive scraping or denial-of-service-like behavior could still trigger trespass or CFAA claims regardless of user authorization. Build rate-limiting and respectful crawling into agent architecture.

1. **Negotiate Commercial Agreements:** For high-value integrations (e.g., AI agents booking flights, ordering food, purchasing retail), proactively negotiate commercial agreements with platforms rather than relying solely on legal precedent. Amazon may still choose to block Perplexity via technical measures (CAPTCHAs, IP blocking) even if litigation is unfavorable—commercial deals provide certainty.

1. **Monitor Evolving Case Law:** The Ninth Circuit ruling is binding only in its jurisdiction (western US states) and may be appealed or distinguished in future cases. Track AI agent litigation in other circuits (Second Circuit for NY, DC Circuit for federal agencies) to identify divergent precedents. Adjust product design and legal strategy based on evolving case law.

## Actionable Takeaways

1. **AI Agents Gain Legal Legitimacy:** The ruling removes a major legal obstacle to AI agents that automate web interactions. Companies building AI agents (for shopping, travel booking, research, etc.) can proceed with greater confidence that user-authorized automation is legally permissible, at least in the Ninth Circuit. This accelerates the timeline for mainstream AI agent adoption.

1. **Platforms Shift to Technical Countermeasures:** Legal precedent now favors AI agents, so platforms like Amazon will increasingly rely on technical defenses: CAPTCHAs, device fingerprinting, behavioral analysis to detect and block AI-driven traffic. AI companies must invest in evading detection (or negotiating access) rather than winning in court. This creates an arms race between AI agents and platform defenses.

1. **Commercial Deals Replace Litigation:** The ruling signals to platforms that ToS-based litigation may not stop AI agents. Expect more commercial agreements where platforms license access to AI companies (e.g., Amazon Affiliate API for AI shopping assistants, Expedia partnership for AI travel booking). This creates revenue opportunities for platforms while giving AI companies reliable, sanctioned access.

## Everyday Applications & Consumer Privacy Guidelines for Shopping Agents

The US Appeals Court ruling overturning Amazon's preliminary injunction against Perplexity's Comet shopping browser marks a watershed moment for consumer automation and digital commerce. Here is how everyday online shoppers and retail managers can adapt safely.

### How Everyday Consumers Can Use AI Shopping Assistants Safely

Browser extensions and autonomous shopping agents promise to find the lowest price, apply hidden coupons, and complete checkout automatically. However, granting an AI browser extension permission to interact with shopping carts requires strict digital hygiene:

- **Never Store CVV or Card Security Codes:** Allow AI assistants to populate shipping addresses and select preferred merchant listings, but always manually type your credit card CVV or complete biometric confirmation (Apple Pay, Google Pay).
- **Disable Background Script Execution on Banking Portals:** Restrict browser shopping extensions from accessing financial institutions, crypto wallets, and payroll portals by configuring extension site access to "On Click" rather than "All Sites".
- **Verify Price Calculations at Final Review:** Automated shopping scrapers occasionally miscalculate shipping thresholds, regional taxes, or currency conversions. Always verify the final line-item total on the merchant's native order confirmation screen.

### Practical Strategies for E-Commerce Merchants & Retailers

For store owners on Shopify, WooCommerce, or custom platforms, autonomous shopping agents present both new sales opportunities and traffic management hurdles:

- **Structure Real-Time Product Feeds:** Implement accurate Schema.org JSON-LD microdata (`Product`, `Offer`, `priceCurrency`, `availability`) so shopping agents extract current pricing without scraping stale HTML caches.
- **Differentiate Between Helpful Agents and Scalpers:** Set rate-limiting rules that allow user-delegated single-item price queries while blocking automated bulk scrapers that drain server compute during flash sales.
- **Create Agent-Friendly Checkout Workflows:** Streamline guest checkout and one-click purchase options to minimize cart abandonment when AI shoppers direct buyers to your storefront.