What an eCommerce AI agent actually is
An agent is not a chatbot with your catalog pasted into the system prompt, and it is not a workflow you drew in advance. Workflow automation follows a path you defined: if this, then that. An agent is given a goal, a set of tools, and permission to decide which tools to call and in what order.
That flexibility is the entire value and the entire risk. It means the agent handles the case you did not anticipate — the customer whose order shipped in two parcels, one of which was scanned as delivered to a neighbour. It also means the agent can take an action you did not anticipate. Which is why, on every build we ship, the tool catalog and the write boundary get designed before the prompt does.
We have written this up in depth. The eCommerce AI Agents field guide is a 64-part series covering each agent family below, with the architecture, the tool catalog, the human approval gate, and what breaks when you skip one.
Where merchants actually start
The temptation is to start with the most impressive agent. The right move is to start with the one that has a clear owner, clean data, and a decision a human already makes consistently.
In practice that ranking usually looks like this:
- Customer support and WISMO — highest volume, lowest blast radius, data already in your order system, escalation path already staffed.
- Inventory and reorder — high value, but only once orders, inventory and vendor records agree on what a SKU is.
- Returns and refund investigation — strong ROI, but every action needs a human gate because it moves money.
- Margin and pricing — the highest-value agent and the one most merchants are least ready for, because it needs cost data that is often nowhere near the storefront.
The AI Agent ROI guide publishes the scoring method we use — volume, data readiness, blast radius, effort — so you can run the exercise on your own workflows before engaging anyone.
If the next question is money, the cost worksheet splits platform, model, integration, and reviewers. The vendor checklist and the RFP template are what you send a bidder. None of them is a case study. We still do not have one.
What we build before we build the agent
Most eCommerce AI projects fail before a model is involved. The readiness assessment exists to find that early rather than in month three.
- A tool catalog. Every action the agent can take is declared, typed and reviewable. Anything not in the catalog is not reachable. This is the single highest-leverage control, and it is a design artifact, not a prompt.
- Cedar authorization on writes. Mutating an order, a price or a customer record is evaluated as a permission decision outside the model. AgentCore added fine-grained access control through Gateway Cedar on August 28, 2026, and Memory namespaces inherit it.
- A human on anything that moves money. Refunds, price changes and purchase orders route to approval by design, not by exception. The agent assembles the evidence; a person makes the call.
- Evals with a pass bar. A golden dataset per agent and a threshold it must clear before launch, run on every deployment through AgentCore Evaluations.
- A cost ceiling. Per-conversation token budgets and model routing by task, with CloudWatch alarms that fire before the threshold rather than after.
The data layer is usually the real project
An agent asked which SKUs to reorder needs orders, inventory, products and vendors to join reliably. If those systems disagree about what a product identifier is, the agent will produce confident, wrong answers — and confident wrong answers are worse than no agent, because someone will act on them.
This is why the readiness assessment comes first and why, for a meaningful share of merchants, the honest first engagement is a data-layer project rather than an AI one. We would rather tell you that in week one than in month four. See why your eCommerce data is not ready for AI agents for the specific join keys and contracts involved.
The other direction: agents that buy from you
Everything above is outbound — agents you operate, taking actions in your systems. There is a second half to agentic commerce, and it is moving fast: shopping agents inside ChatGPT, Gemini and elsewhere now read catalogs, compare products and complete checkouts on a customer’s behalf.
Two open standards have emerged. The Agentic Commerce Protocol, created by OpenAI with Stripe, has been live in ChatGPT since September 2025 with partners including Instacart, DoorDash, Shopify and Etsy. The Universal Commerce Protocol, led by Google with Shopify, Etsy and Walmart, launched in early 2026.
Making your catalog legible to those agents is a different engagement — see Agentic Commerce Readiness — but it draws on the same underlying work: structured product attributes, reliable join keys, and a callable surface over your commerce data.
Built on AWS, because that is the part that breaks
The model is rarely what fails in production. What fails is an agent with unbounded write access, no way to measure whether it is right, and no ceiling on what it costs when traffic triples.
Commerce makes that harder than most domains. Agents run beside a PCI-scoped checkout they must never wander into, against data spread across a storefront, an ERP, a CRM and a warehouse system, during the one week of the year when an hour of degradation is a number the board sees.
That is the half of the work we have been doing since before agents existed. FactualMinds is an AWS Select Tier Services Partner with AWS-validated Foundational practices in RDS Solution and Delivery, CloudFront-Powered CDN migration, and Static Image Delivery using S3 and CloudFront — and we have run Amazon SES at 200M+ messages a month for an eCommerce platform.
How the engagement runs
Readiness. Fixed scope. We assess whether your data, systems and approval paths can support an agent at all, and produce a ranked list of candidate workflows with the blockers named.
Scope one agent. We pick the workflow with the clearest return, define its tool catalog and write boundaries, and agree the human approval gate before any code exists.
Ship with evals. Built on AgentCore with a golden dataset, a pass bar, cost caps and an audit trail. It goes live when it clears the bar.
Expand the fleet. The next agent runs against the same guardrails, then the supervisor layer that coordinates them. Your team owns the infrastructure-as-code and the runbooks throughout.