yarvi.

Issue #1 · November 24, 2026

The State of AI Shopping: Issue #1, November 24, 2026

97.8% of Shopify stores let GPTBot crawl. 78.2% then rate-limit any agent that actually shows up.

I crawled 403 Shopify stores on October 25. The robots.txt on 394 of them (97.8%) allows GPTBot, 367 through Shopify's untouched default. Only 5 block it; 4 serve no robots.txt at all. Then I made a real HTTP request from an honest, unverified bot. 315 of those same stores returned 429 local_rate_limited on the homepage. The agent instructions say come in. The edge says identify yourself. Neither one shows up in analytics.

That gap is the whole story of agent commerce in late 2026, and it's the launch issue of this report.

By Ned Lutz

Inside

What's in Issue #1

  1. 1

    The UCP footprint

    Live on 369 of 403 storefronts, and almost entirely Shopify's boilerplate.

  2. 2

    The blocking paradox

    robots.txt says come in. The edge returns 429 to unsigned agents on 315 homepages.

  3. 3

    Category deep-cut: prebiotic soda

    Which brands Google AI Mode and Perplexity name when shoppers ask for the best one.

  4. 4

    The hidden winners

    The 25 stores that rewrote their agents.md, and what they changed.

  5. 5

    Why Shopify's dashboard isn't enough

    What the AI channel number leaves out.

  6. 6

    Methodology & limitations

    How the census was run, and what we refused to do to get more data.

Data: 403 Shopify stores, crawled October 25, 2026. Sample selected to represent the DTC segment; Shopify Plus status not independently verified from public endpoints. The methodology section lists every limit, including what we refused to do to get more data.