The AI industry spent the last year promising that autonomous agents would change everything. Book your reservations, clean your inbox, buy your shoes, handle your life. Now those same companies are running into a wall they didn’t see coming: the rest of the internet doesn’t want to play.
In recent weeks, users of Meta’s Muse, xAI’s Grok, OpenAI’s Dots, and Instinct have reported blocks preventing their AI agents from completing basic tasks across major websites. Yelp is turning them away. So are others. The pattern is clear. Websites are closing their doors.
This isn’t a technical glitch. It’s a deliberate choice by companies that see AI agents as a threat to their business models. And they’re right to worry.
AI agents don’t browse websites the way humans do. They don’t see ads. They don’t click through multiple pages. They extract what they need and leave. For websites built on advertising revenue or user engagement metrics, that’s a nightmare scenario.
The tension here runs deeper than ad impressions. When an AI agent scrapes data from Yelp to find you a restaurant, Yelp loses the ability to show you their sponsored listings, their premium placements, their whole revenue model. The agent gets the value. Yelp gets nothing.
This puts AI companies in an awkward position. They’ve sold agents as products that can do anything on the web. But they can’t control what the web allows. And increasingly, the web is saying no.
The timing makes this messier. Meta just updated its commercial terms to remove language that suggested it could scrape content from news sites and other domains to train its AI systems. After backlash, that language disappeared from the terms page.
A Meta spokesperson insisted the change didn’t reflect a shift in how Meta crawls the web. But the language was there, then it wasn’t. Companies noticed. Users noticed.
Meanwhile, Meta’s own AI agent, Muse, is getting blocked by websites that don’t want to be training data or free labor for Meta’s products. The irony is thick. Meta wants to scrape the web but doesn’t want to let the web’s agents do their job.
This creates a fracture in how the internet works. For years, websites could control how they appeared to search engines through robots.txt files and other signals. Crawlers followed rules. The system worked, more or less.
AI agents break that model. They don’t just index content for later retrieval. They act on it in real time, on behalf of users who never visit the actual site. That’s a different transaction, and websites aren’t agreeing to it.
The AI companies building these agents have options. They could negotiate access deals with major websites, the way search engines sometimes pay for content. They could build agents that respect existing web standards and limitations. Or they could try to force the issue and hope websites blink first.
Right now, it looks like websites are winning. When Yelp blocks an agent, the agent fails. The user gets an error. The product doesn’t work. That’s not a sustainable position for companies trying to sell agents as the future of computing.
If major websites keep blocking AI agents, the agent vision collapses. You can’t have an AI that “does anything on the internet” if half the internet won’t let it in.
This could push AI companies toward walled gardens. Build agents that work within their own ecosystems, with partners who’ve agreed to play along. That’s a smaller vision than the one they’ve been selling, but it might be the only viable one.
Or it could accelerate licensing deals. OpenAI, Anthropic, and others have already signed content partnerships with news publishers and other platforms. Expect more of those, with terms that explicitly cover agent access alongside training data.
The alternative is a fragmented internet where AI agents work on some sites but not others, creating a two-tier web. Sites that allow agents, and sites that don’t. That would be messy for users and complicated for developers, but it might be where we’re headed.
The AI industry promised agents would be everywhere, doing everything. Turns out the web has other plans.
One email at dawn. The five stories that mattered, with the bits removed and the meaning kept. Free, for now.