A primary barrier to deploying autonomous AI agents isn't their intelligence, but the internet's existing infrastructure. Current systems, with rate limits and spam filters, are not designed for high-frequency agentic activity and often block them, limiting their ability to operate effectively.

The primary obstacle for tools like OpenAI's Atlas isn't technical capability but the user's workload. The time, effort, and security risk required to verify an AI agent's autonomous actions often exceed the time it would take for a human to perform the task themselves, limiting practical use cases.

A major hurdle for AI-powered commerce is that current systems can't trust agents. E-commerce fraud detection relies on tracking user signals like IP addresses and behavior. An agent making many purchases from the same IP looks like a bot, making it impossible for merchants to distinguish legitimate customers from fraud.

The first wave of AI commerce involves agents using human financial identities, creating massive security risks via 'prompt injection' attacks. The necessary second wave gives AI its own firewalled wallet, containing the blast radius of any failure and driving the need for new, separate financial infrastructure.

While the industry buzzes about sophisticated "agentic AI," the most common real-world applications in e-commerce are far more basic. Retailers are primarily using AI for task-oriented work like optimizing SKU description pages, highlighting a significant gap between current capabilities and future hype.

While headless APIs are ideal, many websites and apps actively block headless browsers to prevent scraping. This forces AI agents to interact with the standard graphical user interface to complete tasks, just as a human would, rather than relying on APIs.

To enable agentic e-commerce while mitigating risk, major card networks are exploring how to issue credit cards directly to AI agents. These cards would have built-in limitations, such as spending caps (e.g., $200), allowing agents to execute purchases autonomously within safe financial guardrails.

For years, businesses have focused on protecting their sites from malicious bots. This same architecture now blocks beneficial AI agents acting on behalf of consumers. Companies must rethink their technical infrastructure to differentiate and welcome these new 'good bots' for agentic commerce.

For AI agents to move beyond information retrieval and perform meaningful business tasks like paying invoices, they need their own financial infrastructure. This includes dedicated bank accounts and credit cards with programmable spending limits and controls.