Home Depot wants AI shopping agents to show ID before they check out

Home Depot's chief information officer told Business Insider that the retailer needs AI shopping agents to self-identify and to verify that they are acting on a customer's behalf. The report, published October 28 and written by Ben Shimkus, is not about model capability at all; the ask is narrower and more consequential: agents should arrive with an identity and with proof of authorization.

The problem is accountability rather than intelligence. Retail traffic has always been assumed to be a person behind a browser, and product pages, carts and checkout flows are built on that assumption. Once a consumer hands comparison, cart-building and purchasing to an agent, the first question a retailer has to answer is who actually sent the request and whether the user agreed to it.

Home Depot's two requirements map onto two gates. Self-identification means an agent declares which platform and which version is driving it, so the retailer can route the request into a channel it recognizes. Verification means confirming that the agent holds a mandate from the user, including what it may buy, how much it may spend and which actions it may take.

Behind those gates sits a list of concrete commercial risks. Agents that order the wrong item, order twice, lock up inventory during a promotion or check out at a stale price push the cost onto the retailer and onto ordinary shoppers. Without a way to separate a person from a program acting for that person, returns policy, fraud models and customer service all lose their reference point.

The timing is not surprising. Agentic shopping has moved from demos into real checkouts, and the tug of war between retailers and AI platforms over interface permissions, product data and liability has intensified with it. Whoever can offer a verifiable agent identity scheme gains leverage at the point of sale. By stating the requirement publicly, Home Depot is effectively making identity and authorization a precondition for access.

What the report describes is a direction rather than a mechanism. Home Depot did not detail a technical implementation, an interoperability standard or a timeline, and it did not say how it would treat agent traffic that fails the test. In the near term, that points to deal-by-deal access agreements rather than a single industry rule.

Three things are worth watching: whether Home Depot publishes a verifiable agent registration process, whether it runs an early pilot with a specific agent platform, and whether other large retailers adopt the same condition. If identity and authorization become standard clauses at retail checkout, the competitive question for shopping agents shifts from whether they can buy something to whether they can be trusted to buy it.