Cloudflare says websites pay the bill for AI agents

SPEAKER_1 (0:00)

This is Marketing Is Calling, the audio edition of Landline, the daily newsletter from PPC Land. It's Monday, November 9th, 2026 This episode is read by an AI voice.

Today, Cloudflare says websites are paying the bill for AI agents. Meta gives its Muse agent a voice and lets it build its own tools. Amazon swaps Grubhub for Uber Eats inside Prime. Apple lets apps make one last offer to people who cancel. And a husband sues OpenAI over a poisoning plot.

We start with a simple question. When the visitor to a website is a machine, who pays? On Sunday, November 8th, PPC Land reported on a position paper Cloudflare published on November 5th. Its answer is blunt. In nearly every case, the website pays. The paper lists 14 problems that AI agents create. A shop can't tell whether a purchase was really authorized. A bank's login page gets hammered by software holding real passwords. And a publisher's article gets summarized by a bot that never loads a single ad. Cloudflare wants a rule it calls the Intermediation Principle, which says the relationship between a person and a website should survive whatever software sits in the middle. It also wants a new way for sites to say what agents may do, because robots.txt, it says, wasn't built for this.

There's a catch. Cloudflare sells bot management, so its diagnosis and its product line point the same way. And it published no traffic or dispute figures of its own. But the outside numbers it cites are striking. Arcos Labs found that 97.7% of legitimate AI agent sessions carried no verified identity. And Human found that one agent, Meta's Muse, made 72% of AI agent requests.

Which brings us to Muse. Because Meta spent the week making it busier. On November 6th, Meta added something called spaces. You describe a tool in plain language. A gift tracker, a wedding planner, an order tracker for a small shop. And Muse builds it. Then keeps it updated in the background. Three of Meta's nine examples involve shopping. Including a hub that pulls together Instagram saves and Marketplace listings.

A day earlier, Muse got a voice and an animated avatar. In the US, but not yet in Canada. You can interrupt it, and it keeps working on tasks while it talks.

Meta says one Nvidia chip can run 12 live avatar sessions at once, and PPC Land worked out that 1,000 people talking at the same time would need about 84 of those chips. Here's the part advertisers will want to watch. Meta said in December 2025 that it would use AI chats, voice included, to personalize ads. Muse launched with the promise to keep conversations out of ad systems. Meta hasn't said how voice recordings are stored or used. Brands are starting to measure all this. Bolt, the ride-hailing company, signed a startup called Searchable to track how often AI chatbots recommend its rides in five markets, from the UK to Thailand. The IAB says only 16% of brands track their AI visibility in any systematic way. Now, to dinner. Since November 5, Prime members in the US can order Uber Eats through Amazon, with no delivery fee on orders of $25 or more. The same day, Prime's free Grubhub benefit ended. Grubhub waived fees above $12, so the threshold has roughly doubled. Amazon says a typical member could save more than $175 a year, though its own footnote says the savings will vary and are not guaranteed. The financial terms and whether Uber Eats gets any advertising or data deal were not disclosed. Walmart went the other way, into the sky. It signed a multi-year deal with Zipline for 300 more drone delivery sites in the US. Walmart says its drones have now made more than 2 million deliveries, double the figure from late May. Every one of those orders starts in the Walmart app, which is where its ad business collects its data. And WhatsApp event invitations now reach people who don't even have WhatsApp. Guests open a link in a browser and reply. Meta hasn't said what it collects from those guests. Apple has given app makers a last word with customers on their way out. Since November 4, any app with an auto-renewing subscription can show a message, an image, or a discount when someone taps cancel subscription. Apple's own numbers show messages with a promotional offer improve save rates by 223%.

That sounds enormous until you look at the baseline. PPC Land puts the starting save rate at roughly 2.5%, so it rises to about 8%.

Most people still leave. And Apple keeps its commission on every subscription it helps save. Apple is also looking at automating the store page itself. A pending patent describes AI that repaints the background of an app's screenshots around each search keyword. It hasn't been granted, and PPC Land found that an outside analysis overstated what the filing actually says. For Google advertisers, this weekend's changes were in the plumbing. Google's Performance Max help page now says stable performance needs at least 15 conversions a month. Google doesn't say whether that's per campaign or per account. Data manager arrived in Google Analytics as a beta, and the main warning is about counting twice. Run the same data pipeline in Analytics and in Google Ads, and the same conversions can be logged twice, which skews the numbers bidding relies on. The data manager API now accepts call conversions, but only with the caller's number hashed, and API developers face a deadline in the week of December 7, when changes to multi-party approval take effect. On the results page, Google is testing a new shopping ad layout in the mobile shopping tab, and a feature called brand linking. Microsoft Advertising now requires financial services verification for advertisers targeting Australia and the EU.