The RealReal hardens bot defenses after Meta Muse cart-hold test
The RealReal, a secondhand luxury fashion consignment retailer, said it is updating its bot defense system, which makes it harder for AI agents to shop on its site. The change came days after The Verge reported that an AI agent could exploit the retailer's item reserve system.
The mechanism is simple. On The RealReal's website, an item goes "on hold" and is unavailable to other customers for 20 minutes once it is placed in a user's shopping cart. Using Meta's Muse, The Verge instructed the AI agent to re-add the listings to a cart as soon as each 20-minute hold expired. That effectively blocked other shoppers from buying the products for hours or longer.
After publication, chief technology officer Luke Friang said in an email that the company had addressed the Muse use case flagged by The Verge's story. According to Friang, The RealReal's bot defense configuration now makes it much more difficult for all agents to log in, add items to cart, and check out. Agents will still be able to surface listings from The RealReal and direct Muse users to product pages. Friang added that the company will continue to strengthen protections as AI-powered online shopping evolves. His statements are relayed by the article's author rather than quoted directly. Meta did not immediately respond to a request for comment.
The article places the episode in a wider trend. Technology companies are selling agents as personalized assistants for billions of people, and shopping is the early fit: Meta said in its Q3 earnings call this month that shopping was the most common use case for Muse so far, and that purchases were over $200 on average. Meta also said 10 million people in the US had downloaded the Muse app in 40 days.
The author argues that agents doing the shopping could upend the balance of the web. If humans stop visiting websites directly and reach the web through chatbots, businesses become one step removed from their customers. Retailers, most notably Amazon, have recognized that this could hurt their bottom line, especially advertising revenue, and have blocked agents from shopping on their sites. An influx of agents could also break or complicate things shoppers take for granted, like the reserve system of a used clothing website. A person has a realistic limit on how long they will add and re-add designer clothing to a cart, the piece notes; an agent does not. The capability is now in the hands of millions of consumers who are just beginning to learn how to use it, and retailers are playing catch-up.
Key facts
- The RealReal is updating its bot defense system to make it harder for AI agents to shop on its site, days after The Verge's report.
- On the site, a cart item is unavailable to others for 20 minutes; The Verge had Meta's Muse re-add listings as each hold expired, blocking other shoppers for hours or longer.
- CTO Luke Friang says agents now have a much harder time logging in, adding to cart and checking out, but can still surface listings and link to product pages.
- Meta said in its Q3 earnings call that shopping is Muse's most common use case so far, with purchases over $200 on average, and that 10 million people in the US downloaded the app in 40 days.
- Amazon is the most notable retailer to have blocked agents from shopping on its site.
Why it matters
This is a concrete case of an AI agent's tireless persistence breaking a feature built for humans. A 20-minute cart hold works when a person's patience runs out; an agent that re-adds an item every time the hold lapses can lock other shoppers out for hours or longer. The story sits against Meta's claim that shopping is Muse's most common use case, so the pressure on retailers is likely to grow rather than shrink.
Who it affects
Shoppers on The RealReal, who could lose access to a one-of-a-kind item because an agent kept it in a cart. Retailers more broadly, which the article describes as playing catch-up and which, in Amazon's case, have blocked agents over fears for their bottom line, especially advertising revenue. Also Muse users, who can still find RealReal listings through the agent but are sent to product pages for the rest.
How to use it
For Muse users on The RealReal, the practical result is a split: agents can still surface listings and direct you to product pages, but logging in, adding to cart and checking out are now much harder for agents. Plan on completing those steps yourself. The source gives no guidance beyond what Friang described.
How solid is it
The cart-hold behavior comes from The Verge's own test with Muse, and the 20-minute hold is described as a feature of the retailer's site. The fix is confirmed by The RealReal's CTO, but only through his emailed statements, which the article paraphrases. No technical details of the updated defense are given beyond Friang's description. The Muse figures ($200 average purchase, 10 million US downloads in 40 days) come from Meta.
Risks and caveats
Friang says the Muse use case has been addressed and that protections will keep strengthening, which implies the contest between agents and retailers is not over. The source does not say whether the 20-minute hold itself was changed. Meta had not responded to a request for comment. The broader worries about agents disrupting retailers' relationships with customers are the author's analysis, framed with 'could', not established outcomes.
“An agent in contrast does not care.”
— The Verge