Vendooly
// Policy explainer

Amazon's AI agent policy, in plain language.

Amazon added agent rules to its Business Solutions Agreement, reported as effective 4 March 2026. They govern how automated and AI-driven tools may act on a seller account: registered API access, self-identification, audit trails, and a documented human decision before high-impact changes. This page summarises what is reported, and what it changes in practice.

Ruled outSoftware that logs into Seller Central with your password and clicks through pages.
SupportedTools you authorize through Amazon's official OAuth, operating on registered API access.
Required on high impactA human decision, recorded — not an autopilot that acts and tells you later.
Summary of public reporting · not legal advice
What the policy requires

Four obligations for automated tools.

As described in public reporting on the agreement update announced in February 2026.

01

Registered API access

Automation must run through registered Selling Partner API applications. Browser automation and scraping of Seller Central are reported as prohibited.

02

Self-identification

Automated systems must identify themselves as such rather than presenting as a human operator.

03

Audit trail

Records of the actions taken must be retained — reporting cites a twelve-month retention period.

04

Human authorization on high impact

Bulk listing creation above threshold, large price moves such as more than 20% in 24 hours, and account configuration changes require a documented human decision.

The tiered model

Not all automation is treated the same.

Reporting describes three bands, separated by how much damage an action can do.

Low impact

Routine operations: inventory synchronisation, order acknowledgement, repricing inside defined parameters. Minimal restrictions beyond running on registered API access.

Moderate impact

Catalog updates, advertising bid adjustments, replies to customer messages. Rate limiting and audit logging expected.

High impact

Bulk listing creation, large price changes, account-level configuration. A documented human authorization step is required in the audit trail.

What it changes for sellers

The question is no longer "does it work", but "how does it act".

Ask how a tool connects

If a tool asks for your Seller Central email and password, it is not using authorized API access. Official OAuth means you grant scoped access and can revoke it from Seller Central at any time.

Ask what it does without you

"Fully autonomous" is a selling point that became a liability. For sensitive changes, the safer design is a proposal you approve, with the decision recorded.

Ask what it remembers

If something goes wrong on your account, you need to reconstruct what was changed, when, and on whose authority. That is what an audit trail is for.

Where Vendooly stands

This is the design we already shipped.

Vendooly was built around authorized access and human approval before the policy existed — not retrofitted to it.

Official APIs, official OAuth

Vendooly runs on Amazon's Selling Partner API and Advertising API. Access is granted through Amazon's own authorization flow. We never ask for Seller Central credentials, and no password is ever typed into an AI conversation.

Approval before every write

Reading is free. Prices, stock, listing content, bids, budgets and campaign state are prepared as proposals and executed only after explicit confirmation. Bulk operations carry additional server-side caps.

Scoped, separated, revocable

Each request stays bound to the org, seller account and marketplace you authorized. Agencies operate several client contexts without merging them, and any authorization can be revoked from Seller Central.

Sources and scope

What this page is, and what it is not.

A summary, not the text

This page summarises public reporting on the agreement update. The authoritative source is the current Services Business Solutions Agreement in your Seller Central account.

Not legal advice

Vendooly is a software vendor, not your legal adviser. For obligations specific to your business, consult a qualified professional.

Kept current

If Amazon updates the requirements or the effective dates, we update this page. Last reviewed 26 July 2026.

See what approval-based automation feels like.

Connect one seller account, ask a bounded question, and watch the assistant propose a change instead of making one.

Start free