Platform Vendors Now Dictate Which AI Agents Can Buy from Your Clients’ Sites — Business of Tech: Daily MSP News & IT Services Analysis

The episode highlights a structural shift in web traffic patterns: machine-driven activity, particularly from AI agents, now makes up the majority of website visits and increasingly determines how businesses are discovered and engaged online. Companies such as Cloudflare, Human Security, and SimilarWeb provide data showing automated and AI-initiated web events have surpassed human visits, with a significant acceleration in the role of AI-driven assistants and agents in both discovery and transaction processes.

Quantitative evidence from Cloudflare indicates that automated traffic now accounts for nearly 58% of all page loads. Human Security’s report shows an 8,000% increase in AI agent-driven traffic year over year. SimilarWeb data cited by TechCrunch finds Google's AI-generated answers now appear in 43% of searches, up from 15% in the previous year. Additionally, ESW's commercial announcement describes end-to-end automated purchasing workflows using AI agents, moving transaction control further from human users.

Supporting developments include technical shifts in how web authentication and authorization are managed, with protocols such as the Model Context Protocol deprecating session-based trust in favor of per-request authorization with attached metadata. Yubico's security key update similarly enables authentication for specific actions rather than broad sessions. Microsoft’s entrance into machine identity and agent security management with its own specialized model, combined with alliances like NVIDIA’s Open Secure AI Alliance, signal organizing at platform scale, raising questions about who ultimately governs admission policies for AI-driven interactions.

For MSPs and technology leaders, these changes increase operational dependence on platform and identity providers, reduce direct control over business discoverability and transactability, and pose new risks in reporting, fraud exposure, and client relationship management. Default platform settings may dictate client market access without their knowledge, shifting the role of the provider from technical implementer to advisor and policy manager. To minimize risk, providers must inventory and periodically review clients' current admissions policies for machine traffic, disentangle discoverability from transactional permissions, and proactively track changes imposed by vendors and platforms.

00:00 Most Traffic Isn't Human

03:49 Why the Login Is Breaking

06:36 Microsoft Wants the Doorway

10:07 Why Do We Care?

Supported by:

LogMeIn
TimeZest

About Business of Tech: The daily MSP news and analysis podcast for managed service providers and IT services leaders. Host Dave Sobel covers AI for MSPs, MSP pricing and profitability, MSP M&A and private equity, vendor partner programs, MSP cybersecurity and liability, and MSP operations — and answers the question every story raises: Why do we care? Produced by MSP Radio.

💼 All Our Sponsors

MSP Radio is supported by our partners:

ABC Solutions · CometBackup · Firetail · HaloPSA · LogMeIn · Mailprotector · Pax8 · Rythmz · ScalePad · TimeZest · Transit AI

Supporting the IT services community through insights, analysis, and transparency.