By 2027, Gartner estimates that a meaningful share of e-commerce browsing sessions will involve some form of AI agent acting on a shopper’s behalf. Zero. That’s roughly how many third-party cookies Chrome will be reliably passing by then. So how does identity resolution work when the “user” browsing your site might be a bot doing the shopping for a human who never even looks at your homepage? That question is why every identity resolution vendor worth its Series B is scrambling to rebuild its stack around agents, not humans, before the cookie finally dies for good.
The Cookie Deprecation Timeline Nobody Fully Trusts, But Everyone Is Planning Around
Google has delayed third-party cookie deprecation in Chrome so many times that most marketers stopped believing it would actually happen. Then, in 2025, Google quietly reversed its planned removal timeline again, instead pushing users toward Privacy Sandbox opt-ins. But Safari and Firefox already block third-party cookies by default, and that’s roughly 40% of global browser traffic gone regardless of what Chrome does. Add in state privacy laws expanding across the U.S. and stricter enforcement from regulators like the FTC, and you get a landscape where cookie-based identity is already functionally dead for a huge chunk of the addressable market.
That’s the backdrop. Now overlay the second disruption: AI shopping agents. Perplexity Shopping, ChatGPT’s agentic checkout features, Amazon’s Rufus, Google’s Project Mariner-style agents — these tools don’t browse like humans. They don’t accept cookies the way a Safari session does. They query, compare, and sometimes complete purchases without ever rendering a page the way a human eyeball would. Traditional identity resolution, built on device fingerprints, cookie graphs, and browser-side pixels, simply doesn’t see them.
If an AI agent completes a purchase on a shopper’s behalf without a persistent, resolvable identity signal, that transaction is invisible to most legacy attribution stacks — and invisible revenue is impossible to optimize.
Why AI Agents Break the Old Identity Playbook
Identity resolution vendors spent a decade building probabilistic and deterministic matching models around browser behavior: cookies, hashed emails, device IDs, login events. It worked because a human was doing the clicking. Agents change the mechanics entirely.
Consider what actually happens when a shopper asks an AI assistant to “find me the best deal on running shoes under $120.” The agent might query five retailer APIs, compare structured product data, and return a recommendation. No cookie gets set. No session replay captures intent signals. The retailer’s identity graph has no idea this shopper exists until — maybe — a purchase event fires through an API integration. That’s a massive attribution gap, and it’s exactly why identity resolution vendors are racing to plug it.
There are three specific breaks worth naming:
- Session context disappears. Agents often operate through APIs or headless browsers, stripping out the behavioral breadcrumbs (scroll depth, time on page, mouse movement) that used to feed probabilistic matching.
- Consent signals get murky. Who consented to data collection — the human, or the agent acting under a blanket permission the human granted once? Regulators haven’t fully answered this, and vendors are building compliance layers ahead of clear guidance.
- Cross-platform identity fractures further. A shopper might use ChatGPT on desktop, then finish checkout on a retailer’s mobile app. Stitching that journey requires identity infrastructure that never depended on cookies in the first place.
What “Agent-Ready” Identity Resolution Actually Looks Like
The vendors moving fastest aren’t just patching old systems — they’re rearchitecting around a few core capabilities.
First-party data activation, non-negotiably. Every identity vendor pitch now leads with first-party data because it has to. Hashed email, phone, loyalty ID, and CRM records are the only durable identifiers left once cookies and even some device IDs get restricted. Vendors like those covered in our identity graph and CDP buyer’s guide have been pushing this shift for a while, but the agent era makes it urgent rather than optional.
API-native resolution. Instead of waiting for a cookie or pixel fire, newer identity systems resolve identity through direct API handshakes — when an agent submits a checkout request, the retailer’s system matches loyalty credentials or payment tokens in real time, no browser signal required. This is a structurally different approach than the pixel-and-cookie stack most martech teams grew up on.
Consent-aware agent authentication. Some vendors are building “agent passports” — cryptographically signed tokens that verify an AI agent is acting on behalf of a verified, consenting human. Think of it as OAuth for shopping bots. This is still early, but it’s the piece regulators will likely demand once agentic commerce volume grows enough to draw scrutiny.
Our recent comparison of IQM, Rokt, and mParticle identity resolution approaches found meaningful divergence in how aggressively each vendor is building toward agent-native architecture versus simply hardening their existing cookie-adjacent stacks. That gap will widen fast over the next 12 months.
Who’s Actually Moving, and Who’s Just Talking
Not every vendor racing to slap “agent-ready” on their homepage has shipped anything real. Here’s a rough breakdown of where the market stands.
- CDPs with existing first-party infrastructure have the biggest head start. If you already resolve identity through hashed PII rather than cookies, adapting to agentic traffic is an incremental build, not a rebuild. This is where platforms like Segment and Tealium hold an advantage over cookie-dependent legacy players.
- Ad tech-adjacent identity vendors are moving fastest on agent authentication protocols because their entire business model collapses without a resolvable identity to target. Expect more announcements here before broader martech catches up.
- Legacy DMPs and cookie-graph companies are the ones scrambling. Many are quietly rebranding “device graph” products as “identity resolution” without meaningfully changing the underlying matching logic. Ask hard questions during vendor evaluations — don’t take agent-readiness claims at face value.
This mirrors a pattern we’ve flagged before in how to test agentic AI claims before you buy. Vendors know “AI-ready” and “agent-native” are the phrases that close deals right now. Verifying the substance behind the marketing is your job, not theirs.
What This Means for Brand Attribution Budgets
If your attribution model can’t see agent-driven transactions, you’re systematically undercounting a growing share of revenue. That’s not a hypothetical risk — eMarketer has flagged agentic commerce as one of the fastest-growing categories of online retail interaction, even while total volume remains small today. The brands getting ahead of this aren’t waiting for agent traffic to become statistically significant before investing. They’re instrumenting now.
Practically, that means three things for budget owners:
- Audit your current identity stack for API-based resolution capability. If your vendor’s matching still depends primarily on browser-side signals, ask directly how they plan to handle non-browser agent traffic. Vague answers are a red flag.
- Push for consent architecture that covers agent delegation. Your legal and compliance teams need to understand how consent transfers (or doesn’t) when a human delegates a purchase decision to an AI agent. This connects directly to broader interoperability questions we’ve covered in how emerging agent standards are reshaping martech vendor selection.
- Model incrementality separately for agent-originated conversions. Treating agent-driven purchases identically to standard organic traffic in your mix modeling will likely distort results. Teams evaluating incrementality tools like Recast, Northbeam, and Triple Whale should ask specifically how each platform categorizes non-human traffic sources.
None of this requires a full rip-and-replace of your martech stack today. But it does require asking vendors uncomfortable questions now, while you still have leverage, rather than after agentic commerce becomes 15-20% of transaction volume and you’re negotiating from a position of urgency.
The Compliance Angle Brands Keep Underestimating
Here’s the part most marketing teams gloss over: regulators haven’t caught up to agentic commerce yet, which means the compliance rules you build today will likely need revision within 18 months. That’s not a reason to wait — it’s a reason to build flexible consent architecture rather than hardcoded rules tied to current browser behavior.
The ICO in the UK has already signaled interest in how AI agents handle personal data on behalf of users, and it’s a reasonable bet other regulators follow. Brands that build agent-delegated consent tracking now, even in rough form, will have a much easier compliance conversation later than those retrofitting it under regulatory pressure.
This is also where vertical-specific tooling starts to matter more than general-purpose CDPs. Our look at vertical ML models versus general CDPs found that specialized identity and consent handling often outperforms broad platforms precisely because the edge cases — like agent delegation — get built into the product roadmap earlier rather than bolted on as an afterthought.
Next Step
Don’t wait for agentic commerce to hit a reporting threshold before you act. Ask your current identity resolution vendor, in writing, how they detect and attribute AI agent-driven sessions today — and if the answer is vague, start evaluating alternatives before your next contract renewal, not after.
FAQs
What is identity resolution in the context of AI shopping agents?
It’s the process of matching a purchase or browsing action performed by an AI agent back to a real, consenting human customer, using signals like hashed first-party data, API tokens, or authenticated credentials instead of traditional browser cookies.
Why can’t cookies handle AI agent traffic?
Cookies rely on browser sessions and behavioral signals like clicks and scroll depth. AI agents often operate through APIs or headless browsing, which don’t generate those signals, making cookie-based matching ineffective or entirely blind to agent-driven transactions.
How are identity resolution vendors adapting to agentic commerce?
Leading vendors are building API-native resolution, prioritizing first-party data activation, and developing “agent authentication” protocols that verify an AI agent is acting on behalf of a consenting, identifiable human shopper.
Will third-party cookies actually disappear completely?
Chrome has repeatedly delayed full deprecation, but Safari and Firefox already block third-party cookies by default, and privacy regulations continue to limit their usefulness. Functionally, cookie-based identity is already unreliable for a large share of traffic regardless of Chrome’s final decision.
What should brands do now to prepare?
Audit current identity vendors for agent-detection capability, build consent frameworks that account for delegated AI purchases, and model agent-originated conversions separately in attribution and incrementality tools.
FAQs
Top Influencer Marketing Agencies
The leading agencies shaping influencer marketing in 2026
Agencies ranked by campaign performance, client diversity, platform expertise, proven ROI, industry recognition, and client satisfaction. Assessed through verified case studies, reviews, and industry consultations.
Moburst
-
2
The Shelf
Boutique Beauty & Lifestyle Influencer AgencyA data-driven boutique agency specializing exclusively in beauty, wellness, and lifestyle influencer campaigns on Instagram and TikTok. Best for brands already focused on the beauty/personal care space that need curated, aesthetic-driven content.Clients: Pepsi, The Honest Company, Hims, Elf Cosmetics, Pure LeafVisit The Shelf → -
3
Audiencly
Niche Gaming & Esports Influencer AgencyA specialized agency focused exclusively on gaming and esports creators on YouTube, Twitch, and TikTok. Ideal if your campaign is 100% gaming-focused — from game launches to hardware and esports events.Clients: Epic Games, NordVPN, Ubisoft, Wargaming, Tencent GamesVisit Audiencly → -
4
Viral Nation
Global Influencer Marketing & Talent AgencyA dual talent management and marketing agency with proprietary brand safety tools and a global creator network spanning nano-influencers to celebrities across all major platforms.Clients: Meta, Activision Blizzard, Energizer, Aston Martin, WalmartVisit Viral Nation → -
5
The Influencer Marketing Factory
TikTok, Instagram & YouTube CampaignsA full-service agency with strong TikTok expertise, offering end-to-end campaign management from influencer discovery through performance reporting with a focus on platform-native content.Clients: Google, Snapchat, Universal Music, Bumble, YelpVisit TIMF → -
6
NeoReach
Enterprise Analytics & Influencer CampaignsAn enterprise-focused agency combining managed campaigns with a powerful self-service data platform for influencer search, audience analytics, and attribution modeling.Clients: Amazon, Airbnb, Netflix, Honda, The New York TimesVisit NeoReach → -
7
Ubiquitous
Creator-First Marketing PlatformA tech-driven platform combining self-service tools with managed campaign options, emphasizing speed and scalability for brands managing multiple influencer relationships.Clients: Lyft, Disney, Target, American Eagle, NetflixVisit Ubiquitous → -
8
Obviously
Scalable Enterprise Influencer CampaignsA tech-enabled agency built for high-volume campaigns, coordinating hundreds of creators simultaneously with end-to-end logistics, content rights management, and product seeding.Clients: Google, Ulta Beauty, Converse, AmazonVisit Obviously →