Grok Bot Shopping: Set Up Safe Buying In 6 Steps (2026)

Grok Bot shopping is the buying flow xAI shipped in v0.78.1 on October 27, 2026: product cards, a Buy now button that hands you the final yes, and tracking once the order is placed.

Here's how I'd set it up, step by step, before a Bot gets anywhere near a checkout page.

The whole setup lives in two places: the Vault and your Auto Review rules.

Get those two right and the rest is just asking for things.

If you want my team to map where an AI agent fits into your buying and admin, book a free SEO strategy session and we'll walk through it with you.

What v0.78.1 added to Grok Bot's buying flow

The Grok Bot changelog lists four shopping changes in v0.78.1.

Product cards with photos, rating, price and store, plus up to two badges such as Top rated.
A carousel of three or four results you scroll through.
Product pages that list in-stock options first, with Buy now starting an order you approve.
Order tracking that tells you when an order ships or arrives, with shipment cards showing the carrier and stage.

The same release lets you connect Shop Pay in the Vault's Payments tab.

It also added three subscription templates, which I cover further down.

Order cards now leave out the Ship to line for orders that ship nothing.

Check your plan and app version first

Grok Bot is included on the Premium, Super and Ultra plans of The X Subscription, per the X Subscription docs.

Plus doesn't include it, so check your plan before you go hunting for the Vault.

The Vault page says Vault needs Grok Bot 0.75.2 or later.

Update the desktop app, then open Settings and confirm Vault is there.

Step 1: Fill in contact info and hints in Vault

Open Settings, then Vault, and choose New item.

Pick Contact info and enter the name, address, phone and email you want on orders.

Choose Save contact info.

The Vault docs say contact info fills shipping and billing details at checkout, so the Bot doesn't stall on the address form.

Now add a hint.

Under Hints you can write something like "Use for work purchases", and the docs say a Bot follows the hint when it chooses between entries.

If you keep a home address and a business address, hints are how you stop the wrong one landing on an invoice.

One more thing to know: when you share an address in chat, the Bot saves it as contact info after the task and tells you what it saved.

Step 2: Connect a wallet in the Payments tab

v0.77.0 put a Payments tab inside the Vault, and that's where you choose which method a Bot reaches for first.

That release note also says you still approve every purchase.

You have three wallet routes to pick from.

Shop Pay: since v0.75.2, Bots pay with Shop checkout where a store accepts it and a one-time Shop card elsewhere. In v0.78.1 you connect it in the Payments tab.
X Money: v0.75.2 made it a one-tap connect, and v0.75.5 says connecting X also connects X Money.
Link: v0.70.2 added paying with Stripe Link. The Vault docs say a Bot can ask you to approve a one-time card for a single purchase.

After you connect one, set it as the method Bots use first, or pick it in Pay with on a specific order.

The Pay for things section calls this the Default payment method, which Grok Bot pays with first.

🔥 Want the agent setup that runs your buying and admin end to end? Inside the AI Profit Boardroom you get step-by-step video trainings, the installable Agent OS, four coaching calls a week and 3,400+ members working on the same problems. → Join the AI Profit Boardroom

Step 3: Decide whether to save a card at all

This is the setting that matters most, because the release notes and the docs read differently.

On the changelog side, Buy now opens an order that waits for your yes, and the v0.77.0 note promises approval on every purchase.

The Vault docs say something sharper about saved cards.

Here is the line from the Vault docs: "A card saved in Vault fills in at checkout without asking you each time, and no setting requires your approval for each use."

So both can be true at once: the order step asks you, while a saved card itself has no per-use gate.

I don't leave that gap to chance.

My rule is simple: no saved card unless an Ask first rule covers every purchase.

If you want to approve every payment yourself, the docs give two moves.

At checkout, if a Secure Form pops up asking for card details, untick Securely save to Bot's vault; that card then lives only inside the current chat.
Already stored one? Go to Settings, Vault, click the card and hit Remove.
Watch for a form without that checkbox, because the docs say it saves straight to Vault, so don't submit it.

A Link one-time card is the other clean option.

Each Link request lists the shop, what's in the cart and the total, with three buttons: Pay, Pay another way and Deny.

Decline it, or let it time out, and no money moves.

Step 4: Write Ask first rules for purchases

Auto Review is on by default, and the approvals page says an action matching an Ask first rule always gets an approval card.

The switch sits in Settings, General, under Bot.

Custom Rules appear under that switch on desktop.

Under When Grok Bot wants to, describe one action in plain words.
Under It should, choose Ask first.
Press Add Rule.

These are the three purchase rules I'd add on day one.

Ask first before buying anything or completing any checkout.
Ask first before starting a free trial or any subscription.
Ask first before you cancel or change a subscription.

The docs say if an Allow rule and an Ask first rule both match, Ask first wins.

You get up to 20 Ask first rules, and each one can run up to 1,000 characters.

Keep each rule narrow and about one action, which is what the docs recommend.

Step 5: Run your first search and read the cards

Ask for something concrete with your limits written in.

For example: "Find a 27-inch monitor with a USB-C port, show me three options, and don't buy anything."

The Bot comes back with product cards in a carousel.

Open one and the in-stock options are listed first.

Tell the Bot your boundary in the same message, as the approvals page suggests.

Writing "don't buy anything" in the request gives Auto Review a clear signal from your own message.

The docs note that text from a web page or an email doesn't count as your request.

Step 6: Approve Buy now and let it track the order

When you're happy with an option, tell the Bot to go ahead with Buy now.

With an Ask first rule in place, you get a card with Allow and Not now.

Read the merchant, item and total before you press anything.

Once you've approved, the Bot keeps watch on the parcel and pings you at dispatch and again at delivery.

Each shipment card names the carrier and the current stage, so you skip the confirmation-email hunt.

The three subscription templates, and how I'd use them

v0.78.1 added three ready-made templates for subscriptions.

Try it, don't pay for it: starts a free trial and cancels it or reminds you before it bills.
Find unused subscriptions: hunts down subscriptions you've stopped using.
Watch subscription prices: keeps an eye on what your subscriptions cost.

The changelog says Bots confirm with you before changing anything.

I still pair the trial template with the trial rule from Step 4, so a card shows up before any sign-up.

Run Find unused subscriptions first, because it gives you a list to act on.

Order Concierge and Deal Watcher

Both arrived in v0.77.0, one release before the shopping cards.

Order Concierge is the after-sale helper: orders, refunds, returns.

Deal Watcher is the price and coupon lookout.

The release note says both work without ever buying unless you give your OK.

I'd set Deal Watcher on the three or four products you reorder most.

Then let Order Concierge handle the return windows you always forget.

📞 Not sure which buying jobs to hand to an agent first? Book a free SEO strategy session and my team will help you pick the workflows worth automating. → Get your free strategy session

Gotchas I'd check before the first real order

Vault is account-wide. Whatever you put in Vault, every Bot on the account can use, and there's no per-Bot lock on an item.
Shared Bots don't use Vault. The shared Bots setup takes keys under Secrets instead.
Background cards expire. A card raised by a routine or other background work expires after 30 minutes, so a deal found overnight can lapse.
Deny means stop. Press Deny and the Bot drops that action until your next message.
Some steps need you. Bank card verification, passkeys and CAPTCHAs hand you the computer with Take over, then you choose I'm done.

The computer and apps page confirms the checkout options: a Vault card, a card entered in a Secure Form, or a wallet such as Link or X Money.

Why the Bot never sees your card number

Saved passwords, card numbers and security codes stay hidden from the Bot, per the Vault docs.

Values from Vault and from a Secure Form are filled into the page without being shown to the Bot.

In Settings, Vault, saved cards only show their last four digits.

v0.78.1 also changed how the Bot's browser fills forms: it enters text character by character and moves the pointer on each site.

My Grok Bot shopping setup checklist

Confirm your plan is Premium, Super or Ultra.
Update to Grok Bot 0.75.2 or later and open Vault.
Save contact info with clear hints.
Connect Shop Pay, X Money or Link and set the default.
Skip saving a card, or remove the one you saved.
Add Ask first rules for checkout, trials and subscription changes.
Run one search with "don't buy anything" in the request.
Approve one small order and watch the tracking cards.

Want help wiring this into a wider agent system? Join the AI Profit Boardroom for the walkthroughs and live coaching.

Or grab a free strategy session with my team.

Also On Our Network

FAQ: Grok Bot Shopping

Where do I connect Shop Pay in Grok Bot?

Open Settings, then Vault, then the Payments tab. v0.78.1 added Shop Pay there, and you can make it the method Bots use first.

What Ask first rule should I add for shopping?

Start with one narrow rule such as "Ask first before buying anything or completing any checkout." An Ask first rule always produces an approval card, and it wins if an Allow rule also matches.

Do I need a saved card for Buy now to work?

No. You can connect a wallet such as Shop Pay, Link or X Money, or enter a card in a Secure Form with the save box unchecked so it is used only in that chat.

Why can't I see my full card number in Vault?

Saved values are write-only. Cards show only their last four digits, and the Bot never sees the card number or security code.

Can I limit a saved card to one Bot?

No. Vault covers your whole account, so every Bot can use what you save. Use hints to steer which entry a Bot picks.

📺 Video notes + links to the tools 👉

🎥 Learn how I make these videos 👉

🆓 Get a FREE AI Course + Community + 1,000 AI Agents 👉

About Julian

I'm Julian Goldie, an SEO entrepreneur, author and founder of the AI Profit Boardroom, which has 3,400+ members.

I help business owners scale with AI agents, automation and SEO.

I've built a 7-figure SEO and link building agency, Goldie Agency, with a team of 70+ SEO experts.
I've grown a YouTube channel to 400,000+ subscribers.
I wrote "Link Building Mastery".
My Udemy courses have taught over 29,000 students.

→ Get my best AI training inside the AI Profit Boardroom

Set your Ask first rules today, then book a free strategy session if you want my team to plan the rest of your Grok Bot shopping setup.