Grok Bot Adds Shopping Cards, Shop Pay and Shared Bots: What the Docs Confirm

Grok Bot now shops, and teams can share Bots. That is the headline from a burst of posts on October 27 and 28, 2026. But the version number and one of the claims going around do not match the documentation. This post separates what the changelog and official docs confirm from what the viral summary says, and gives you a safe way to try the new features.

The viral claim, as relayed on social media: Grok Bot 0.77.0 is stable, adds AI shopping with a product carousel, checkout and order tracking, and adds "Team Bots" that let an organization share account logins and secrets. The part about sharing logins is where the documentation disagrees.

Agents that act on your behalf need rules. See how explainx helps secure your agents →

TL;DR: claimed vs verified

What is Grok Bot, and where does it run?

Grok Bot is a computer-use agent. The team documentation says each person's work runs on a dedicated cloud computer, in a Firecracker microVM, while the desktop and phone apps are thin clients for chat, review and approvals. Sensitive actions go through approval gates evaluated by an independent review model called Auto Review. The docs also say a Bot fills logins and cards from the member's Vault, a connected password manager, or a Secure Form without seeing the values. The details are in the Grok Bot for Teams and Enterprise documentation.

If you are new to the product, start with our Grok Bot guide for building good Bots and managing a team. For the money side, read our earlier look at the Vault, saved logins and cards, and the approval gap.

Shopping: what the changelog says

Shopping cart with a green price tag, illustrating Grok Bot product cards and checkout

The shopping details below come from AI Catchup's summary of the Grok Bot changelog. The xAI changelog at x.ai/changelog/bot blocked our fetch, so treat this as a secondary account of a primary page, and check the original.

• Product cards. Results appear as cards with photos, ratings, prices, store names and up to two badges such as "Top rated."
• Carousel. Three or four results show in a swipeable carousel with product photos.
• Product pages. In-stock options appear first, and options unavailable from any store are disabled.
• Buy now. Selecting it starts an order for you to approve.
• Order tracking. After you place an order, the Bot can track it and tell you when it ships or arrives. Shipment cards show the carrier and stage.
• Shop Pay. Connect it under Vault, Payments, then choose it under Pay with or make it the payment method Bots use first.

The entry is dated October 27, 2026 and covers 0.78.1 including 0.78.0, according to the summary. That is later than the 0.77.0 in the viral post, so the shopping feature may have shipped in prerelease or in a nearby version. We cannot say which stable build first had it.

Agentic shopping is not unique to xAI. We covered Shopify opening its catalog to any AI agent and the August Stripe Link and Grok shopping post. Anthropic's Claude Duet research preview also asks before it pays.

Does Grok Bot ask before it pays?

This is the question that matters. Two official pages seem to point in different directions:

• The changelog says Buy now "starts an order for you to approve."
• The xAI Vault guide says a card saved in Vault fills in at checkout, and our earlier reading found no setting that requires approval for each use.

The docs do not explain how these fit together for a product-card order. Possible readings: the Buy now card is the approval, or a saved card can complete the order without a second prompt. Until xAI clarifies, assume the safest case. If you want to approve every payment, do not save the card in Vault. Use the Secure Form so the card is used only in that chat.

"Team Bots" is really Shared Bots, and Vault is not shared

The viral summary says users can share account logins and secrets across an organization. Here is what the documentation says.

Cursor's Shared Bots help page describes sharing a Bot with your Cursor team, with everyone or only chosen people and groups:

• Sharing does not copy the Bot, and each person's chat with a shared Bot is private. The owner and Managers cannot read your chats.
• A shared Bot always runs in the cloud. A Bot on your own computer cannot be shared.
• A shared Bot uses the apps and secrets its owner added. In your own chat it can also use your apps, but it asks before using a personal account, with Allow once or Always allow.
• The page warns: only add keys and files you are happy for everyone you share it with to use.
• Phone support needs Grok Bot 1.19.0 or later, and the page notes earlier versions still say "Team Bots" on some screens.
• Admins can use Auto-add to put a Bot in members' sidebars.

The xAI Vault guide says Vault covers your whole account, everything you save is available to every Bot on your account, and "Vault isn't supported on shared Bots." For a shared Bot you add keys under Secrets instead.

So the accurate version: you can share a Bot with its own secrets, but your personal Vault logins and cards do not travel with it. That is good news for security, and it contradicts the loose phrase "share account logins."

The subscription templates

The changelog summary lists three templates that touch recurring charges:

1. Try it, don't pay for it. Starts a free trial and cancels it, or reminds you, before it bills.
2. Find unused subscriptions. Cancels plans you choose from subscriptions you still pay for.
3. Watch subscription prices. Checks renewal prices.

It also says Bots can cancel a subscription or look up a price and renewal date, and will confirm with you before changing anything. These are the features most likely to save real money, and also the ones where a mistake costs real money. Test them on a low-value subscription first.

Phone calls and terms of service

Elon Musk posted on X that Grok Bot can now call a person or business for you, make a request, take notes and send a summary. A related report says the assistant's terms of service now include a dedicated section on phone calls. We did not find an official docs page for phone calling, and a web search for it turned up only changelog-style summaries of other versions. Treat calling as announced, not documented, until xAI publishes it.

Two risks deserve a plain mention. An AI voice calling a business raises consent and disclosure questions that vary by country, and a bot calling on your behalf can make commitments you did not intend. Read the terms before using it for anything binding.

Usage limits are tightening at the same time

The feature burst comes as xAI faces cost pressure. We covered Elon Musk's statement that the cost of serving Grok Bot was unsustainably high and that weekly limits were arriving in Musk says Grok Bot cost is "unsustainably high". More agent actions per chat means more compute per user, so expect limits to matter more as shopping and subscription workflows spread.

A safe way to try shopping

Wallet and coin purse illustration, representing limiting what an AI agent can spend

1. Update the app to the latest build and check Settings for the version.
2. Do not save your main card. Use a card with a low limit, or pay each time through the Secure Form.
3. Keep Auto Review on if you are on a plan that lets you control it.
4. Start small. Ask for a cheap item and watch whether the order needs an explicit approval.
5. Check your statement after the first orders for charges you did not expect.
6. For shared Bots, review secrets, skills and files before sharing, because they work in every teammate's chat.

If you run agents that can spend money, add a guard layer. AgentBeam is the agent security platform from the explainx.ai team that stops AI agents before they take dangerous actions, such as an unwanted purchase.

What we could not verify

• The text of the xAI changelog itself (blocked by a 403).
• Which stable version first shipped each shopping feature.
• Whether Buy now always requires a separate approval when a card is saved in Vault.
• Any official documentation of outbound phone calls.
• The reported count of 8,600 or more created Bots, which came from a post on X, not from a company statement.

Related reading

• Grok Bot guide: build good Bots and manage your team
• Grok Bot Vault: saved logins, cards and the approval gap
• Musk says Grok Bot cost is unsustainably high
• Stripe Link and Grok shopping
• Shopify opens its catalog to any AI agent
• Claude Duet proactive agent research preview
• Grok Bot voice ordering and workspace integrations

Details are as of November 2, 2026. Version numbers and features may change; check the official changelog and docs.