← Back to blog
Essay No. 010  ·  AI interfaces & distribution  ·  Melbourne, Australia
AI interfaces agents distribution SEO platforms

The Interface Coup.

When AI becomes the front door, every app becomes a backend.
PM
Pugalenthi Magendran
February 2026  ·  Melbourne, Australia
12 min read
Editorial illustration. A massive dark monolithic facade stands in a city plaza at dusk. Glowing letters above an open warm-lit doorway read "Ask anything. I'll handle the rest." Inside the doorway a sign reads "The Front Door" with a right-pointing arrow. A solitary figure stands in front of the entrance. On the left wall, the dimmed logos of Google, Amazon, Expedia, Spotify, Canva, Notion and Salesforce. On the right wall, the labels Search, Shopping, Travel, Music, Design, Notes and Work. In the distance on the right, a billboard reads "More choice. More apps. More you."
The old apps line the wall. The front door is the new product.

The internet used to be a place you visited.

You opened Google to search. You opened Amazon to buy. You opened Expedia to book. You opened Spotify to listen. You opened Canva to design. You opened Notion to write. You opened Salesforce to manage customers. The app owned the interaction. That was the old contract.

The next internet may not work like that. You may not open ten apps. You may ask one assistant: find me the best flight, check my calendar, compare hotels, avoid tourist areas, use my saved preferences, book the safest option, and send the itinerary to my partner.

At that moment, the assistant is not a search box. It is not a chatbot. It is not another app. It is the front door. And when AI becomes the front door, every other app becomes something different. Not gone, not irrelevant, but pushed backward into the stack.

A website is something a human visits. A tool is something an agent calls.

That is the interface coup.

Key idea

AI will not merely replace search. It may replace the interface layer. When assistants become the front door, apps become callable infrastructure and distribution moves from visibility to permission.


I. The old internet was built around destinations

The web was designed around movement. You clicked links, opened tabs, compared pages, browsed, searched, filtered, signed in, checked reviews, and chose. This sounds ordinary because it became ordinary. But it was a distribution system. A business won when a human arrived at its surface. The homepage mattered. The search result mattered. The app icon mattered. The checkout flow mattered. The dashboard mattered. The brand mattered because the brand helped the user decide where to go.

The old internet was a geography of destinations. Search engines were maps. Apps were places. Feeds were streets. Marketplaces were malls. Browsers were vehicles. Users were drivers.

That geography shaped the entire digital economy. SEO existed because users searched before they clicked. App stores existed because users installed before they used. Social marketing existed because users discovered before they bought. Web design existed because users arrived before they trusted. Every company fought for the same thing: get the user to come here.

AI changes the verb. The user may no longer come here. The user may ask an assistant to handle it.


II. Search routed attention. AI routes intent.

Search was the first great interface coup. Before search, the web was too large to navigate manually. Google became powerful because it routed attention. It decided which pages appeared first, which were invisible, which sites earned traffic, and which businesses lived or died on ranking. But search still preserved a human loop. The user searched, scanned, clicked, compared, chose.

AI reduces that loop. Google’s introduction of AI Mode in Search points in this direction: an AI-first experience where conversational search and AI-generated overviews sit at the centre rather than the edge.3 Reuters reported that earlier in 2025 Google had already tested a version of its search engine with no traditional blue links at all, only AI-generated answers and follow-up interaction.4

That is not just a new search feature. It is a change in who does the searching. The user does not inspect ten results. The system synthesises the result space first. The human enters after the machine has already compressed the internet into an answer. The deeper shift is agentic. The user no longer asks only “what are the best hotels in Kyoto?” The user asks: plan the trip.

Attention is where the user looks. Intent is what the user wants done.

The company that routes attention controls discovery. The company that routes intent controls action. That is a more powerful position.


III. Apps inside ChatGPT are not a feature. They are a distribution strategy.

OpenAI’s app integrations make the direction obvious. At DevDay 2025 OpenAI introduced apps inside ChatGPT and a new Apps SDK, with launch partners including Booking.com, Canva, Coursera, Expedia, Figma, Spotify and Zillow operating directly inside the ChatGPT interface.12

The important part is the location. Inside ChatGPT. Not “click out to Canva.” Not “open Zillow separately.” Not “search for Expedia.” Not “launch Spotify from your home screen.” The assistant becomes the place where other apps appear.

OpenAI can describe apps in ChatGPT as making ChatGPT more useful. That is true. It is also incomplete. Bringing apps into the assistant is not only a user-experience improvement. It changes who owns the first interaction. Canva, Expedia, Spotify, Figma and Zillow still provide the capability. ChatGPT becomes the interface where the user’s intent is interpreted and routed.

This is not just a better search or app experience. It is a redistribution of interface power. The company that owns the assistant does not need to own every service. It only needs to decide which service gets called. In the old model, the app fought for the user’s direct attention. In the new model, the app may need to fight for the assistant’s selection. The customer relationship moves one layer up. The assistant owns the conversation. The app provides capability underneath it.

The assistant does not need to replace every app. It only needs to stand in front of them.

IV. The web was built for clicks. The next web is built for calls.

A human can understand a messy page. A human can notice the “book now” button, read the cancellation policy, compare prices, judge whether the design looks trustworthy, and decide whether the offer feels legitimate. Agents need something else. They need tools, schemas, permissions, structured data, verified inventory, clear pricing, machine-readable policies, reliable APIs, auditable actions, reversible transactions, and trust signals that software can interpret.

This is why Anthropic’s Model Context Protocol matters. MCP was introduced as an open standard so AI assistants could connect directly to data sources and tools, replacing the custom one-off integrations every model previously needed.56 It is not just developer plumbing. It is a sign of the new architecture.

The old web connected humans to pages. The agentic web connects models to tools.

That is the real interface shift. A company can have the best website in the world and still lose if the assistant cannot understand, trust or execute against it. The future web will still have pages. The valuable layer will increasingly be callable.

Once that shift takes hold, a company’s website changes function. It is no longer only a destination for humans. It becomes an evidence surface for machines. The assistant needs to know whether the company is real, whether the product exists, whether the policy is current, whether the pricing is accurate, whether the reviews are trustworthy, whether the inventory is available, whether the action can be completed, whether the user has authorised it, and what happens when something goes wrong afterward. In the old world, a polished landing page helped humans trust you. In the new world, structured trust helps agents call you.


V. The new SEO is agent trust

SEO was about convincing search engines that your page deserved attention. Agent optimisation will be about convincing AI systems that your service deserves action. That is a very different game. A search engine sends a user to a page. An agent may choose a vendor, fill a form, make a booking, compare prices, retrieve data, place an order, schedule a meeting, call an API, or decline to show an option at all. Ranking is no longer only about visibility. It is about permission to act.

Google has already had to update its spam policies to address attempts to manipulate AI-generated search results, a sign that generative-engine optimisation and recommendation poisoning are becoming real problems before agentic distribution has even fully matured.7 The next phase will not just be search engine optimisation. It will be recommendation-engine manipulation, generative-engine optimisation, and agent-selection warfare.

The old question was “can we rank?” The new question is whether we can be trusted enough to be chosen. And trust will not mean a nice brand. It will mean things an agent can operationalise: structured pricing, real inventory, clear cancellation policy, fresh data, reliable APIs, a verified business, reversible actions, explicit user permissions, auditable records, the assistant’s confidence that the transaction can be completed safely.

The new SEO is not only about content. It is about operational trust.


VI. The app does not die. It retreats.

The lazy version of this argument is that apps are dead. That is wrong. Apps will not disappear. Humans still want rich interfaces, browsing, play, discovery, beauty, brand, emotion, immersion, control, and visual comparison. Nobody wants every human experience collapsed into a grey text box. People will still open Instagram, YouTube, Spotify, Figma, Canva, games, dashboards, marketplaces and creative tools.

The app survives where the experience itself matters. A photographer may still want Lightroom. A designer may still want Figma. A music lover may still want Spotify. A founder may still want to browse a website before trusting a company. A traveller may still want to scroll through beautiful hotel photos. The interface coup is not that apps vanish. It is that many routine interactions move upstream.

When the user knows what they want, they may not visit the app. They may delegate. The app remains the place for exploration. The assistant becomes the place for execution. Browsing survives. Routine collapses.


VII. Invisible mediation is the real power

The word “agent” is useful here because it already exists in commerce. A buyer’s agent acts on behalf of the buyer. A travel agent used to compare options, manage bookings, call suppliers, and translate messy preference into a finished itinerary. A real estate agent filters information, negotiates access, and shapes choice before the buyer sees the full market. AI agents revive that structure at software scale. The assistant becomes an agent of intent.

But this raises a hard question. Whose agent is it? The user’s? The platform’s? The merchant’s? The advertiser’s? The model provider’s? The ecosystem partner’s? When a human opens a marketplace, they can see some of the structure. They know they are in Amazon, Expedia, Airbnb, Uber Eats, Google Search or the App Store. They may not understand every ranking factor, but they at least know which arena they are in. With an assistant, the arena disappears.

The user sees a recommendation. They may not see which options were excluded, which sources were queried, which vendors were preferred, which results were sponsored, which APIs were available, which companies had integrations, which policies shaped the answer, which data was stale, which partner paid, which action was easiest for the assistant to complete, or which option was never considered because it was not machine-readable.

A bad search result can be challenged by clicking another result. A bad assistant route may never show the road not taken.

That is the new opacity. Not hidden ads inside a feed. Hidden routing inside an answer. The user may feel like they are choosing. The assistant may have already chosen the choice set.

Traditional monopoly is easy to see. One company owns the market, the network, the app store, the operating system. Interface monopoly is quieter. A company may not own the hotel, the airline, the bank, the design tool, the delivery service, or the CRM. It may simply own the assistant that decides which one gets called. That is enough.

The company that owns the front door does not need to own every room. It only needs to control the hallway.

Apple controlled distribution through the phone. Google controlled discovery through search. Meta controlled attention through feeds. AI assistants may control intent through delegation. Each layer is more intimate than the last. The phone was where apps lived. Search was where questions began. The feed was where attention flowed. The assistant is where intention becomes action.


VIII. The protocol layer becomes political

MCP and similar standards look technical. They are technical. But protocol choices become market choices. A protocol decides how tools describe themselves, how permissions are requested, how identity is handled, how state changes are approved, how a user knows what the agent did, how trust travels between systems. That means agent protocols will shape competition. Who gets discovered? Who gets called? Who can prove reliability? Who sets the consent standard? Who owns the logs? Who controls the integration directory? Who arbitrates abuse? Who can revoke access? Who can observe the transaction?

The protocol layer is not neutral infrastructure. It is governance disguised as plumbing. Security researchers are already warning that MCP-style systems carry new risks. An early security analysis of MCP catalogued attack surfaces across its lifecycle, including malicious tool descriptions, prompt-injection through tool outputs, indirect data exfiltration, and supply-chain risks in shared server registries.8 A later empirical study of open-source MCP servers found vulnerable implementations in the wild, suggesting that the same rails that let agents act will also be the rails that attackers target.9

The agentic web will need trust, not just connectivity.


IX. The strongest counterargument, and what it leaves intact

The honest essay has to admit the obvious. This will be useful. The current internet is exhausting. Too many tabs, too many pop-ups, too many dark patterns, too many sign-ups, too many fake reviews, too many comparison pages pretending to be objective, too many apps for tasks that should be simple. People do not love managing interfaces. They love outcomes. A good assistant can reduce friction, compare options patiently, remember preferences, avoid scams, translate policies, automate boring steps, help disabled users, help busy workers, help people who are not digitally fluent. The old web forced everyone to become a part-time operator. The agentic web promises to make software operate itself. That is genuinely valuable.

There is also a serious objection. People may not want assistants doing everything. They may want to browse. They may distrust automated decisions. They may prefer direct relationships with brands. They may not want a model choosing restaurants, doctors, insurance, schools, lawyers, investments, or software tools for them. That objection is right. The future will not be total delegation. It will be selective delegation.

People will delegate low-emotion, high-friction tasks first: finding forms, summarising policies, comparing prices, booking routine travel, rescheduling appointments, buying repeat items, filtering options, moving data between tools, preparing drafts, coordinating calendars, executing known workflows. They will retain control where taste, identity, risk, pleasure or trust matters. But that still changes the internet, because most economic activity is not romance, it is routine. Most software use is not exploration, it is task completion. Most websites are not experiences, they are friction between the user and the outcome.

That friction is exactly what assistants will attack. Apps survive. The centre of gravity moves.


X. What companies must become

The strategic advice is brutally simple. Companies must become callable. That does not mean every business needs an AI gimmick. It means the business must be understandable and executable by agents. A company has to ask whether an assistant can understand what it offers, verify its claims, access current pricing, check availability, compare it fairly, complete the action, explain the tradeoffs, reverse or cancel the action, prove what happened, and do all of this without lying to the user.

This is not only a technical checklist. It is a business-model test. If the assistant cannot understand you, you are invisible. If it cannot trust you, you are excluded. If it cannot call you, you are a brochure in a world of APIs. There is a real risk that this creates a new disadvantage for small businesses. The old web was already hard: rank on Google, buy ads, build websites, earn reviews, fight platforms. The agentic web adds one more requirement: be legible to machines. A restaurant that cannot expose availability may be ignored by a booking assistant. A retailer with messy inventory may be skipped. A consultant with an unclear offering may not be recommended. A SaaS product without clean APIs may not be callable. A regulated service without verifiable compliance claims may be filtered out.

The new digital divide is not only online versus offline. It is callable versus invisible.

The old internet rewarded being found. The agentic internet will reward being usable by machines. This is not the death of brand. It is the relocation of brand into trust infrastructure.


The internet’s power used to belong to destinations. Then it belonged to search engines that routed attention. Then it belonged to feeds that shaped desire. Now it may belong to assistants that route intent.

That is the interface coup. The company that controls the prompt does not need to own every service. It only needs to decide which service gets called. Apps will not disappear. Websites will not disappear. Brands will not disappear. But their position changes. They move from the front of the user experience to the back of the assistant’s workflow.

The next internet is not only browsed. It is delegated. And in a delegated internet, the most important question is no longer where the user clicks.

Who does the assistant trust enough to act on?

1 OpenAI (2025). Introducing apps in ChatGPT and the new Apps SDK. Announces a developer SDK and the first wave of partner apps embedded directly inside the ChatGPT interface rather than reached through external launches.

2 Roth (2025). OpenAI introduces apps in ChatGPT and a new Apps SDK at DevDay 2025, The Verge. Lists launch partners including Booking.com, Canva, Coursera, Expedia, Figma, Spotify and Zillow operating from inside ChatGPT.

3 Google (2025). An update on AI Mode in Search. Frames AI Mode as a conversational, AI-first search experience built around AI Overviews and follow-up interaction rather than traditional blue-link browsing.

4 Reuters (5 March 2025). Google tests an AI-only version of its search engine. Reports an experimental version of Search that returns AI-generated answers without traditional blue links.

5 Anthropic (2024). Introducing the Model Context Protocol. Describes MCP as an open standard for connecting AI assistants directly to data sources and tools, replacing the bespoke per-integration approach.

6 Lawler (2024). Anthropic launches tool to connect AI systems directly to datasets, The Verge. Reporting on MCP’s framing as a connector layer for the agentic web.

7 The Verge (2025). Google updates its spam policy to address attempts to manipulate AI search results. Documents the first public moves against generative-engine optimisation and recommendation poisoning.

8 Hou et al. (2025). Model Context Protocol (MCP): Landscape, Security Threats, and Future Research Directions. Catalogues lifecycle-level attack surfaces in MCP, from malicious tool descriptions and prompt injection through tool outputs to indirect data exfiltration and supply-chain risks in server registries.

9 Empirical MCP study (2025). An Empirical Study of Vulnerabilities in Open-Source MCP Servers. Surveys real MCP server implementations in the wild and finds recurring vulnerability patterns, suggesting the same rails that let agents act will be the rails attackers target.

*   *   *

This is Essay No. 010. The topics: intelligence, AI, systems, knowledge, and the questions underneath the questions everyone else is asking. If you read this far and disagreed with any part of it, write to me. I read everything.

Pugalenthi Magendran