🔍 Read the full analysis: Claude Duet’s Entry Puts The Infrastructure Of AI Agents In Focus on ThorstenMeyerAI.com
Get smart everyday buys delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Anthropic launched Claude Duet on October 21 as a waitlisted research preview for U.S. Pro and Max subscribers. The product can work in the background through connected apps, but Anthropic says sensitive actions require approval and some financial actions are blocked; independent testing was not available in the source material.
Anthropic launched Claude Duet on October 21 as a waitlisted research preview, giving eligible U.S. Pro and Max subscribers an AI agent that can work through connected apps on a cloud computer. The release adds Anthropic to a growing field of assistants designed to act between user requests, while raising practical questions about approval controls, access to personal data and who chooses the model doing the work.
Duet is a separate app available through iOS, Android and claude.ai, according to Anthropic. The company says it can send a morning brief based on connected apps, accept tasks by text or voice in an ongoing conversation, and contact users when an item needs attention. Its examples range from scheduling meetings to preparing dashboards, sales forecasts and small web apps. Work runs on a virtual machine with its own browser, so the user’s device does not need to remain on.
Anthropic says Duet carries over the memory, skills and connected apps associated with a user’s Claude account and can draw on more than 6,000 connectors and plugins in the Claude Marketplace. Its examples include checking invoices in QuickBooks or Stripe, payroll in Gusto, agreements through DocuSign and storefront work in Shopify. For purchases, Anthropic says the agent uses Stripe’s Link wallet with a one-time card limited to a merchant and an amount.
In a safety post dated October 23, Anthropic said Duet must show the action, destination and content before sending a potentially sensitive message, making a payment or deleting something, then wait for approval. The company also says a separate classifier checks whether an action matches the user’s intent. Trading securities, moving money between accounts and accessing another person’s account are described as prohibited, even with user approval. These are Anthropic’s descriptions of the product; the supplied reporting says no independent test was available.
Infographic 01 · The permission ladder
What Claude Duet does alone, what it asks first, what it never does.
Anthropic’s three tiers for an agent that keeps working while you are away. Health or financial details go out only with your explicit consent.
Does it alone
no approval
- Reads connected apps: mail, calendar, Slack, invoices
- Sends a morning brief, then flags what needs you
- Drafts replies, reminders, decks, dashboards
- Prepares payroll or contracts for your review
- Checks accounts every few hours, not nonstop
Asks you first
approval card shows action, destination, content, recipients
- Sending a potentially sensitive message
- Paying (one-time card via Link, limited to merchant and amount)
- Signing a document
- Deleting anything
- Never on “don’t ask me again”: paying or sending money, deleting an order, creating an account
Never, even if you approve
blocked
- Trading securities
- Moving money between accounts
- Accessing someone else’s account
- Sharing sign-in credentials, full card or bank numbers, government ID numbers
- Seeing your passwords, cookies or sign-in tokens (kept off the model’s machines)
“Approval fatigue is a serious issue, because too many requests teach people to tap through them.”Anthropic, Claude Duet safety post
These are Anthropic’s stated rules for the research preview. No independent test has been published yet.
Sources: Anthropic, Introducing Claude Duet (21 Oct 2026); Anthropic, Duet safety post (23 Oct 2026); Claude Duet FAQ.
Powered by Thorsten Meyer AI
Control of Agent Access and Routing
Duet’s launch makes the agent market’s competition about more than the underlying language model. These products seek permission to reach a user’s inbox, business software and other connected services, then act without requiring the user to keep a chat window open. That makes the quality of permissions, approval design and data handling central to whether companies and individuals can rely on them.
A second issue is the model behind the interface. The source reports that SpaceXAI’s Grok Bot may route tasks to other companies’ models, including Claude Opus 5.5, and cites a security FAQ stating that customers cannot restrict Grok Bot’s model choice. If assistants select models behind the scenes, users may have less direct control over which provider processes a task. The source characterizes the interface and routing layer as potential sources of advantage; that is an interpretation, not a demonstrated market outcome.
For organizations, an agent with broad app access can affect routine work but also create risks if it sends information, spends money or changes records incorrectly. Anthropic’s approval rules address some of those actions, but they do not by themselves establish how well the system performs in practice. The launch therefore offers a reason to test agents cautiously, rather than treat stated safeguards as proof of reliability.
USB security key for two-factor authentication
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
A Rapidly Expanding Agent Market
Claude Duet follows several launches described in the source. SpaceXAI opened a Grok Bot beta on August 11, Meta launched Muse on September 8, OpenAI introduced Dots at DevDay on September 29, and Google released Gemini Agent on October 8, according to the cited account. Anthropic’s October 21 launch came after those announcements. The products share a broad pitch: an assistant can take tasks into a connected computing environment, work in the background and return with a result or a request for input.
Duet’s rollout is limited: Anthropic calls it a research preview, access is by waitlist, and the source identifies U.S. Pro and Max subscribers as eligible users. The stated safeguards and functions should be read as the company’s account of an early product, not as independently established performance findings. The source does not provide a full side-by-side evaluation of the competing services, and launch prices may change.
““Approval fatigue is a serious issue, because too many requests teach people to tap through them.””
— Anthropic, in its safety post dated October 23
privacy screen protector for iPhone
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Duet’s Early Limits and Open Questions
Duet’s real-world accuracy, security and reliability have not been independently established in the source material. Anthropic says the early version may misread a conversation or misjudge urgency, performs less well on personal errands such as booking tickets, and cannot yet show users its browser. The company also says connected accounts are checked every few hours, rather than continuously, which may mean an agent misses developments between checks.
Other limits affect oversight and data retention. Background activity counts against the usage limits Duet shares with Claude, and large jobs may require more model turns. Anthropic says disconnecting an app stops new access, but information Duet has already learned remains until its memory is reset. The source does not specify how often users will encounter approval prompts, how accurately the separate classifier works, or what independent evaluations will be published. It also does not establish whether competitors’ controls and model-routing policies work in the same way.
password manager hardware security key
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Pilots, Permissions and Product Testing
Anthropic has described Duet as a research preview, but the supplied material does not give a date for wider availability or announce a schedule for independent testing. Access remains waitlisted for eligible U.S. Pro and Max subscribers. The next useful evidence will come from how the product performs across routine tasks, how its approval prompts function in practice and whether Anthropic changes its limits as the preview develops.
For companies considering agent software, the source recommends small, written pilots with read-mostly permissions and a clear exit plan. Users are advised to begin with low-stakes tasks, connect only a few apps and retain approval requirements for actions that send, pay or delete. Those precautions do not guarantee safe outcomes, but they limit the scope of a trial while users assess performance and access needs.
home office webcam with privacy shutter
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
What is Claude Duet?
Claude Duet is Anthropic’s cloud-based AI agent, offered as a waitlisted research preview. Anthropic says it can work through connected apps, provide a morning brief and handle tasks submitted by text or voice.
Who can use Claude Duet?
The source says access is by waitlist for U.S. Claude Pro and Max subscribers. Anthropic has not provided a broader availability date in the supplied material.
Can Duet make payments or delete information without approval?
Anthropic says Duet must ask for approval before payments, deletions and potentially sensitive messages. The company also says trading securities and moving money between accounts are blocked, even if a user approves them.
Has Duet’s safety been independently tested?
No independent test is cited in the supplied reporting. The described safeguards and product limits come from Anthropic’s statements, so their performance in everyday use remains to be assessed.
What should organizations do before using AI agents?
The source recommends starting with small pilots, read-mostly permissions and an exit plan. Users should begin with low-stakes tasks, connect few apps and keep approvals on for actions that send, pay or delete.
Source: ThorstenMeyerAI.com
Fall Picks
fall essentials
As an affiliate, we earn on qualifying purchases.
