🔍 Read the full analysis: Claude Duet Enters An AI Race Where Coordination Is Key on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Anthropic launched Claude Duet on October 21 as a waitlisted research preview for U.S. Pro and Max subscribers. The app can work in the background on a cloud computer, but Anthropic says sensitive actions require approval and some financial actions are prohibited. Independent testing has not yet established how reliably its safeguards or task performance work.
Anthropic launched Claude Duet on October 21 as a waitlisted research preview, adding its assistant to a growing race to build AI agents that can work in the background on a cloud computer. The separate app is available to U.S. Pro and Max subscribers, with Anthropic describing it as a tool for professionals and small businesses that can prepare work and request approval before taking sensitive actions.
Duet is available through iOS, Android and claude.ai. Anthropic says it can send a morning brief, accept requests by text or voice in an ongoing thread, and message users when it needs their attention. Tasks run on a virtual machine with its own browser, so the user’s personal computer or phone does not have to remain on. The preview is built on Claude Opus 5.5, according to the source material.
Anthropic’s examples include scheduling meetings, preparing dashboards and sales forecasts, and handling work involving QuickBooks, Stripe, Gusto, DocuSign and Shopify. The company says Duet can draw on memory and connected apps associated with a user’s Claude account, as well as more than 6,000 connectors and plugins in the Claude Marketplace. For purchases, Anthropic says the agent uses a Stripe Link wallet with a one-time card limited to a merchant and amount.
Anthropic says Duet must show the proposed action, destination and content before sending sensitive messages, paying or deleting items, then wait for the user’s approval. It also describes a separate classifier that checks whether an action matches the user’s intent. The company says some actions—including trading securities and moving money between accounts—are blocked even with user approval. These are vendor descriptions; the material provides no independent test results for Duet’s capabilities or safeguards.
Infographic 01 · The permission ladder
What Claude Duet does alone, what it asks first, what it never does.
Anthropic’s three tiers for an agent that keeps working while you are away. Health or financial details go out only with your explicit consent.
Does it alone
no approval
- Reads connected apps: mail, calendar, Slack, invoices
- Sends a morning brief, then flags what needs you
- Drafts replies, reminders, decks, dashboards
- Prepares payroll or contracts for your review
- Checks accounts every few hours, not nonstop
Asks you first
approval card shows action, destination, content, recipients
- Sending a potentially sensitive message
- Paying (one-time card via Link, limited to merchant and amount)
- Signing a document
- Deleting anything
- Never on “don’t ask me again”: paying or sending money, deleting an order, creating an account
Never, even if you approve
blocked
- Trading securities
- Moving money between accounts
- Accessing someone else’s account
- Sharing sign-in credentials, full card or bank numbers, government ID numbers
- Seeing your passwords, cookies or sign-in tokens (kept off the model’s machines)
“Approval fatigue is a serious issue, because too many requests teach people to tap through them.”Anthropic, Claude Duet safety post
These are Anthropic’s stated rules for the research preview. No independent test has been published yet.
Sources: Anthropic, Introducing Claude Duet (21 Oct 2026); Anthropic, Duet safety post (23 Oct 2026); Claude Duet FAQ.
Powered by Thorsten Meyer AI
Who Controls the Agent’s Switchboard
Duet’s launch adds another product to a shift from chatbots that answer prompts toward agents that can act across connected services and return with results. That could reduce routine coordination work, but it also gives the agent access to more of a user’s communications, records and business processes. How well permissions and approvals work will matter as much as the quality of the underlying model.
The source account places Duet alongside products from SpaceXAI, Meta and OpenAI, and reports that Google released Gemini Agent on October 8. It also describes a growing role for routing: SpaceXAI’s Grok Bot may send tasks to outside models, including Claude, according to the cited statements. If users cannot choose which model handles a task, control over the interface, connected data and model selection may shape competition as much as the models themselves. That is an interpretation of the reported product direction, not a confirmed measure of market power.
For organizations, the immediate issue is practical: an agent that can read work systems and prepare actions may save time, while mistaken urgency judgments, excessive permissions or routine approval prompts could create operational and privacy risks. The source recommends small, documented pilots with limited, read-mostly access and a plan to stop using the service. Users can begin with low-stakes tasks and keep approval requirements active for actions that send, pay or delete.
USB-C headset with noise cancelling microphone for video calls
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
A Fast-Moving Agent Launch Race
The source material describes a sequence of launches: Grok Bot’s beta on August 11, Meta’s Muse on September 8, OpenAI’s Dots at DevDay on September 29, Google’s Gemini Agent on October 8, and Claude Duet on October 21. These dates and product descriptions come from the supplied account and its cited sources; the account does not establish that the products offer equivalent features or have comparable availability.
The common pitch is that an assistant can keep working after the user leaves a chat, using a cloud environment and connected services to complete tasks or ask for direction. Anthropic’s October 23 safety post, as summarized in the source, supplies much of the specific information about Duet’s approval process and restrictions. The launch is still a research preview rather than a broadly available, independently evaluated product.
portable monitor for laptop remote work
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Performance and Safeguards Await Testing
Duet is in a waitlisted research preview, and the supplied material reports no independent evaluation. Its accuracy, reliability and real-world security performance therefore remain unverified. Anthropic itself says the early version may misread message threads or judge urgency incorrectly, and that personal errands such as booking tickets are weaker areas.
The company says Duet checks connected accounts every few hours rather than continuously, partly to limit use of plan allowances. That schedule may mean it misses developments between checks. Background activity also counts against usage limits shared with the rest of Claude, while large tasks can require more model turns. The source does not give typical task-completion rates, costs for particular workloads, or detailed results from testing the approval classifier.
Anthropic says disconnecting an app stops future access, but information Duet has already learned remains until its memory is reset. The material does not spell out all retention periods or provide an independent account of how connected data is handled. Availability beyond eligible U.S. Pro and Max subscribers, broader rollout timing and the practical limits of the connector catalogue also remain unclear.
hardware security key for two-factor authentication
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Waitlist Access and Pilot Results
The next near-term development is access for people on Anthropic’s waitlist; the source gives no date for wider availability. Users and organizations will be able to judge the product more clearly as they test it against real workflows, but early reports should distinguish vendor claims from independently verified performance.
Companies considering a trial can define permitted tasks in writing, connect only the services needed for a small pilot, and keep human approval in place for consequential actions. They should also set an exit plan, including how to disconnect integrations and reset stored memory. For users, a cautious start means trying low-stakes work and checking proposed recipients, amounts and content before approving an action. Further details on availability, data handling and Duet’s reliability have not yet been provided in the source material.
small business bookkeeping software guide
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
What is Claude Duet?
Claude Duet is a separate Anthropic app that the company says can run tasks in the background on a cloud computer, send a morning brief and contact the user when it needs attention.
Who can use Claude Duet?
The supplied source says the research preview is available by waitlist to U.S. Pro and Max subscribers. It does not provide a date for wider access.
Can Duet send messages or spend money without approval?
Anthropic says Duet must request approval before sensitive messages, payments and deletions. The company says trading securities and transferring money between accounts are blocked, even if a user approves them. These safeguards have not been independently tested in the supplied material.
What are the main limitations reported so far?
Anthropic says Duet may misread threads or urgency, is weaker at personal errands, checks connected accounts every few hours and uses plan limits for background work. It cannot yet show the user its browser, according to the source.
Has Claude Duet been independently evaluated?
No independent test results are included in the supplied material. The current information about its features, restrictions and safeguards is attributed to Anthropic or to the source’s cited accounts.
Source: ThorstenMeyerAI.com
Fall Picks
fall essentials
As an affiliate, we earn on qualifying purchases.
