🔍 Read the full analysis: Claude Duet’s Move Into Always-On AI Puts Coordination On The Agenda on ThorstenMeyerAI.com
Get the latest gadgets delivered free with Prime
- Fast, free delivery on millions of items
- Prime Video, Amazon Music and more included
- Member-only deals all year
TL;DR
Anthropic launched Claude Duet on October 21 as a waitlisted research preview for eligible US Pro and Max subscribers. The app can work on a cloud computer between user interactions, but Anthropic says sensitive actions require approval and some financial activities are blocked. Independent testing and several practical details remain unavailable.
Anthropic launched Claude Duet on October 21 as a waitlisted research preview, bringing its Claude assistant into a separate app designed to keep working on a cloud computer between user interactions. The product is available to eligible US Pro and Max subscribers, and matters because it joins a growing group of AI agents pitched as able to handle tasks in the background rather than waiting for each prompt.
Anthropic says Duet is available through iOS, Android and claude.ai. It can send a morning summary of activity across connected apps, accept tasks by text or voice in an ongoing conversation, and notify the user when it needs attention. Its work runs on a virtual machine with its own browser, so the user’s personal computer or phone does not need to remain on. Anthropic says the preview is built on Claude Opus 5.5 and can carry over memory, skills and connected apps from a Claude account.
The company describes tasks such as scheduling meetings, preparing dashboards and sales forecasts, and building small web apps. It says Duet can use more than 6,000 connectors and plugins in the Claude Marketplace, including integrations for accounting, payroll, contracts and online stores. Anthropic says the agent can read information and prepare work on its own, but it must request approval before sending sensitive messages, paying or deleting. The approval screen shows the action, its destination and content, including recipients, according to the company.
Anthropic’s safety post, published October 23, says some actions remain prohibited even with user approval, including trading securities and moving money between accounts. The company also says users’ passwords, browser cookies and sign-in tokens are not visible to Duet. A separate classifier is intended to check whether a proposed action matches the user’s request. These are Anthropic’s descriptions; the source material reports no independent test of Duet’s behavior.
Infographic 01 · The permission ladder
What Claude Duet does alone, what it asks first, what it never does.
Anthropic’s three tiers for an agent that keeps working while you are away. Health or financial details go out only with your explicit consent.
Does it alone
no approval
- Reads connected apps: mail, calendar, Slack, invoices
- Sends a morning brief, then flags what needs you
- Drafts replies, reminders, decks, dashboards
- Prepares payroll or contracts for your review
- Checks accounts every few hours, not nonstop
Asks you first
approval card shows action, destination, content, recipients
- Sending a potentially sensitive message
- Paying (one-time card via Link, limited to merchant and amount)
- Signing a document
- Deleting anything
- Never on “don’t ask me again”: paying or sending money, deleting an order, creating an account
Never, even if you approve
blocked
- Trading securities
- Moving money between accounts
- Accessing someone else’s account
- Sharing sign-in credentials, full card or bank numbers, government ID numbers
- Seeing your passwords, cookies or sign-in tokens (kept off the model’s machines)
“Approval fatigue is a serious issue, because too many requests teach people to tap through them.”Anthropic, Claude Duet safety post
These are Anthropic’s stated rules for the research preview. No independent test has been published yet.
Sources: Anthropic, Introducing Claude Duet (21 Oct 2026); Anthropic, Duet safety post (23 Oct 2026); Claude Duet FAQ.
Powered by Thorsten Meyer AI
Approval Rules Shape Agent Use
Duet’s launch adds to a shift from chat assistants that respond only when prompted to persistent agents that monitor connected services and act in the background. For users and businesses, that changes the practical questions: what accounts an agent can access, what it may do without confirmation, how often it checks for updates, and how easily access can be withdrawn.
Anthropic’s stated approval controls could limit the consequences of mistakes, but they also depend on users paying attention to each request. The company itself warns that approval fatigue can lead people to approve prompts without reviewing them. Businesses considering the tool will need to weigh the time saved against the risks of broad app access, missed updates and actions taken on misunderstood instructions. A short, limited pilot with read-mostly permissions and a clear exit plan would give organizations a way to test those trade-offs without assuming the product’s claims have been independently verified.
The wider competition also raises a question about who controls the agent’s connections and routing. The source material says Grok Bot may direct tasks to other providers’ models, including Claude Opus 5.5, while the customer cannot select its model. If agents increasingly combine models and services, the interface, connected data and routing decisions may shape the experience as much as the underlying model. The scope and effects of that approach remain to be seen.
USB-C headset with microphone for voice dictation and video calls
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
A Crowded Agent Launch Calendar
Duet arrived amid a series of product launches in 2026. The source report says SpaceXAI opened a Grok Bot beta on August 11, Meta launched Muse on September 8, and OpenAI introduced Dots at its DevDay on September 29. It also cites TechTarget as reporting that Google released Gemini Agent on October 8. Anthropic followed on October 21.
The products share a broad pitch: an assistant can retain context, use a computer environment and return with results or questions after working in the background. Their features, availability and restrictions differ, and the source material does not provide enough independently verified detail to make a full product comparison. Anthropic’s safety description and list of limitations are company statements, not findings from an external evaluation.
Anthropic says Duet checks connected accounts every few hours rather than continuously, partly to limit usage. Background checks count against the same usage limits as other Claude activity. The company also says that disconnecting an app prevents future access, but information already learned by Duet remains until its memory is reset. These details make account management and memory controls part of the product’s practical limits, not just technical footnotes.
“for professionals and small business owners with more on their plates than they can track.”
— Anthropic, in its description of Claude Duet
portable USB-C monitor for productivity and dashboards
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Testing and Limits Still Open
Independent performance and safety testing is not described in the source material, so Duet’s reliability and the effectiveness of its safeguards have not been established here. It is also unclear how well the agent handles varied real-world tasks, how often approval prompts appear, or how users will respond to requests across many connected services.
Anthropic lists several early limitations: Duet may misread a conversation or misjudge urgency, is weaker at personal errands such as booking tickets, and cannot yet show users its browser. Its checks of connected accounts occur every few hours, so changes may go unnoticed between checks. Large jobs, such as producing a financial model, can take more model turns and use more of a subscriber’s limits. The source does not establish whether these limits will change or when the preview may expand beyond its current audience.
It also remains unclear how model routing will work across the competing agent products, including whether users will receive clear notice when a task is handled by an outside provider. Anthropic’s stated controls should be treated as company claims pending independent evaluation, not as proof that sensitive actions or data are risk-free.
hardware security key for account login two-factor authentication
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Watch for Preview Changes
Anthropic has not given a public date in the source material for ending the waitlist, widening access or moving Duet out of research preview. The next developments to watch are changes to availability, the product’s usage limits and its handling of browser visibility, account checks and saved memory.
Organizations weighing a trial can begin with low-risk, read-mostly tasks, connect only the services needed, document what the agent may access and keep approval requirements enabled for actions that send, pay or delete. Users can apply the same caution at a personal level: start with routine work, limit connected apps and review approval prompts rather than treating them as automatic confirmations. More evidence from hands-on use and independent testing will be needed to judge whether Duet’s background work is dependable and whether its controls are effective.
iPhone stand with MagSafe charging for desk
As an affiliate, we earn on qualifying purchases.
As an affiliate, we earn on qualifying purchases.
Key Questions
What is Claude Duet?
Claude Duet is a separate Anthropic app that the company says can work on tasks using a cloud computer, send a morning brief and message users when it needs attention.
Who can use Claude Duet?
At launch, Anthropic described Duet as a waitlisted research preview for US Pro and Max subscribers. The source material gives no date for broader access.
Can Duet send messages or spend money on its own?
Anthropic says Duet must get approval before sending sensitive messages, paying or deleting. It says trading securities and moving money between accounts are blocked even if a user approves them.
What are Duet’s current limitations?
Anthropic says Duet may misread conversations or urgency, is less capable at personal errands such as booking tickets, cannot yet show its browser and checks connected accounts every few hours. Background work also counts against Claude usage limits.
Has Claude Duet been independently tested?
The supplied source material describes Anthropic’s product and safety claims but does not report an independent evaluation. Its performance and safeguards therefore remain unverified in that material.
Source: ThorstenMeyerAI.com
Halloween Picks
halloween
As an affiliate, we earn on qualifying purchases.
