This AI Messages You First. It Still Needs Your OK to Pay, Send or Sign. | Edition 356

Almost every AI tool you’ve used waits for you to type first. Claude Duet doesn’t. Anthropic’s new agent app keeps an eye on your email, calendar and business apps, and messages you when something needs you.

Anthropic announced it on October 21 as a research preview. It’s waitlist-only, US-only, and comes at no extra cost on the paid Claude plans that qualify.

The part worth reading closely is the line it can’t cross on its own. Duet can read, draft and prepare work by itself. But before it sends a message, makes a payment, signs a document or deletes anything, it has to show you exactly what it’s about to do and wait for your OK.

What it actually does

Each morning, Duet sends you a short brief on the most important items across your connected apps. After that, it checks those accounts every few hours and stays quiet unless something needs you. You decide what you want to hear about and how often.

It runs on its own virtual computer in the cloud, with its own browser, so your laptop or phone doesn’t need to stay on while it works. You talk to it by typing or by voice in one ongoing thread, and you can open separate channels for different topics that share the same memory. It also brings over the memory, skills and connected apps you’ve already set up in Claude.

Under the hood it runs on Claude Opus 5.5, one of Anthropic’s most capable models. You can’t switch it to a different one.

What it plugs into

Anthropic says Duet can use the more than 6,000 connectors and plugins in the Claude Marketplace. Its help article lists Gmail, Google Calendar, Google Drive, Slack (with some limits), QuickBooks, HubSpot, Docusign and Calendly as available connectors.

Anthropic’s examples are very small-business: finding Gmail and Slack messages you missed, checking QuickBooks or Stripe for unpaid invoices, running payroll in Gusto, posting approved job listings to LinkedIn and routing agreements through Docusign.

One catch for Outlook users: a Microsoft 365 logo appears on the Duet product page, but the help article says plainly that “Microsoft 365 isn’t available yet.” If your work lives in Outlook, Duet can’t connect to it yet.

The product page also shows a business dashboard that refreshes itself every morning before the brief arrives. That’s Anthropic’s demo of something you can ask Duet to build, not a standard feature that comes switched on.

What early testers say

Anthropic’s announcement quotes small-business owners and entrepreneurs who tried it.

• Jess Provencher, a real estate broker and owner of Pro Homes, says Duet flagged a showing that was on her calendar for the wrong day, without being asked. That’s “exactly the kind of thing I want caught without having to ask,” she said.
• Amin Ebrahimi, owner of Shahs of Kabob in South Florida, with about 110 employees, uses it for accounting, customer support and marketing, including working through invoices store by store. “It brings it all together,” he said. “I don’t need to open up 100 tabs.”
• Mya Dalton, a brand strategist, had a call coming up with a potential client. Duet saw it on her calendar, prepared a brief, noticed the call fell right before her flight and offered to move it. “I didn’t realize that it was right before my flight,” she said.

These are hand-picked stories from Anthropic’s own announcement, so read them as what the product is designed to do, not proof of how often it gets things right.

The approval rule, in plain English

Duet works on a simple split. Reading, drafting and preparing: it does those on its own. Anything that leaves your hands for good: it asks first. These four always need your approval:

• Sending a message
• Making a payment
• Signing a document
• Deleting anything

If you can’t approve something right away, it brings the request back to you later. And some things are off-limits even if you say yes: Duet won’t trade securities, move money between accounts or get into someone else’s account.

Shopping works through Stripe’s Link digital wallet or Shop Pay. Duet confirms the item with you, Link asks you to approve the spend, and then it pays with a one-time virtual card that only works for that purchase, so your real card number isn’t shared.

A few more guardrails worth knowing: Duet doesn’t make phone calls or send text messages to other people, though it can send emails from your connected accounts once you approve them. Anthropic says it never directly sees your passwords or sign-in tokens. And it’s designed to refuse to share the most sensitive information, such as credit card numbers and government ID.

The honest downsides

It can get things wrong. Anthropic’s own words: “This is an early version of Claude Duet, and it still might misread a thread or miscalibrate what’s urgent.” Review its drafts and approval requests before you tap yes.

It isn’t an alarm. Duet checks your accounts at set intervals, so something urgent can land between checks and reach you late.

You can’t watch it work. It can’t yet show you its browser, and you can’t take over that browser.

It costs you usage. There’s no extra charge during the preview, but Duet shares your plan’s usage limits, including any five-hour limit and your weekly limit, with the rest of Claude. Background work like the morning brief and check-ins counts, and bigger jobs like a financial model or a slide deck use more.

Hidden instructions are a real risk. Duet reads emails and web pages written by other people, and those can contain sneaky instructions meant to trick it. Anthropic’s help article says no defense against this is perfect.

Unplugging isn’t forgetting. You can disconnect any app at any time, which stops future access, but Duet keeps its memory of what it already saw.

It’s also weaker at personal errands like booking tickets, and it lives in its own app, separate from the main Claude app.

How to get in

Join the waitlist from the Claude Duet product page. Anthropic’s pages list US subscribers on the Pro, Max and Ultra plans (Ultra is the new name, since October 30, for what used to be Max 20x). Team and Enterprise plans aren’t supported yet, though Anthropic says they’re planned. Invitations go out in waves, and joining doesn’t guarantee a date. As Anthropic’s help article puts it, “We’re adding people gradually, and you’ll get an email when it’s your turn.”

Two practical tips. Use the same email address for the waitlist as your Claude account and the Google or Apple account on your phone, because access is tied to it. And if you get in, you’ll get one full reset of both your five-hour and weekly usage limits, which you can use until November 30, 2026.

Where it fits

Duet lands in a crowded field. CBS News and TechCrunch both name Meta’s Muse and OpenAI’s Dots as rivals. Anthropic is aiming Duet squarely at professionals and small business owners rather than everyday errands.

Bottom line

Claude Duet flips the usual Claude setup by coming to you instead of waiting to be asked, and the approval rule is the right one: it can do the legwork, but you still press the button on anything that sends, pays, signs or deletes. If you’re a US subscriber on an eligible plan and your work lives in Google and Slack, it’s worth a spot on the waitlist. If you run on Microsoft 365 or already bump into your usage limits, wait.