Anthropic previews Claude Duet, a background agent for your apps

Anthropic is testing a version of Claude that works on its own in the background. Anthropic says it opened a research preview of Claude Duet, a new app in which Claude acts as a proactive agent, through a waitlist that starts with US Pro and Max subscribers.

The idea is to watch over a user's work apps and step in when needed. Anthropic says Claude Duet sends a short brief each morning on the most important items across connected apps and messages users when something needs a look.

Key facts

• Anthropic says the agent comes as its own app for iPhone and Android phones as well as on the web at claude.ai, and it counts against the same limits as other Claude use.
• Anthropic says the agent looks at linked accounts every few hours rather than all the time, because constant polling would drain a plan's allowance sooner.
• Anthropic says Claude Duet works with over 6,000 connectors and plugins, among them Gmail, Slack, QuickBooks, Stripe, Gusto, Docusign, HubSpot, Canva and Shopify.
• Anthropic says the agent lays out any message, payment, signature or deletion first and holds off until the user approves.
• CNBC reported that Claude Duet competes with Meta's Muse personal agent and OpenAI's dots always-on agents.

How Claude Duet works

The agent runs on its own computer in the cloud. Anthropic says Claude Duet has a virtual machine with its own browser, so the user's laptop or phone does not need to stay on.

It builds on what users have already set up in Claude. Anthropic says Claude Duet carries over memory, skills and connected apps from a user's Claude account.

Some limits apply even when users approve. Anthropic says certain actions, such as trading securities or moving money between accounts, are blocked even with approval.

Purchases go through a separate approval step. Anthropic says Claude Duet buys items through Stripe's Link, which asks the user to approve the spend and pays with a virtual card.

Anthropic also added a check on sensitive data. Anthropic says a new classifier is built to turn down requests to share the most sensitive tier of information, including credit card numbers and government ID. The company says red teams and an outside firm ran penetration tests on Claude Duet.

Background

Anthropic built the app with busy professionals in mind. Anthropic says Claude Duet is aimed at professionals and small business owners who have more on their plates than they can track.

One early tester runs a restaurant business. Anthropic says Amin, who owns Shahs of Kabob in South Florida with about 110 employees, used it for accounting, customer support and marketing.

The field is getting crowded. CNBC reported that Meta told analysts its Muse agent was set up by more than 10 million users across the U.S. and Canada in roughly six weeks.

What it means for you

For now, access is limited. Anthropic says US Pro and Max subscribers can join the waitlist, and the company will send an email when access is ready.

The preview does not add a new charge. Anthropic says for as long as the preview lasts, the agent comes bundled with those two plans at no added cost and draws on the same allowance.

Users keep control of what it touches. Anthropic says users can disconnect any app Claude Duet has access to.

The company admits the product is early. CNBC reported that Anthropic said Claude Duet is still early and might misread a thread or misjudge what is urgent.

There are open questions. It is not known what the app will cost after the preview, when it will reach people outside the US, or how fast the waitlist will move.

Practical steps

• Join the waitlist if eligible. Anthropic says eligible US subscribers can sign up now and will get an email once their turn comes.
• Review which apps are connected. Anthropic says each linked app can be unlinked at any time.
• Watch the approval prompts. Anthropic says the agent pauses for a yes before it messages anyone, pays, signs or deletes.

What happens next

More information is on the way. Anthropic says it will share more about Claude Duet's safety design in the coming days, and that sign-in using logins saved in 1Password is coming soon.

How well its defenses against prompt injection hold up outside Anthropic's own testing is not yet known.

FAQ

Does Claude Duet cost extra? Anthropic says it is bundled into those plans during the trial period.

Can it spend my money? Anthropic says purchases run through Link from Stripe, which needs a sign-off and uses a virtual card.

Is it good for personal errands? Anthropic says it is weaker at personal chores like getting tickets, since its design centers on work.

Does my phone need to stay on? No. Anthropic says the agent runs on a cloud virtual machine that has a browser of its own.

What can it never do? Anthropic says buying or selling securities and shifting funds between accounts stay blocked, approval or not.

Who tested it early? Anthropic says a South Florida restaurant owner named Amin, whose Shahs of Kabob employs about 110 people, used it for bookkeeping, customer service and marketing.

How does it guard sensitive data? Anthropic says a new classifier is meant to block requests to hand over top-tier sensitive data such as card numbers and government identification.