Anthropic opened a research preview of Claude Duet on October 21, 2026. The new app works as a proactive agent for professionals and small business owners. It is available by waitlist, starting with US Pro, Max, and Ultra subscribers. Users can access the standalone app on iOS and Android and on claude.ai. During the research preview, those three plans include the tool and share existing Claude usage limits.
Unlike a standard chat session, the agent comes to the user first. Specifically, Anthropic designed the tool around Claude Opus 5.5. As a result, it decides what needs the user, what can wait, and when to check first. Each morning, it sends a short brief on priority items across connected apps. Throughout the day, Anthropic says it checks those apps every few hours. Then, it messages the user only when something needs attention.
Background virtual machine and Marketplace tools
To keep working after a user steps away, Claude Duet uses a virtual machine with its own browser. Consequently, a laptop or phone does not need to stay on during background tasks. Users can describe a task through typing or voice in one ongoing thread. Next, the system works out which apps to use and what steps to take. Afterward, it sends a notification when the task finishes or needs review.
Because the app carries over Claude memory, skills, and connected apps, setup requires minimal work. Furthermore, it uses over 6,000 connectors and plugins in the Claude Marketplace. For example, it finds missed Gmail and Slack messages and helps users reply. It also checks Intuit QuickBooks or Stripe for unpaid invoices and drafts reminders. Similarly, it prepares and runs Gusto payroll with hours, bonuses, and reimbursements filled in. Beyond that, it drafts LinkedIn job postings, prepares Docusign agreements, and writes HubSpot follow-up emails. Users can also build Canva social campaigns and manage Shopify stores.
In addition, the agent can buy business items through Link, Stripe’s digital wallet. Once a user confirms an item and approves the Link spend, it pays with a virtual card. Therefore, the user’s real card number stays unshared. The agent can also use Shop Pay from Shopify to check out at online stores. According to Anthropic, a richer visual Shopify storefront editor and permission-based 1Password sign-in support are coming soon.
Approval gates, security safeguards, and preview limits
Despite its background autonomy, the agent keeps important decisions with the user. It reads, drafts, and prepares work on its own. However, it waits for approval before sending a message, making a payment, signing a document, or deleting anything. Moreover, Anthropic says actions like trading securities or moving money between accounts remain off-limits even with user approval. Users can also disconnect any connected app at any time.
On the security side, Anthropic says credential handling follows its Claude Managed Agents design. Because of that design, Anthropic says the agent never directly sees passwords or sign-in tokens. Meanwhile, an auto mode classifier approves actions, and browser-use research informs its prompt-injection defenses. A dedicated classifier and safety system prompt also reject requests to share strict sensitive information. Specifically, that tier covers credit card numbers and government identification. Other sensitive details, such as health or personal finances, pass through only when a user explicitly instructs it. On October 23, 2026, Anthropic noted continuing security work alongside red teams, external penetration testing, and its bug bounty program.
Early tester Amin Ebrahimi owns Shahs of Kabob in South Florida with about 110 employees. He used the preview for accounting, customer support, marketing, and store-by-store invoices. Ebrahimi said that “It brings it all together” and “I don’t need to open up 100 tabs.” Still, Anthropic notes that the early version might misread a thread or miscalibrate what is urgent. Because its core functionality targets work, personal errands like booking tickets are not as strong. The app also cannot yet show its browser and lives in a separate app from the main Claude app. Finally, background checks count toward shared plan limits, and the announcement does not specify standalone pricing or international release dates.
