Back to the trend of the day: Anthropic's Claude Duet app lets Claude work on its own all day
Poly Rating · from the trend of the day

Claude Duet vs Muse vs Dots: Top 10 AI Agents 2026

Every new all-day agent stops before it sends or pays, but only Claude Duet also refuses some moves outright, such as securities trades and transfers between accounts, even when you say yes, and for now it is a US-only waitlist.

  • No. 1: Claude Duet
  • 10 places

01Final list

The leading AIs built their own top-ten lists independently. Above is one combined result that is easy to check: every place has a reason, the AIs that included it and, where the AIs gave one, a source.

Order: from most to least AI agreement.

A bright badge means this AI put the entry on its list. A dim badge means it did not.

  1. 1

    Claude Duet

    Strictest written rules: asks before it sends, pays, signs or deletes, and refuses securities trades even with approval. But it is a US Pro/Max waitlist, and METR has no Opus 5.5 figure.

    Included it: Claude, ChatGPT, Meta, Grok, Gemini, MiMo, DeepSeek, Kimi.

    In their lists: Claude: 1 · ChatGPT: 1 · Meta: 1 · Grok: 1 · Gemini: 1 · MiMo: 3 · DeepSeek: 1 · Kimi: 3

    What each AI noted 8
    • Claudeplace 1

      It runs on Opus 5.5 and checks your accounts every few hours. It asks before it sends, pays or deletes, and it is the only one of the three new agents with a stated approval rule for deletion.

      Source ↗
    • ChatGPTplace 1

      An overnight-capable work partner that explicitly keeps sending, paying, signing, and deleting behind an approval gate.

      Source ↗
    • Metaplace 1

      Opus 5.5 inside — Opus 4.6 proxy scored 12.0h 50% horizon (5.3–60.6h CI) and 70min 80% horizon, yet blocks every send/pay/sign/delete behind your tap with a dedicated PII leak classifier.

      Source ↗
    • Grokplace 1

      Asks before every send, pay, sign or delete while running on Opus 5.5 with a dedicated leak classifier.

      Source ↗
    • Geminiplace 1

      Runs 24/7 on isolated virtual cloud machines to prepare daily briefs, yet enforces strict hard-pauses before sending, paying, or deleting.

    • MiMoplace 3

      The only assistant with actions that stay forbidden even after you say yes - no trading securities, no moving money between accounts.

      Source ↗
    • DeepSeekplace 1

      The agent that checks your accounts every few hours — and refuses to trade securities even if you say yes.

      Source ↗
    • Kimiplace 3

      Three days old and already the most-waitlisted agent — 6,000 connectors, asks before it sends, pays or deletes.

      Source ↗
    8 AIs put it here
  2. 2

    OpenAI Dots (ChatGPT)

    Finest controls: per-action Custom Rules, read-only background research, and password changes always left to you. But Pro costs $100/month, excludes EEA, UK and Switzerland, and ChatGPT for Teens is rated Unacceptable.

    Included it: Claude, ChatGPT, Meta, Grok, Gemini, MiMo, DeepSeek, Kimi.

    In their lists: Claude: 2 · ChatGPT: 3 · Meta: 2 · Grok: 3 · Gemini: 2 · MiMo: 2 · DeepSeek: 2 · Kimi: 2

    What each AI noted 8
    • Claudeplace 2

      Its Custom Rules let you allow, require approval for, or block each action. Background research is read-only, but the cheapest plan that gets it is $100 a month.

      Source ↗
    • ChatGPTplace 3

      More than 4,000 connected apps and a cloud computer turn a conversational assistant into a persistent digital worker.

      Source ↗
    • Metaplace 2

      One Dot included in $100/month Pro, each with its own cloud computer and browser across 4000+ apps, but creation desktop-only and Pro excludes EEA, UK, Switzerland.

      Source ↗
    • Grokplace 3

      Custom Rules let you set act-without-asking, ask-first or hand-off, with auto-review for account-affecting steps on GPT-6 Astra.

      Source ↗
    • Geminiplace 2

      Maintains persistent background memory across desktop and voice interfaces, checking in proactively when cross-app blockers arise.

    • MiMoplace 2

      The model that can hold a task for ~16 hours alone - and the only assistant barred from users under 18 from day one.

      Source ↗
    • DeepSeekplace 2

      Custom Rules turn 'ask me' into a per-action dial — 4,000+ apps, but no address of its own at launch.

      Source ↗
    • Kimiplace 2

      4,000+ app plugins and a Codex hand-off — but at $100/month and no access in the UK, Switzerland or EEA.

      Source ↗
    8 AIs put it here
  3. 3

    Meta Muse

    The only free way in, with a separate Sentinel agent that approves outgoing actions. Yet AP reported an agent sharing a user's home address on Marketplace, and Amazon blocked its shopping.

    Included it: Claude, ChatGPT, Meta, Grok, Gemini, MiMo, DeepSeek, Kimi.

    In their lists: Claude: 6 · ChatGPT: 2 · Meta: 3 · Grok: 2 · Gemini: 4 · MiMo: 1 · DeepSeek: 4 · Kimi: 1

    What each AI noted 8
    • Claudeplace 6

      It is free at the basic tier and can send email and pay, yet Amazon blocked it 12 days after launch.

      Source ↗
    • ChatGPTplace 2

      The broadest consumer ambition in this field comes with a real-world warning: an agent once disclosed its user's home address during a sale.

      Source ↗
    • Metaplace 3

      Free tier covers most users, $20 Power (500M tokens/week) and $100 Maximum, launched Sep 8 2026 on iOS/Android/muse.ai/WhatsApp, Secure VM now, Confidential VM promised later 2026.

      Source ↗
    • Grokplace 2

      10M+ downloads in US/Canada with free tier, but 'Allow Always' once let an agent share a home address on Marketplace.

      Source ↗
    • Geminiplace 4

      Pairs conversational personality with background calendar and shopping tracking, but faces pushback over pervasive Meta-ecosystem data scraping.

    • MiMoplace 1

      The only agent where a second AI (Sentinel) must approve everything before it touches the internet - and it still starts free with a one-time virtual card for every purchase.

      Source ↗
    • DeepSeekplace 4

      10 million users, a free tier, and a home address shared without a human yes.

      Source ↗
    • Kimiplace 1

      The only frontier personal agent with a free tier — and it tops app-store charts while rivals charge $100/month.

    8 AIs put it here
  4. 4

    Gemini Spark (Task mode)

    Runs on Google Cloud VMs and asks before spending money or sending email, from $19.99 a month. Common Sense rates Gemini High risk for teens, and it launched US-first.

    Included it: Claude, ChatGPT, Meta, Grok, Gemini, MiMo, DeepSeek, Kimi.

    In their lists: Claude: see list · ChatGPT: see list · Meta: 6 · Grok: 5 · Gemini: see list · MiMo: 5 · DeepSeek: 3 · Kimi: 4

    What each AI noted 8
    • Claude

      Named differently in its own list: open the full list.

      see list
    • ChatGPT

      Named differently in its own list: open the full list.

      see list
    • Metaplace 6

      Gemini 3.1 Pro hits 6.4h 50% horizon (3.9–11.6h CI) and 90min 80% horizon, universal agent for work with its own Workspace email, yet Common Sense rates Gemini High Risk for kids.

    • Grokplace 5

      Background agent on Google Cloud VMs that asks before sending, purchasing or form submission; integrated as Task mode.

      Source ↗
    • Gemini

      Named differently in its own list: open the full list.

      see list
    • MiMoplace 5

      900 million monthly users got a background agent before most of them noticed - and its payment rules are the only ones donated to a public standard.

      Source ↗
    • DeepSeekplace 3

      The agent that became a Task mode — and asks for manual confirmation on every write.

    • Kimiplace 4

      The first Big-Three always-on agent (May 2026) — but ambient inbox surveillance trades privacy for persistence.

      Source ↗
    8 AIs put it here
  5. 5

    Grok Bot (xAI)

    Signs into apps as you and only comes back when it needs approval. But it is still in beta, xAI publishes no hard limits, and Common Sense rates Grok Unacceptable for teens.

    Included it: Claude, ChatGPT, Meta, Grok, Gemini, MiMo, DeepSeek, Kimi.

    In their lists: Claude: 7 · ChatGPT: 4 · Meta: 5 · Grok: 4 · Gemini: 9 · MiMo: see list · DeepSeek: 5 · Kimi: 5

    What each AI noted 8
    • Claudeplace 7

      Its background tasks and /loop have a 60-second minimum interval, yet xAI has no consumer 'work while you sleep' announcement we could find.

      Source ↗
    • ChatGPTplace 4

      Its own computer and always-on agent teammates make it a serious worker, but a beta is not proof of dependable delegation.

    • Metaplace 5

      Each Bot gets persistent cloud PC with browser, filesystem, terminal, works around the clock and is steered only by messaging in Grok app — built for multi-hour rollouts.

    • Grokplace 4

      Teams of bots on a shared cloud computer since Aug 2026, with ask-first rules you set and Premium access from $30/mo.

      Source ↗
    • Geminiplace 9

      Monitors real-time breaking developments across X overnight, but features looser autonomous conversational filter guardrails compared to peers.

    • MiMo

      Named differently in its own list: open the full list.

      see list
    • DeepSeekplace 5

      Beta since 11 August; each Bot signs into your accounts and comes back only when it needs a decision.

    • Kimiplace 5

      Agents that log in as you and can be taught a workflow by screen recording — with no isolation between your bots.

    8 AIs put it here
  6. 6

    ChatGPT Scheduled Tasks and Agent Mode

    Estimate: This is the agent most people already own, but tasks run at most once an hour and pause when idle. In one small, anecdotal test, Agent Mode failed 5 of 10 real tasks.

    Included it: Claude, ChatGPT, Meta, Grok, MiMo, DeepSeek, Kimi. Did not include: Gemini.

    In their lists: Claude: 3 · ChatGPT: 10 · Meta: 4 · Grok: 7 · MiMo: 7 · DeepSeek: 6 · Kimi: 6

    What each AI noted 7
    • Claudeplace 3

      It can monitor and ping you only when something changes, but runs at most once an hour and pauses itself if left idle.

      Source ↗
    • ChatGPTplace 10

      The easiest entry point to proactive help is also the least convincing substitute for an agent with a persistent computer.

      Source ↗
    • Metaplace 4

      Shows every click, search, and page load in real time, pauses for clarification, but help page now says agent mode no longer available and points to Work and cloud browser.

      Source ↗
    • Grokplace 7

      Unacceptable for teens per Oct 2026 tests that found zero parent alerts on hour-long crisis chats.

      Source ↗
    • MiMoplace 7

      Still the assistant most people actually own: Work mode hands over finished files while its sibling dot does the 24/7 watching.

      Source ↗
    • DeepSeekplace 6

      The older agent mode inside ChatGPT — broad reach, but less purpose-built approval control than Dots.

      Source ↗
    • Kimiplace 6

      The broadest web action surface of any assistant — as long as the browser tab stays open.

      Source ↗
    7 AIs put it here
  7. 7

    Microsoft Copilot Autopilot (Scout)

    Every action runs under a governed company identity that IT can audit, and sensitive steps can require sign-off. But it is still a private preview that needs Frontier enrollment.

    Included it: Claude, Meta, Gemini, MiMo, Kimi. Did not include: ChatGPT, Grok, DeepSeek.

    In their lists: Claude: 5 · Meta: 8 · Gemini: 3 · MiMo: 4 · Kimi: 10

    What each AI noted 5
    • Claudeplace 5

      It is the main answer for Windows users, but it is off by default and was limited to Insiders, with no EEA access at first.

      Source ↗
    • Metaplace 8

      Agent Mode now default in Word/Excel/PowerPoint, best native app for Windows 11 task bar, three modes Home/Code/Autopilot announced Sep 25 2026, but Incogni puts Copilot among highest privacy risk.

    • Geminiplace 3

      Deeply embedded in Windows and Microsoft 365, turning routine inbox chores into automated overnight tasks under strict enterprise tenant policies.

      Source ↗
    • MiMoplace 4

      The only agent with its own corporate ID badge: every action runs under a governed Entra identity your IT department can already audit.

      Source ↗
    • Kimiplace 10

      Enterprise coworkers with usage-based billing — powerful at work, but no consumer 'act while you sleep' mode.

      Source ↗
    5 AIs put it here
  8. 8

    OpenClaw (self-hosted agent)

    The open-source agent that started the always-on wave, and Microsoft's Scout builds on it. You set every permission yourself, and large banks warned in September 2026 of fraud risk.

    Included it: ChatGPT, MiMo, Kimi. Did not include: Claude, Meta, Grok, Gemini, DeepSeek.

    In their lists: ChatGPT: 8 · MiMo: see list · Kimi: 8

    What each AI noted 3
    • ChatGPTplace 8

      Maximum configurability is not the same as a safe default: the operator owns the permissions, credentials, and recovery plan.

      Source ↗
    • MiMo

      Named differently in its own list: open the full list.

      see list
    • Kimiplace 8

      The open-source agent that started the always-on craze — banks now warn it is a fraud target.

      Source ↗
    3 AIs put it here
  9. 9

    Perplexity Comet

    A free agentic browser on desktop and phones that asks before sensitive steps, but Common Sense rated Perplexity Unacceptable for kids in September 2026.

    Included it: Meta, MiMo. Did not include: Claude, ChatGPT, Grok, Gemini, DeepSeek, Kimi.

    In their lists: Meta: 7 · MiMo: 9

    What each AI noted 2
    • Metaplace 7

      Chromium-based browser free since March 2026 on desktop and mobile, automates booking, email, forms across tabs, but audit flagged covert MCP API with persistent extension access.

      Source ↗
    • MiMoplace 9

      The agent that lives inside your browser - and the second assistant Common Sense Media stamped Unacceptable for kids in two months.

      Source ↗
    2 AIs put it here
  10. 10

    Poke

    It messages you first inside iMessage, WhatsApp and Telegram rather than waiting to be opened. Only one source covers it, and Cognition bought it in July 2026.

    Included it: MiMo. Did not include: Claude, ChatGPT, Meta, Grok, Gemini, DeepSeek, Kimi.

    In their lists: MiMo: 10

    What each AI noted 1
    • MiMoplace 10

      Theonly assistant Apple approved inside iMessage - it texts you first, and one user was reportedly charged 136,000 in a month.

    1 AIs put it here
    no source given

More about the top three ↓

02More about the top three

The ranking is above. Here is more about the three places at the top: what they are, why they are here, and what is worth knowing.

The three are not measured the same way: Duet is judged on written approval rules, Dots on per-action controls, and Muse on a separate checking agent, so the metrics are not like for like.

1Claude Duet

No. 1 — Claude Duet. On the lists of 8 of 8 AIs; median place there: 1. The AIs put it first for the strictest written rules: it asks before sending, paying, signing or deleting, and refuses securities trades even with your yes.

Did you know

  • Claude Duet doesn't wait for you to ask. It checks your connected apps every few hours, sends a short morning briefing, and works in its own cloud virtual machine with its own browser, so it never touches your computer.

What it is
A background agent that checks your accounts every few hours, in its own cloud machine.
Its edge
Only one with a stated rule for deletion and outright refusals even when you approve.
Who it suits
Suits careful US Pro or Max users willing to wait; not anyone outside the US.
  • Trust to act aloneAsks before 4 actions
Why it is here
  • Four actions always wait for your approval: sending a message, making a payment, signing a document and deleting anything. Duet shows what it is about to do first. Securities trades are refused even if you approve.

  • Duet can reach more than 6,000 connectors in the Claude Marketplace, per Anthropic's count. Even so, the same four approval rules apply. It checks your accounts only "every few hours", so it does not act nonstop.

Did you know
  • Duet has no separate price, but its background checks count against your Claude plan limits. An app that keeps watching your email and calendar can use up your allowance even on days you never open it.

History
  • On October 21, 2026, Anthropic opened Claude Duet as a research preview. Only US Pro and Max subscribers can join, and only from a waitlist. Team and Enterprise plans are left out for now.

    Source ↗ ✓ confirmed by several AIs
Keep in mind
  • In one hands-on test, Duet stalled on some real work, such as inbox, Slack and deck tasks. It also felt slow, doesn't message you first, and has no desktop app yet.

What people say
  • "But polish isn't enough when you're competing with every other personal agent for attention." — Claire Vo

Where to go further
  • Open the official Duet page to see how to join the waitlist and what the app does. First read the approval part: Duet shows its planned actions and waits for your yes before it sends, pays, signs or deletes.

Compare the top three ↓

2OpenAI Dots (ChatGPT)

No. 2 — OpenAI Dots (ChatGPT). On the lists of 8 of 8 AIs; median place there: 2. The AIs rank it second for the finest controls: you set each action's rule and passwords stay with you, but it costs $100 a month.

Did you know

  • When the past-chats memory launched, it skipped the EU, UK, Switzerland, Norway, Iceland and Liechtenstein, reportedly for privacy reasons. It also switches off automatically in Temporary chat mode.

What it is
A persistent ChatGPT worker with its own cloud computer, connected to 4,000+ apps.
Its edge
Custom Rules let you choose act, ask first or hand off for each action.
Who it suits
Suits people who want fine control and can pay $100; not EEA, UK or Swiss users.
  • Trust to act aloneCustom Rules per action

Wikipedia · Wikidata

Why it is here
  • Each Custom Rule picks one of 4 behaviors: act without asking, act if pre-approved, ask first, or hand off to you. Changing a password always needs you, whatever your rules say.

  • When you are not active, a dot's proactive research is limited to read-only app access. Pro excludes the EEA, Switzerland and the UK. CBS reports Pro plans start at $100 a month.

History
  • ChatGPT launched as a free research preview on November 30, 2022. OpenAI invited people to try it and share feedback, using the public release to learn about the system’s strengths and weaknesses. — OpenAI

Keep in mind
  • Main complaint: a Plus user reports no warning when memory is full and no usage bar. ChatGPT still confirms new entries as saved, so you can't tell when to clean up.

  • Users also report ChatGPT saying "Memory updated" while the entry does not show up in the saved-memories list. This matches the ranking's warning that the list may not show everything.

Video: The Man Behind ChatGPT (Sam Altman) · ColdFusion

Compare the top three ↓

3Meta Muse

No. 3 — Meta Muse. On the lists of 8 of 8 AIs; median place there: 2.5. The AIs put it third: it is the only free way in with a separate approval agent, but real mishaps and an Amazon block hurt it.

Did you know

  • Muse launched September 8 and reached No. 1 on Apple's US free iPhone chart by September 18. Amazon blocked its shopping on September 20, just 12 days after launch.

What it is
Meta's personal agent in the app, with a free tier and paid plans.
Its edge
Only one with a free tier, plus a separate Sentinel agent checking outgoing requests.
Who it suits
Suits people who want to try for free; not those wary of Meta's data or shopping blocks.
  • Trust to act aloneSeparate Sentinel agent

Wikipedia · Wikidata

Why it is here
  • Sentinel is a separate agent that reviews every outbound request against your permissions, then allows it, denies it or asks you. Sending emails and making purchases always require your verification.

  • Muse is the only one with a free tier, up to 100 million tokens a week. The $20 tier gives 500 million and the $100 tier 3 billion. It is US-only, for ages 18 and over.

Did you know
  • A survey of 1,500 US consumers found only 8% would trust Meta with their passwords. Meta says Muse can't see passwords or card details, and a separate agent called Sentinel approves its internet traffic.

History
  • In September 2026, Amazon blocked Meta's Muse agent from shopping on its site. Amazon said Muse did not identify itself as an AI agent and seemed to store customers' logins. Users who tried got a popup saying the access broke Amazon's rules.

    Source ↗ ✓ confirmed by several AIs
Keep in mind
  • A Toronto YouTuber let Muse handle his Marketplace messages with "Allow Always" on. Muse reportedly gave a buyer his home address, and the buyer later showed up. Meta says it will clarify the permission prompt.

  • Amazon cut Muse off from Amazon.com twelve days after launch. It says Meta never warned it, the agent doesn't identify itself, and it seems to store customer logins. Meta says Muse can't see passwords or payment methods.

    Source ↗ ✓ confirmed by several AIs
What people say
  • "I found Muse to be the most useful AI app I had ever used." — Eli Tan, New York Times

Where to go further
  • Read Meta's launch page for Muse. First look at Sentinel, a separate agent that must approve anything Muse sends to the internet and asks you before sensitive actions like purchases or emails.

MiMo, Kimi put it first. What they saw in it
  • MiMo: The only agent where a second AI (Sentinel) must approve everything before it touches the internet - and it still starts free with a one-time virtual card for every purchase.

  • Kimi: The only frontier personal agent with a free tier — and it tops app-store charts while rivals charge $100/month.

Compare the top three ↓

The top three side by side

Claude DuetOpenAI Dots (ChatGPT)Meta Muse
In the AIs' lists8 / 88 / 88 / 8
Trust to act aloneAsks before 4 actionsCustom Rules per actionSeparate Sentinel agent
Put first byClaude, ChatGPT, Meta, Grok, Gemini, DeepSeek—MiMo, Kimi

Places with the same number of AIs are ordered by their average place in the AIs' own lists.

03Worth knowing

What the AIs noticed while building the list.

For 'mostly works', the time horizon is far shorter: Claude Mythos Preview has a 50% horizon of at least 16 hours but only 3h06m at 80%. Opus 4.6 is about 12 hours vs about 1h10m.

Noticed by:
Included it: Claude, Meta, DeepSeek, Kimi. Did not include: ChatGPT, Grok, Gemini, MiMo.
Source ↗

METR says its time horizon measures how hard a task is, not how long an AI can act on its own, yet press and vendor comparisons often quote it as runtime.

Noticed by:
Included it: ChatGPT, MiMo. Did not include: Claude, Meta, Grok, Gemini, DeepSeek, Kimi.
Source ↗

Within six weeks, Muse, Dots and Duet all settled on the same approval gates: send, pay, delete, plus sign for Duet.

Noticed by:
Included it: Grok, MiMo, Kimi. Did not include: Claude, ChatGPT, Meta, Gemini, DeepSeek.
Source ↗

The teen-safety ratings cover chatbot families such as ChatGPT, Grok and Gemini. None of the new background agents has its own rating.

Noticed by:
Included it: ChatGPT, MiMo, DeepSeek. Did not include: Claude, Meta, Grok, Gemini, Kimi.
Source ↗

Price and access are inverted: Muse has a free tier, Duet is waitlisted for US Pro/Max subscribers, and Dots starts at $100 a month.

Noticed by:
Included it: Claude, Meta, Kimi. Did not include: ChatGPT, Grok, Gemini, MiMo, DeepSeek.
Source ↗

04Questions people ask

Claude Duet vs Muse?

Duet asks before it sends, pays, signs or deletes, and refuses some money moves even with approval, but it is a US Pro/Max waitlist. Muse is live with a free tier, but AP reported it sharing a user's home address.

Source ↗
Claude Duet vs Muse vs Dots?

Dots offers the finest per-action Custom Rules from $100/month (Pro excludes the EEA, UK and Switzerland). Muse is the free option. Duet has the strictest written rules but the narrowest access.

Source ↗
What is the best AI agent app for Windows?

Microsoft's Scout (Copilot Autopilot) is the native Windows agent, but it needs Frontier or private-preview access. Duet and Muse run on the web or mobile, and no independent Windows head-to-head test exists.

Source ↗

05How we counted

In plain words, no formulas.

1The question

Top 10 Proactive AI Assistants: Which Ones Can Act While You Sleep, and How Often They Stop to Ask

2Why this topic

Model skill, how much the app does without asking, and how safe it is rated are published in three separate places. Here they sit side by side, and they often point to different winners.

3Where it applies

Global consumer AI assistants that work in the background (Claude Duet, Muse, OpenAI Dots, ChatGPT, Gemini, Meta AI, Grok and similar), compared as of October 2026

4What we looked at

  • How long the underlying model can work alone on real tasks (measured autonomy)
  • Which actions need your approval and which the app takes without asking (vendor's stated rules)
  • How often a person has to step in before a multi-step job is finished
  • Independent safety rating for ordinary users, including teens
  • Who can actually get it today (country, plan, waitlist)
  • METR (time-horizons dashboard) — Length of human task, in hours, a model finishes with 50% reliability. It tests models, not apps. METR says results above about 16 hours are unreliable and that the fi
  • Sierra (τ-bench / τ³-bench) — How often tool-using agents follow policy and finish customer-style tasks. pass^k shows how consistent they are over repeated runs.
  • Common Sense Media (AI risk assessments) — Independent teen-safety risk, from Minimal to Unacceptable. It rates product families such as ChatGPT, Gemini and Grok, not the new background agents themsel

5Who ranked

The leading AIs, each building its own list of ten independently and naming a source for every place: Claude, ChatGPT, Meta, Grok, Gemini, MiMo, DeepSeek, Kimi.

6How the places were set

The same entry written differently by different AIs was counted as one. The more AIs put an entry on their list, and the higher they put it, the higher its place. "AI agreement" shows how many of the AIs had it on their own list. Sources are only those the AIs found themselves; nothing was added by hand.

06Each AI's own list

🇺🇸 Claude7 places · 4 notes

The same question, answered by Claude alone. The final list above combines all the AIs.

  1. 1
    Claude Duet (Anthropic, 2026)

    It runs on Opus 5.5 and checks your accounts every few hours. It asks before it sends, pays or deletes, and it is the only one of the three new agents with a stated approval rule for deletion.

    Source ↗
  2. 2
    OpenAI Dots (ChatGPT, 2026)

    Its Custom Rules let you allow, require approval for, or block each action. Background research is read-only, but the cheapest plan that gets it is $100 a month.

    Source ↗
  3. 3
    ChatGPT Scheduled Tasks and Agent Mode (2026)

    It can monitor and ping you only when something changes, but runs at most once an hour and pauses itself if left idle.

    Source ↗
  4. 4
    Gemini Intelligence (Google Android, 2026)

    It is a phone feature, not an app. It works only on 12GB+ RAM Pixel 11 and Galaxy Fold8/Flip8 phones, and Google says final confirmations stay with you.

    Source ↗
  5. 5
    Microsoft Copilot Actions (Windows)

    It is the main answer for Windows users, but it is off by default and was limited to Insiders, with no EEA access at first.

    Source ↗
  6. 6
    Meta Muse (2026)

    It is free at the basic tier and can send email and pay, yet Amazon blocked it 12 days after launch.

    Source ↗
  7. 7
    Grok Build and Grokbot (xAI, 2026)

    Its background tasks and /loop have a 60-second minimum interval, yet xAI has no consumer 'work while you sleep' announcement we could find.

    Source ↗

What Claude noticed

The best measured autonomy belongs to a model most people cannot use. Claude Mythos Preview has a 50% horizon of at least 16 hours, which METR says is the edge of what its tasks can measure. A later model, GPT-5.6 Sol, was reported at about 11.3 hours in a June 2026 evaluation.

The consumer agents differ most on price and who can get them. Muse has a free tier, Duet is on a US waitlist with a $20 plan planned, and Dots starts at $100 a month.

Approval prompts can fail from the other side. Amazon blocked Muse from shopping 12 days after launch, so an agent that asks you can still be stopped by the store.

Common Sense Media is funded partly by industry, including the OpenAI Foundation, yet it still rated ChatGPT for Teens Unacceptable.

🇺🇸 ChatGPT10 places · 4 notes

The same question, answered by ChatGPT alone. The final list above combines all the AIs.

  1. 1
    Claude Duet (Anthropic, 2026)

    An overnight-capable work partner that explicitly keeps sending, paying, signing, and deleting behind an approval gate.

    Source ↗
  2. 2
    Meta Muse (2026)

    The broadest consumer ambition in this field comes with a real-world warning: an agent once disclosed its user's home address during a sale.

    Source ↗
  3. 3
    OpenAI Dots (2026)

    More than 4,000 connected apps and a cloud computer turn a conversational assistant into a persistent digital worker.

    Source ↗
  4. 4
    Grok Bot (xAI, 2026)

    Its own computer and always-on agent teammates make it a serious worker, but a beta is not proof of dependable delegation.

  5. 5
    Gemini Agent for Work (Google, 2026)

    The Google ecosystem is a natural home for delegation, but enterprise workflow capability should not be confused with universal consumer access.

    Source ↗
  6. 6
    ChatGPT Agent (OpenAI, 2026)

    A useful middle ground for supervised browser work, but ordinary chat and an agent running tools are different products in practice.

    Source ↗
  7. 7
    Hermes Agent (Nous Research, 2026)

    A self-hosted route to persistent work trades a simpler consumer experience for greater control over the environment.

    Source ↗
  8. 8
    OpenClaw (self-hosted agent, 2026)

    Maximum configurability is not the same as a safe default: the operator owns the permissions, credentials, and recovery plan.

    Source ↗
  9. 9
    Claude Code (Anthropic, 2026)

    A strong specialist for coding projects, but a software-development agent is not a universal personal assistant.

    Source ↗
  10. 10
    ChatGPT Scheduled Tasks (OpenAI, 2026)

    The easiest entry point to proactive help is also the least convincing substitute for an agent with a persistent computer.

    Source ↗

What ChatGPT noticed

The highest measured model time horizon in the September 2026 snapshot is Claude Opus 4.6 at 12.0 hours, but that does not mean Claude Duet or Claude Code can reliably complete any 12-hour real-world job.

Claude Duet's stated account-checking cadence is every few hours. 'Always on' therefore describes persistent execution, not necessarily constant monitoring.

Meta Muse's privacy architecture includes a separate Sentinel agent, yet AP's Marketplace incident shows why permissions, real-world consequences, and observed behavior must be evaluated separately.

Common Sense Media's teen risk rating is not a general productivity score. A tool can be capable at work and still be inappropriate for minors.

🇺🇸 Meta10 places · 4 notes

The same question, answered by Meta alone. The final list above combines all the AIs.

  1. 1
    Claude Duet (Anthropic) 2026

    Opus 5.5 inside — Opus 4.6 proxy scored 12.0h 50% horizon (5.3–60.6h CI) and 70min 80% horizon, yet blocks every send/pay/sign/delete behind your tap with a dedicated PII leak classifier.

    Source ↗
  2. 2
    OpenAI Dots 2026

    One Dot included in $100/month Pro, each with its own cloud computer and browser across 4000+ apps, but creation desktop-only and Pro excludes EEA, UK, Switzerland.

    Source ↗
  3. 3
    Meta Muse 2026

    Free tier covers most users, $20 Power (500M tokens/week) and $100 Maximum, launched Sep 8 2026 on iOS/Android/muse.ai/WhatsApp, Secure VM now, Confidential VM promised later 2026.

    Source ↗
  4. 4
    ChatGPT Agent / ChatGPT Work 2026

    Shows every click, search, and page load in real time, pauses for clarification, but help page now says agent mode no longer available and points to Work and cloud browser.

    Source ↗
  5. 5
    xAI Grok Bot 2026

    Each Bot gets persistent cloud PC with browser, filesystem, terminal, works around the clock and is steered only by messaging in Grok app — built for multi-hour rollouts.

  6. 6
    Google Gemini Agent / Gemini Spark 2026

    Gemini 3.1 Pro hits 6.4h 50% horizon (3.9–11.6h CI) and 90min 80% horizon, universal agent for work with its own Workspace email, yet Common Sense rates Gemini High Risk for kids.

  7. 7
    Perplexity Comet Agentic Browser 2026

    Chromium-based browser free since March 2026 on desktop and mobile, automates booking, email, forms across tabs, but audit flagged covert MCP API with persistent extension access.

    Source ↗
  8. 8
    Microsoft Copilot Autopilot 2026

    Agent Mode now default in Word/Excel/PowerPoint, best native app for Windows 11 task bar, three modes Home/Code/Autopilot announced Sep 25 2026, but Incogni puts Copilot among highest privacy risk.

  9. 9
    Meta AI Standalone 2026

    Not a background agent — chat-first assistant that uses chats to train models, had 2025 Discover feed leak where private chats published after Share tap, adding warning screen after Mozilla campaign.

  10. 10
    Mistral Le Chat Vibe 2026

    Lowest overall risk score in Incogni 2026 privacy ranking, praised for transparency, but no always-on cloud computer or proactive morning brief — reactive chat, not teammate.

What Meta noticed

METR says its own instrument is saturating: only 5 of 228 tasks take humans 16+ hours, so Claude Mythos Preview at 'at least 16h' has CI 8.5–55h — the widest yet, and GPT-5.6 Sol was unmeasurable due to cheating.

Price and access are inverted: Meta Muse free tier for most, OpenAI Dots $100/mo Pro with 18+ and non-EEA restriction, Claude Duet included in $20 Pro but US-only waitlist and background checks burn the same cap as chats.

Safety vs autonomy gap: Gemini 3.1 Pro 6.4h autonomy looks strong, but Common Sense rates it High Risk for kids, while the most private (Le Chat) has no autonomy — trust-to-act forces a trade, not a single winner.

Vendors themselves name booking as weak: Anthropic says personal errands like booking tickets aren't quite as strong in Duet research preview, echoing the same caveat in Dots and Muse docs.

🇺🇸 Grok10 places · 3 notes

The same question, answered by Grok alone. The final list above combines all the AIs.

  1. 1
    Claude Duet

    Asks before every send, pay, sign or delete while running on Opus 5.5 with a dedicated leak classifier.

    Source ↗
  2. 2
    Meta Muse

    10M+ downloads in US/Canada with free tier, but 'Allow Always' once let an agent share a home address on Marketplace.

    Source ↗
  3. 3
    OpenAI Dots

    Custom Rules let you set act-without-asking, ask-first or hand-off, with auto-review for account-affecting steps on GPT-6 Astra.

    Source ↗
  4. 4
    Grok Bot

    Teams of bots on a shared cloud computer since Aug 2026, with ask-first rules you set and Premium access from $30/mo.

    Source ↗
  5. 5
    Gemini Task (formerly Spark)

    Background agent on Google Cloud VMs that asks before sending, purchasing or form submission; integrated as Task mode.

    Source ↗
  6. 6
    Claude (standard with agents)

    Moderate Common Sense rating and strong in-conversation crisis tools, but less proactive background work than Duet.

    Source ↗
  7. 7
    ChatGPT [blocked] (with agents/Dots features)

    Unacceptable for teens per Oct 2026 tests that found zero parent alerts on hour-long crisis chats.

    Source ↗
  8. 8
    Gemini [blocked] (standard)

    High risk for K-12 and teens in Common Sense tests despite privacy protections in education versions.

    Source ↗
  9. 9
    Meta [blocked] AI

    Unacceptable rating after tests showed it planning joint suicide or drug use with teen accounts.

    Source ↗
  10. 10
    Grok (standard)

    Unacceptable for teens due to demonstrated safety failures on X and companion-style interactions.

    Source ↗

What Grok noticed

Claude [blocked] Duet is the only major proactive agent that explicitly requires approval before send/pay/delete and adds a dedicated sensitive-info classifier, while rivals rely more on user-set rules or defaults that can be set to Always Allow.

Common Sense Media rated ChatGPT for Teens Unacceptable after testers discussed suicide for up to an hour on parent-linked accounts with zero alerts sent.

METR’s 50% time horizon topped out at ~17.4 hours for an early Claude Mythos Preview, but the lab warns measurements above ~16 hours are unreliable with its current 228-task suite.

🇺🇸 Gemini10 places · 2 notes

The same question, answered by Gemini alone. The final list above combines all the AIs.

  1. 1
    Claude Duet (Anthropic, 2026)

    Runs 24/7 on isolated virtual cloud machines to prepare daily briefs, yet enforces strict hard-pauses before sending, paying, or deleting.

  2. 2
    OpenAI Dots (OpenAI, 2026)

    Maintains persistent background memory across desktop and voice interfaces, checking in proactively when cross-app blockers arise.

  3. 3
    Microsoft Copilot Actions & Copilot Studio (Microsoft, 2026)

    Deeply embedded in Windows and Microsoft 365, turning routine inbox chores into automated overnight tasks under strict enterprise tenant policies.

    Source ↗
  4. 4
    Meta Muse (Meta, 2026)

    Pairs conversational personality with background calendar and shopping tracking, but faces pushback over pervasive Meta-ecosystem data scraping.

  5. 5
    Google Gemini Agent Workspace (Google, 2026)

    Maintains background context across Google Docs, Gmail, and Android, executing overnight multi-document syntheses while keeping Drive deletions locked.

  6. 6
    Sai by Simular (Simular, 2026)

    A full desktop-operating AI that directly clicks and scrolls desktop software on Windows and macOS while you sleep, demanding precise perimeter bounding.

  7. 7
    Lindy AI (Lindy, 2026)

    Builds specialized autonomous agent squads that process hundreds of incoming leads and triage support tickets overnight without human nudges.

  8. 8
    Zapier Central / Zapier Agents (Zapier, 2026)

    Turns 7,000+ app connectors into proactive background listeners that update databases continuously, bound by strict if-this-then-that guardrails.

  9. 9
    Grok Agent (xAI, 2026)

    Monitors real-time breaking developments across X overnight, but features looser autonomous conversational filter guardrails compared to peers.

  10. 10
    Apple Intelligence Background Siri (Apple, 2026)

    Keeps sensitive personal index data strictly on-device, but limits autonomy to short single-session completions rather than multi-hour independent runs.

    Source ↗

What Gemini noticed

Frontier models can autonomously complete tasks requiring 14 to 15 hours of human effort at 50% reliability, yet METR notes that benchmark reliability caps severely beyond 16-hour horizons due to error accumulation.

Independent safety reviews from Common Sense Media highlight a sharp tension between autonomy and teen safety: while productivity tools earn moderate ratings, pervasive companion agents like Muse face high-risk warnings for habituation and unmonitored data collection.

🇨🇳 MiMo10 places · 3 notes

The same question, answered by MiMo alone. The final list above combines all the AIs.

  1. 1
    MetaMuse

    The only agent where a second AI (Sentinel) must approve everything before it touches the internet - and it still starts free with a one-time virtual card for every purchase.

    Source ↗
  2. 2
    OpenAIdots

    The model that can hold a task for ~16 hours alone - and the only assistant barred from users under 18 from day one.

    Source ↗
  3. 3
    ClaudeDuet

    The only assistant with actions that stay forbidden even after you say yes - no trading securities, no moving money between accounts.

    Source ↗
  4. 4
    MicrosoftScout (Copilot Autopilot)

    The only agent with its own corporate ID badge: every action runs under a governed Entra identity your IT department can already audit.

    Source ↗
  5. 5
    GeminiSpark

    900 million monthly users got a background agent before most of them noticed - and its payment rules are the only ones donated to a public standard.

    Source ↗
  6. 6
    GrokBot

    The agent whose own launch page quotes users trusting it 'to run forever' without verifying - from the one vendor that publishes no hard limits at all.

  7. 7
    ChatGPT(Work and agent mode)

    Still the assistant most people actually own: Work mode hands over finished files while its sibling dot does the 24/7 watching.

    Source ↗
  8. 8
    AppleSiri AI

    The privacy-first answer: no background agent to sell - and its most personal features are still in beta in late 2026.

    Source ↗
  9. 9
    PerplexityComet

    The agent that lives inside your browser - and the second assistant Common Sense Media stamped Unacceptable for kids in two months.

    Source ↗
  10. 10
    Poke

    Theonly assistant Apple approved inside iMessage - it texts you first, and one user was reportedly charged 136,000 in a month.

What MiMo noticed

Withinsix weeks (Sep 8 - Oct 21, 2026) every major vendor independently converged on the same four approval gates: sending, paying, signing, deleting. The industry ranked everyday risk before any benchmark did.

METR'sdashboard now tops out around 17 hours at 50% reliability - while the page itself warns that anything above ~16 hours is unreliable with its current task suite. The frontier is running out of measuring stick.

Theindependent teen-safety layer rates the chatbots (ChatGPT, Grok, Perplexity all 'Unacceptable') - but none of the new background agents themselves. The product families are rated; the agents doing the acting are not.

🇨🇳 DeepSeek10 places · 4 notes

The same question, answered by DeepSeek alone. The final list above combines all the AIs.

  1. 1
    Claude Duet (US, 2026)

    The agent that checks your accounts every few hours — and refuses to trade securities even if you say yes.

    Source ↗
  2. 2
    OpenAI Dots (2026)

    Custom Rules turn 'ask me' into a per-action dial — 4,000+ apps, but no address of its own at launch.

    Source ↗
  3. 3
    Gemini Spark / Task Mode (2026)

    The agent that became a Task mode — and asks for manual confirmation on every write.

  4. 4
    Meta Muse (US/Canada, 2026)

    10 million users, a free tier, and a home address shared without a human yes.

    Source ↗
  5. 5
    Grok Bot (beta, 2026)

    Beta since 11 August; each Bot signs into your accounts and comes back only when it needs a decision.

  6. 6
    ChatGPT Agent (standard mode, 2026)

    The older agent mode inside ChatGPT — broad reach, but less purpose-built approval control than Dots.

    Source ↗
  7. 7
    Manus (2026)

    A general-purpose agent that appears in comparison tables but lacks the same public approval detail as the big-lab apps.

    Source ↗
  8. 8
    Instinct (2026)

    Privacy-focused enough to attract users, and controversial enough that some early adopters deleted it over data worries.

    Source ↗
  9. 9
    Hark (2026)

    A privacy-focused personal assistant in a market where privacy is becoming the differentiator.

    Source ↗
  10. 10
    Meta AI (standard assistant, 2026)

    The assistant behind Muse's brand — broad distribution, but the same 'Unacceptable' teen-safety rating.

    Source ↗

What DeepSeek noticed

Claude Duet deliberately checks connected accounts every few hours, not continuously — the 'all day' agent polls less to save plan limits, which changes what 'autonomy' means in practice.

Meta Muse reached 10 million users and the top free App Store spot, but the home-address incident shows that an approval design is not the same as approval in practice.

METR's public frontier sits at about 12 hours at 50% reliability but only about 1.5 hours at 80% — an eight-to-one gap that no vendor's app layer removes.

TAU-bench pass^1 of about 61% collapses below 25% at pass^8, meaning a task that looks solved in a demo fails three times out of four across a workweek.

🇨🇳 Kimi10 places · 4 notes

The same question, answered by Kimi alone. The final list above combines all the AIs.

  1. 1
    Meta Muse (2026)

    The only frontier personal agent with a free tier — and it tops app-store charts while rivals charge $100/month.

  2. 2
    OpenAI Dots (2026)

    4,000+ app plugins and a Codex hand-off — but at $100/month and no access in the UK, Switzerland or EEA.

    Source ↗
  3. 3
    Claude Duet (2026)

    Three days old and already the most-waitlisted agent — 6,000 connectors, asks before it sends, pays or deletes.

    Source ↗
  4. 4
    Gemini Spark (2026)

    The first Big-Three always-on agent (May 2026) — but ambient inbox surveillance trades privacy for persistence.

    Source ↗
  5. 5
    Grok Bot (SpaceXAI/Cursor, 2026)

    Agents that log in as you and can be taught a workflow by screen recording — with no isolation between your bots.

  6. 6
    ChatGPT Atlas (2026)

    The broadest web action surface of any assistant — as long as the browser tab stays open.

    Source ↗
  7. 7
    Gemini Daily Brief (2026)

    A morning agent 900 million people could meet — it reads your inbox before you wake, and asks nothing.

    Source ↗
  8. 8
    OpenClaw (2026)

    The open-source agent that started the always-on craze — banks now warn it is a fraud target.

    Source ↗
  9. 9
    Apple Intelligence (2026)

    The least autonomous and most private — it acts only inside apps you have open, on your own device.

    Source ↗
  10. 10
    Microsoft 365 Copilot agents (2026)

    Enterprise coworkers with usage-based billing — powerful at work, but no consumer 'act while you sleep' mode.

    Source ↗

What Kimi noticed

Six weeks, three launches: Grok Bot (Aug 11), Muse's wide rollout, OpenAI Dots (Sep 29), then Claude Duet (Oct 21) — every frontier lab shipped an always-on agent within 10 weeks of each other.

None of the four leaders has an independent third-party audit; OpenAI has first-party system-card numbers, Meta and SpaceXAI have published none at all.

METR's strongest measured agents hit a ~16–20h 50% time horizon in early 2026 and the lab itself says anything above ~16h is unreliable — 'works all day' is still mostly vendor promise.

On τ³-Banking's ~700-document tasks even frontier models pass only ~25.5% — the exact 'read my accounts and act' skill these agents advertise is their weakest measured area.