Anthropic detailed approval checks, data boundaries and credential isolation for Claude Duet, its cloud-based AI agent in research preview.

Anthropic said Claude Duet, its cloud-based AI agent in research preview, is designed to act on a user’s behalf while keeping approvals, sensitive data checks and credential boundaries outside the model. In a post published Oct. 23, 2026, the company said the agent can read inboxes, draft replies, book items and run routines while a user is away, but is built to stop and ask permission for important actions and to keep passwords, cookies and sign-in tokens out of the model’s reach.

The company said Claude Duet is based on three operating principles: user control, discretion over information shared through connected apps, and separation of credentials from the agent. According to Anthropic, the system uses a separate classifier to review messages before they are sent and an automated check, built on its auto mode classifier from Claude Code and extended for Duet, to judge whether a task matches the user’s intent. The company said that before actions such as sending sensitive messages, paying for something or deleting items, Claude Duet shows the destination, content and recipients, then waits for approval.

Anthropic said some actions remain prohibited even with approval, including securities trading, banking actions such as moving money between accounts and accessing someone else’s account. The post also said certain repeated actions, such as paying or sending money, deleting an order or creating an account, are not covered by a “don’t ask me again” rule.

Source link