I Gave an AI Agent Access to My Email—and I'm Still Here to Tell About It

For someone who'd spent years covering artificial intelligence, the reality of current AI agents felt underwhelming. When a reporter experimented with Claude Cowork after leaving WIRED, the experience resembled a basic chatbot rather than a transformative tool. But then came Instinct—an invite-only messaging app that connects to email and calendar and promises to act as a genuinely useful assistant, not just a conversational interface.

Instinct launched in private beta this February and has quickly garnered significant investment interest. The company is reportedly raising $1 billion on top of existing funding, valuing it at roughly $10 billion. The timing aligns with Meta's Muse, which has rocketed to the top of Apple's App Store free charts with over 900,000 downloads—despite launching with a serious security flaw that could have let attackers compromise Macs.

Why Most AI Agents Still Disappoint#

The gap between early adopters and skeptics has widened considerably. Tech executives largely missed signs of backlash against data centers partly because they believe agents can eliminate administrative busy work and amplify worker productivity—a bet that looks reasonable only if these tools actually deliver. The technical hurdle remains unresolved: most people's daily friction isn't "software-shaped," and agents still demand plenty of human guidance about what to actually do.

The Instinct Difference#

What sets Instinct apart isn't revolutionary technology—it's the design. Rather than asking users to type into a text box and figure out what an AI can do, Instinct uses the familiar format of iMessage and WhatsApp, then suggests actions directly: book a restaurant, manage your calendar, handle a flight cancellation. No verbose explanations, no interrupting with unnecessary messages. That stripped-down form factor matters enormously.

The journalist tested this on practical tasks. Booking restaurants in Venice during a work trip proved straightforward. The genuine test came when an airline moved a flight 90 minutes earlier—a change the user hadn't noticed. Instinct flagged the schedule shift, identified a refund opportunity, canceled the ticket, and rebooked return travel, recovering roughly $550. It worked exactly as advertised.

The Serious Risks#

The upsides don't erase legitimate concerns. Users have reported that disconnecting Instinct doesn't actually purge their email data from the system. One venture capitalist was banned from Resy after Instinct's API calls spiked to roughly 200 per hour while attempting reservations. Another investor noted how trivially easy it would be to phish the service. The permit the company to use conversations for model training.