# Claude Duet

Anthropic opened a research preview of Claude Duet, a proactive agent app built around Claude Opus 5.5. It carries over memory, skills and connected apps from a Claude account, sends a morning brief across those apps, and keeps working on tasks in a background virtual machine. Before sending a message, making a payment, signing a document or deleting anything, it shows the action and waits for approval; the preview starts with US Pro and Max users via a waitlist.

Anthropic opened a research preview of Claude Duet, a proactive agent app built around Claude Opus 5.5. It carries over memory, skills and connected apps from a Claude account, sends a morning brief across those apps, and keeps working on tasks in a background virtual machine. Before sending a message, making a payment, signing a document or deleting anything, it shows the action and waits for approval; the preview starts with US Pro and Max users via a waitlist.

Anthropic has published the safety design behind Claude Duet, a personal agent still in research preview that uses a cloud computer to read inboxes, draft replies, book things and run routines after the app is closed. Before sending a potentially sensitive message, paying or deleting anything, it shows the action, destination and every recipient and waits for approval. Passwords, browser cookies and sign-in tokens never enter the model, and a safety classifier separate from the main model checks outgoing messages for sensitive information. Anthropic says these safeguards will still occasionally miss or over-flag, so they run alongside the approval mechanisms.

Anthropic has published the safety design behind Claude Duet, a personal agent still in research preview that uses a cloud computer to read inboxes, draft replies, book things and run routines after the app is closed. Before sending a potentially sensitive message, paying or deleting anything, it shows the action, destination and every recipient and waits for approval. Passwords, browser cookies and sign-in tokens never enter the model, and a safety classifier separate from the main model checks outgoing messages for sensitive information. Anthropic says these safeguards will still occasionally miss or over-flag, so they run alongside the approval mechanisms.