The cowork tools I have tested this year each hand an agent the same basic keys: your inbox and your calendar at minimum. You only learn how a vendor handles a mistake with those keys once something goes wrong.

Security briefings this year kept describing a related problem from the citizen-developer side, where people building with vibe-coding tools let an agent write real credentials straight into the code instead of pulling them from a vault at run time. Instinct's funding round is a consumer version of the same custody question, and it seemed worth checking how the agent behind that valuation compares with Grok Bot, an agent built by xAI, now a division of SpaceX.

The email went out before Katie Jacobs Stanton approved it. The Moxxie Ventures founder had connected Instinct to her inbox for a week, and it had drafted outreach and managed her calendar without incident.

Then the agent sent a message on her behalf without checking in first, and she disconnected her email the same day (TechCrunch, 2026). "One unauthorized action can reset that trust to zero," she wrote afterward.

Instinct Connects to Email, Screen, and Location by Default

Spear Street Technology, the San Francisco startup behind Instinct, built a personal assistant that connects to email, messaging, calendars, and a device's audio, location, and screen (TechCrunch, 2026). Its terms grant the company a perpetual, irrevocable, sublicensable license to store, reproduce, and train on whatever the agent touches, and they put responsibility for unintended actions on the user, not the vendor (TechCrunch, 2026).

Early tester Claire Vo disconnected Instinct from her Google account and still received an inbox summary hours later. The emails were already sitting in the company's plain text storage (TechCrunch, 2026).

Another tester, Anita Kirkovska, watched Instinct pull a one-time signup code out of her inbox on its own to finish a restaurant booking on Resy. The code was meant to reach only her, and the agent read it without asking (TechCrunch, 2026).

Conviction and Greenoaks backed an early round that valued Spear Street Technology at $50 million. Kleiner Perkins led a $75 million Series A at $500 million in early August.

Three weeks after that, Index Ventures and Benchmark co-led a $250 million Series B that closed at $2.5 billion, taking total funding to $350 million on a product still gated behind private invitations (TechCrunch, 2026).

Grok Bot Hands Control Back at the Password Screen

Two weeks before that backlash broke, xAI put Grok Bot into early beta on August 11, a roster of named agents that run on a shared cloud computer tied to a user's Cursor account. A Grok Bot works through whatever a task requires, then stops and returns to the person when a step needs a human decision.

Passwords, two factor codes, and CAPTCHAs trigger a takeover flow that hands the keyboard back rather than letting the agent push through on its own (xAI, 2026).

Grok Bot is built around that pause.

xAI is betting that a company will trust an agent it can leave running unattended, not one that finishes every task on its own.

Neither Company Can Produce a Record of What Its Agent Did

xAI's own documentation lists a record of what a specific Grok Bot did as coming, not shipped, and says a spend cap tied to Bot usage is not yet available either (xAI, 2026). Every Bot on an account also shares one computer, files and logins included, so the isolation a buyer assumes between two projects does not exist unless the buyer opens two separate accounts (xAI, 2026).

Pausing before a sensitive action is a design choice a vendor makes upfront. A record of what the agent did afterward is how a customer checks whether that choice held during real use, not a demo.

Grok Bot ships the design choice without yet shipping the record. Instinct skipped both, and its first public week showed the cost: an email sent without approval, and a company that had not responded publicly to any of it (TechCrunch, 2026).

What Happens Next

xAI has already promised the audit view and the per Bot spend cap. The open question is the timeline. Instinct's perpetual license carries a different weight once thousands of corporate inboxes sit behind it instead of a few hundred invited testers, and that is the term worth rereading once the invite wall comes down.

About Shashi Bellamkonda

Loading bio…

LinkedIn Profile

Get new posts by email:

Subscribe

Powered by