Instinct is building a Mac app for iMessages and local browser tasks

Why it matters

Instinct is moving from a text-based cloud assistant toward an agent with direct access to Mac sessions, private conversations and health data. That reach could make it far more capable, while turning every mistaken action or malicious instruction into a higher-stakes failure.

Noah Shinn (@noahrshinn)'s Instinct is developing a desktop app that can read recent iMessage conversations, send messages through a user's Mac and run a local browser for the AI agent's tasks.

Security researcher and reverse engineer Jane Manchun Wong (@wongmjane) disclosed the unreleased features on August 29th. Her screenshot shows all three connections labeled as beta, with the iMessage and local-browser tools listed under a "Desktop" section.

The same workspace includes a beta integration with WHOOP. The interface says Instinct can read recovery, sleep, cycle, workout and body-measurement data from the wearable company's service. The screenshot does not establish when any of the integrations will become broadly available. Instinct remains limited to an invitation-only group while it adds computing capacity.

Shinn publicly introduced himself as Instinct's founder on August 26th, saying in a post on X that the team had been developing the personal agent for several months. Before Instinct, he was among the first employees at Sierra, where he worked as a researcher. His earlier work includes Reflexion, a method for language agents to learn from written feedback about previous attempts, and tau-bench, a benchmark for agents that must use tools while following business policies and interacting with users.

That research background maps directly onto Instinct's product: an agent designed to complete tasks across accounts instead of stopping at a written answer. The new desktop controls would give it another execution surface, including sessions running on hardware the user already owns.

From connected accounts to the Mac

Instinct currently presents itself as a personal assistant that connects to email, messaging, screen, audio and location data. Users communicate with it through calls or texts, while the agent handles jobs such as scheduling transportation or arranging home services.

A local-browser connection would let Instinct run browser tasks on one of a user's Macs, according to the interface Wong found. That could give the agent access to sessions and services already open on the computer, reducing the need for a separate cloud browser or a purpose-built integration for every website.

The iMessage feature goes further than Instinct's existing pitch as an assistant that users can contact by text. The beta panel describes direct access to recent chats and the ability to send iMessages through the Mac. Instinct could therefore operate inside conversations with other people, rather than limiting messaging to the user's direct thread with the agent.

WHOOP adds a different kind of context. The wearable maker expanded access to member data and third-party integrations in June 2026. Instinct's planned connection would feed physiological and activity information into the same agent that can already manage schedules, communications and purchases. That creates possible uses around workout planning, sleep-aware scheduling and recovery reminders, although Instinct has not described specific WHOOP-powered features.

Broader access raises the cost of mistakes

The desktop expansion lands days after scrutiny of the permissions Instinct requests and the actions it can take. The company's privacy policy, revised on August 26th, already refers to related Mac OS and mobile applications. It says Instinct may process private messages, emails, health-related information, precise location, clicks, cursor positions and keystrokes, depending on the permissions a user grants.

Instinct's terms of service authorize the agent to access, copy and index information from connected services and to act through them. The terms also appoint Instinct as the user's agent for agreements, commitments and transactions, which can become binding on the user.

Those provisions have practical consequences when browser sessions and personal messages are involved. TechCrunch reported that early testers had documented unintended communications, retained email data and susceptibility to instructions planted in messages. Instinct's current privacy policy warns that autonomous features can make unintended payments or communications and can encounter misleading instructions from third parties.

The expanded access is arriving with ample financing behind it. Instinct said this week that it had raised a $250 million Series B co-led by Index Ventures and Benchmark, bringing total funding to $350 million at a $2.5 billion valuation, according to TechCrunch. Kleiner Perkins, Conviction and Greenoaks backed earlier rounds.

The desktop app shows where some of that capital is going: deeper integrations that make the agent more useful by giving it more of the user's context and more places to act. Each connection also expands the amount of sensitive information Instinct must secure and the number of actions it must get right.