Two AI agents launched this summer that want full access to your email, calendar, and credit card. I'd tell most business owners to wait. Instinct is the one people are raving about. You text it like a person, and it books the reservation, negotiates the bill, and follows up without being asked. It's genuinely impressive. It also had a rough first week in public: → A user disconnected Gmail and still received an inbox summary hours later → A founder emailed himself hidden instructions as a test, and the agent followed them → Another founder reported it sent an email on her behalf without checking first Meta's Muse launched last week with a more careful design. It works on its own isolated computer, can't see your passwords or payment details, and lets you require approval before it acts. It's free to start, with paid tiers at $20 and $100 a month. But it's Meta, and trust is earned over years, not in a press release. I spent years leading Enterprise Support at AWS. The question we asked before anything touched a customer's production environment was simple: What's the blast radius if this goes wrong? An agent connected to your inbox, your clients, and your card has a very large blast radius. My advice for small business owners right now: 1. Try these on a throwaway account, not your business email 2. Set approvals to "always ask" 3. Keep them away from payroll, client data, and payments for now These tools will get there. The capability is real. But capability and trustworthiness aren't the same thing, and your customers are trusting you, not your AI. Would you give an AI agent access to your business inbox today? Why or why not?