How messaging agents actually work

What we have worked out about this market that is not on anybody’s product page: how these agents reach you, what the platforms allow, what it costs, and what happens when one of them acts on your behalf. Every figure comes from the listings rather than from anyone’s marketing.

Privacy and security

What these products hold, what leaks, and what happens when somebody attacks one. What people say about it.

Instinct AI: data leak or hallucination?An Instinct described a stranger's claim as its user's, then said a photo had crossed into his thread. The company says the model invented both.2026-09-24
Agents that phone people: does the person hear a machine?17 agents you can text place or take calls. 2 say the person is told it is software; 4 say whether the call is recorded.2026-09-16 · updated 2026-09-17
What AI agents you can text publish about their own securityOf 90 agents you can text, 16 publish a security document, 8 name prompt injection, 3 state a bounty. Read on one day, every page.2026-09-11 · updated 2026-09-23
Instinct AI: what it publishes, and what it does notInstinct raised more than every other funded agent here combined, and publishes 8 of the 13 things this directory records. The funded median is 10.2026-09-10 · updated 2026-09-17
Who gets your password? What AI agents ask you to hand overOf 90 agents you can text, 38 say what they hold for your accounts. Four take your password. Four keep it from the model.2026-09-10 · updated 2026-10-03
Do AI assistants train on your messages? Most will not say29 of the 90 AI assistants you can text give no answer on training. 18 of those published a privacy policy and left the question out of it.2026-09-09
Who actually handles the messages you send an AI agentFour companies touch a message before an AI agent answers it. Of 79 that publish a policy, 3 name all four and 13 name none.2026-09-06 · updated 2026-09-16

Money and commerce

Payment rails, what an agent may spend, and who takes a cut when it buys. What people say about it.

Who wins, and why

Moats, brand, funding and the argument that distribution decides this rather than capability. What people say about it.

More than one person

Group threads, coordination, and agents negotiating with each other on people's behalf.

When your agent talks to someone else's agentInstinct shipped agent-to-agent coordination on 9 September 2026. Telegram bans exactly that, deliberately. Neither company says what one agent tells another.2026-09-09 · updated 2026-09-24

What they can actually do

Speed, reliability, and the gap between a demo and a thing that works twice. What people say about it.

Platform rules

What Apple, Meta and the carriers permit, and what a rule change would cost.