AI agents that connect to Gmail

Justin Quan

@justoutquan · 2026-09-10

The first-ever purchase made on Tomo came from a user in Hawaii who started using it because she'd always wanted to learn Japanese. Tomo spent $81 on a Japanese textbook for her. Next came $55 whey protein from a user working with Tomo to get in shape, then a $109 sunrise alarm clock from a user working with Tomo to sleep better. Consumers let their personal agent make purchases when they trust that it has their best interests in mind. Pushing people towards their personal ambitions is a great way to start building that trust among everyday people: purchasing items as aspirational as a textbook earns the right to purchase items as mundane as toilet paper. We’re partnering with Stripe so that tomosapiens can approve purchases directly through Link, further closing the gap between aspiration and action for real people.

0:34 video

TomoFounder36 likes · 1.9k viewsRead it

It is the only itemised account anybody has published of what an agent in this directory actually bought, with the amounts and the reason each person was saving toward. Every other payments claim here is a capability on a product page. It also states two things the listing did not hold: that Tomo makes purchases at all, and that approval will run through Stripe Link, which one other listing already names.

Matt Van Horn

@mvanhorn · 2026-09-09

Okay Instinct is wild. Just found and filed for $2,182 in lost dollars owed to me. It even found my ssn proof and signed the forms using a photo of my passport for signature. 🤯 Prompt: “Search every state's unclaimed property database for money owed to me. Use my full name and every city I've lived in. For anything you find: tell me what it is, who owes it, and how much - then file the claims end-to-end. Walk me through any documents or signatures you need from me, and don't stop until every claim is submitted.” Thanks to @peterpham for the tip.

It is the only recorded case of one of these agents completing a piece of official paperwork rather than a convenience task, and it is the exact job an investor said the same week this category was ignoring in favour of dinner reservations. It also shows the price of that: to do it, the agent needed his identity documents and a signature, which is a long way past reading a calendar.

Noah Shinn

@noahrshinn · 2026-09-09

Introducing our Trusted Person network powered by our new Instinct-to-Instinct communication protocol. Your Instinct can now talk to other Instincts to coordinate plans on your behalf. Getting people together often involves a lot of back-and-forth: finding a time, working out the details, and following up when plans change. Instincts can now work with each other to help handle that coordination. For example: - Coordinating plans with your spouse - Planning a weekend trip with friends, including dates and arrival times - Scheduling time with colleagues and other collaborators - Hosting events with 10s or 100s of people - Organizing recurring plans like tennis, book clubs, or weekly dinners Disclaimer: Your Instinct will only be able to communicate with those in your Trusted Person network. This is the group of people who are closest to you: - Spouse - Older children and parents - Colleagues and trusted professional relationships - Small local businesses The Trusted Person network is currently available to our early access group and will be slowly rolled out across the user base over the next 24-48 hours.

0:32 video

It is the first agent-to-agent protocol shipped by anybody in this directory, and it changes what the privacy question is about. Until today every listing here processed one person's messages; this one negotiates with software acting for somebody else, which means a plan is settled between two agents and neither person has read the thread. It is also the opposite of the rule on Telegram, where a bot never receives another bot's messages, deliberately, so that two of them cannot get stuck in a loop.

Lenny Bogdonoff

@rememberlenny · 2026-09-09

prompt injection via firstlast@mail.instinct.com to everyone on this list https://t.co/3lzPCM5FKY

It is the attack the week's other announcement invited. An agent with an email address is an account holder that reads its own post, and an inbox is a channel anybody can write to without permission. This is the first published security consequence of a feature recorded on this listing four days after it shipped, and the product's own pages do not say what the agent does with an instruction that arrives by email from a stranger.