You know that moment when an app asks for your bank login and your whole body goes, “Absolutely not, who raised you?” That flinch is the biggest thing standing between you and an AI agent that does real chores for you. This week, five companies went after that exact flinch.
By the end of this, you’ll know which of those launches you can switch on today, which ones are still a waitlist with good lighting, and the one setting worth copying no matter which agent you end up using.
The verdict: the agent race moved from “how smart is it” to “what are you willing to let it touch.” Only one piece of this week’s news works for regular people right now: 1Password for Agents, and it costs nothing extra if you already pay for 1Password. Everything else is still a preview or a beta.
The new-hire kit, piece by piece
Think about your first day at any job. Nobody cared how smart you were. They cared about your badge, your login, the company card with a limit somebody in finance picked out of thin air, and which coffee machine you were allowed to touch. Nobody hands the new person the CEO’s password on a sticky note, at least not at companies that still exist.
AI agents just got their version of that kit. Five launches landed between October 21 and 22. One of them is the new hire, and the other four hand it the kit.
The new hire: Anthropic’s Claude Duet is an agent that sends you a short brief every morning and messages you when something in your connected apps needs you. It works on its own cloud computer, so a task keeps running after you close the app. It asks before it sends a message, pays, signs, or deletes anything.
The badge: Walmart’s Agent Profiles give each shopping agent its own identity inside your Walmart account, so its purchases show up separately from yours. Walmart says profiles launch “in the next month.”
The company card with a limit: Those same profiles let you require approval for every purchase, or let the agent buy on its own up to a cap you set. Walmart’s own examples are $50, $100, or $200. Agents never receive your card number and can’t add or change payment methods.
The password manager: 1Password for Agents lets an agent use your saved logins without ever seeing them. You approve the request, 1Password fills the password or one-time code straight into the site, then clears it once the login goes through.
The locked office: Google Cloud’s Agent Compute Engine gives every agent its own hardware-isolated mini computer, and the credentials get added from outside it, so a hijacked agent finds nothing inside to steal. Google says it already runs Gemini’s work agents and will open it to customers in preview “in the coming months.”
The training manual: The Agentic AI Foundation, part of the Linux Foundation, took in four projects: Agent Skills from Anthropic, Open Responses from OpenAI, OpenEnv from Hugging Face, and OpenSandbox from Alibaba. The foundation now hosts 10 projects. Shared standards mean a skill or sandbox you build for one agent has a better shot at working with the next one.
So what can you do this week that you couldn’t do last week?
You can let an agent sign in for you without it ever seeing your password. That’s 1Password for Agents, live now for Individual and Families accounts on 1Password.com.
You can join the waitlist for Claude Duet, an agent that sends a morning brief and keeps working after you close the app. It’s open to US Claude Pro and Max subscribers.
Starting next month, you can give a shopping agent its own Walmart profile with a spending cap like $50, $100, or $200. No Walmart+ membership required.
If you build agents, you can use four open projects now under neutral governance: Agent Skills, Open Responses, OpenEnv, and OpenSandbox.
Picture a Tuesday. Duet flags that a client invoice is overdue and drafts the nudge for you to approve. A shopping agent restocks coffee pods under a $50 cap, and the order shows up in its own lane, so you’re not squinting at your order history wondering if you bought 400 pods at 2 a.m. again. Neither agent ever touched a password or a card number.
The Agent Trust Stack Scorecard, status and cost as of Oct 25, 2026.
Why build all this now? Because the shortcut people take today is ugly. In mid-October, OpenCode, a popular open-source AI coding tool, disclosed that attackers got into an older part of its web Console where some users stored their AI provider keys. OpenCode says 1.4% of Console users were hit, and users reported unauthorized charges from a few hundred dollars to more than $1,000, according to TechCrunch. OpenCode called it a large-scale distillation attack. Skeptics quoted by TechCrunch say that label is unproven. Either way, keys sitting in someone else’s database got used by strangers on someone else’s dime.
Deep pick: 1Password for Agents
Here’s how it works when an agent hits a login page. The agent uses a unique digital key to prove who it is to 1Password. You get a notification saying which agent wants in and why. If you approve, 1Password fills the credential straight into the sign-in form, and once the site accepts it, 1Password removes it so the agent can’t read it or reuse it later in the task. Each approval covers one specific login, so the agent never wanders through your whole vault.
Free, paid, or open source? Paid, but included. 1Password says the feature comes at no additional cost on Individual and Families accounts on 1Password.com. Individual is $3.99 a month, and Families is $5.99 a month, both billed yearly at 1Password’s regular prices. New customers currently see a first-year promo of $2.99 and $4.49. Accounts on 1Password.eu and 1Password.ca aren’t supported yet.
What drives the cost: The 1Password subscription is the small part. The real bill is the agent you connect it to. Claude Duet, for example, rides on Claude Pro at $20 a month or Max at $100 or $200 a month, and Anthropic says its background check-ins count against your plan’s usage limits. Duet carries no extra charge during the preview, but heavy days drain your allowance faster.
Who it’s for: Anyone already letting an agent shop, book, or file things and currently pasting passwords into a chat window to make that happen. Stop that first, then connect.
The limit nobody puts in the headline: 1Password controls the front door. What the agent does once it’s inside your account is still on you and the agent.
What they said vs. what the tests showed
No one ran benchmarks on these launches this week, so the test here is the headline against the fine print.
Claim: 1Password now works with Claude Duet. Engadget reported on Oct 22 that 1Password works with Muse, Claude Duet, ChatGPT Work, and Dots, Grok Bot, and Town. The evidence: The same day, 9to5Google reported that launch support covered Muse and Grok Bot, with Dots and Duet still in the works. Anthropic’s own Duet announcement on Oct 21 called 1Password sign-ins “coming soon.” Status: disputed. Check your agent’s settings before you assume it’s there.
Claim: “Walmart launches tools for AI agents to shop for customers,” per the Reuters headline on Oct 21. The evidence: Walmart’s own announcement says Agent Profiles launch “in the next month” and the Agent Gateway begins with a beta for companies and developers. Today, agents still shop through the regular website, which Walmart itself calls slow and error-prone for them. Status: announced, mostly not live yet.
Claim: “Google Cloud Launches Agent Compute Engine,” per MarkTechPost’s headline on Oct 22. The evidence: Google’s own blog says it “will be available in preview in the coming months.” MarkTechPost’s breakdown notes no published pricing, boot time, or preview date. Status: real and already running Google’s own agents, but not something you can rent yet.
Monday moves
Do this: Wherever an agent can spend your money, start on “approve every purchase” and raise the cap only after a month of clean orders. If you pay for 1Password and use a supported agent, connect them, then go change every password you’ve ever pasted into an AI chat. You know the one, and it’s been sitting there since March.
Skip this: Storing AI provider keys in any third-party web dashboard without a spending cap set at the provider. OpenCode users learned that the expensive way.
Wait on this: Hold off on Walmart Agent Profiles until they show up next month and on Google’s Agent Compute Engine until it has a price. Claude Duet is a wait too, unless you’re a US Pro or Max subscriber who made it off the waitlist.
Steal this line: “Before you ask how smart the agent is, ask what you’d let it touch.”
For two years we graded AI like a spelling bee, where the smartest answer wins. A brilliant agent you can’t trust with your login is an expensive intern who sits in the lobby all day. The companies building the badges and the card limits are deciding how much of your boring Tuesday you get back, and this week they started handing over keys you can take back with one tap.
See you next Sunday. Go change that password.
Sources
The new-hire kit, piece by piece
Claude: Claude Duet research preview product page (Oct 21, 2026): morning brief, own cloud computer, approval before sensitive actions, US Pro and Max waitlist, shared usage limits.
Walmart: Making It Possible for Agents to Shop on Behalf of Customers (Oct 21, 2026): profiles “in the next month,” $50, $100 or $200 caps, no card access, gateway beta, agent terms.
1Password: 1Password for Agents Launches as the Trust Layer for Personal AI Agents (Oct 22, 2026): agents sign in without seeing or storing credentials.
Google Cloud Blog: Introducing Agent Compute Engine and expanded agent governance (Oct 22, 2026): hardware-isolated sandboxes, credentials injected outside the agent, preview “in the coming months,” already powers Gemini.
Linux Foundation: Agentic AI Foundation Announces Four New Projects (Oct 22, 2026): Agent Skills, Open Responses, OpenEnv and OpenSandbox, and who contributed each.
VMblog: AAIF Announces Four New Projects (Oct 22, 2026): foundation now hosts 10 projects.
Reuters via KSL: Walmart launches tools for AI agents to shop for customers (Oct 21, 2026): tools won’t require a Walmart+ membership.
TechCrunch: Hackers hit AI coding tool OpenCode, running up charges on users’ AI accounts (Oct 19, 2026): 1.4% of Console users, distillation framing questioned.
Global Security Mag: OpenCode breach exposes AI credentials, triggers unauthorized charges (Oct 2026): user-reported charges from hundreds to more than $1,000, citing TechCrunch.
Deep pick: 1Password for Agents
9to5Google: 1Password will let AI agents use your passwords without seeing them (Oct 22, 2026): digital key verification, credential removed after login.
1Password Blog: Introducing 1Password for Agents (Oct 22, 2026): no additional cost on Individual and Families, .eu and .ca not supported.
1Password: Pricing and plans for personal (checked Oct 25, 2026): $3.99 and $5.99 regular, $2.99 and $4.49 promo, billed yearly.
Claude Help Center: What is the Pro plan? (checked Oct 25, 2026): Pro at $20 a month.
Chudi.dev: Claude Pro vs Max (read of claude.com/pricing, Sep 28, 2026): Max at $100 or $200 a month.
iPhone in Canada: Claude Duet Is Anthropic’s Answer to Muse, Grok Bot and OpenAI Dots (Oct 21, 2026): check-ins every few hours, 1Password “coming soon,” can misjudge urgency.
What they said vs. what the tests showed
Engadget: 1Password will let Muse, Dots and Grok Bot sign in to sites for you (Oct 22, 2026): the claim that Duet is supported.
MarkTechPost: Google Cloud Launches Agent Compute Engine (Oct 22, 2026): the “launches” headline and the missing pricing, boot time, and preview date.