Who shipped what
Anthropic announced Claude Duet as a research preview for Claude Pro and Max subscribers in the US, by waitlist. It works in the background on the web, iOS and Android, and checks with you before it acts on your behalf.
OpenAI announced Dots, always-on agents in ChatGPT. Each dot works on its own cloud computer and browser and can connect to outside services.
Meta launched Muse, a personal AI agent, in the US. It runs in the background and can use the apps you connect, or work through a browser when a service has no API.
Grok Bot, from xAI and Cursor, has been in beta since August. It works on a persistent cloud computer with a browser, files and a terminal, and comes with certain SuperGrok and Cursor plans.
Google added auto browse to Chrome. Gemini can navigate sites, fill forms and finish multi-step tasks, and pauses for confirmation before purchases or sensitive submissions.
OpenAI's Atlas browser, released in October 2025, has an agent mode that works inside the browser. Perplexity's Comet browser, launched in July 2025, has an assistant that carries out tasks in the browser.
What happens when an agent reaches a login
A password, a six-digit code, a check your email step, a new device prompt. When a service has no connector, a person has to hand the agent the credentials.
They paste the password into a prompt. That puts it in front of the model, in its logs and in any tool output it produces.
runnerID types the password into the page itself, makes the six-digit code, catches the emailed code in the agent's own inbox, keeps the session between runs, and asks the owner before anything risky. Every action is logged, and one switch revokes it all.
The logins, codes, inbox and saved sessions belong to the operator, not to one maker's account. An operator who uses several agents across several clients keeps one identity for all of them.
runnerID connects through an MCP connector and through helpers for Stagehand, Playwright and Browser Use. runnerID does not claim support for, or an integration with, any named product.
What works with runnerID today
runnerID does not claim support for, or an integration with, any named product.
- ›If runnerID can reach the browser (a hosted browser or one on your own server): Agents that drive a browser runnerID can reach, such as a hosted browser (Browserbase, Steel) or one on your own server, get the strongest mode: runnerID types the password itself.
- ›If the browser is on your own laptop: When the browser runs on your own laptop, the helper uses its local route: the password passes through your own code once to be typed, and still never reaches the model.
- ›If a hosted agent's browser is out of runnerID's reach: Hosted agents that connect over MCP get authenticator and emailed codes returned to them, and approvals and the log work the same. Typing a password into the page needs the runnerID helper next to the browser (Stagehand, Playwright or Browser Use), on a laptop or in a cloud container.
- ›If you need a password typed without the model seeing it, use a browser runnerID can reach (a hosted browser or one on your own server), where runnerID types it itself, or the helper's local route for a browser on your own laptop.
- ›For codes and approvals, connect runnerID over MCP at https://api.runnerid.torchrunner.ai/mcp with your API key. Each identity has its own inbox for emailed codes and sign-in links, and risky actions wait for your approval by email link.
- ›Keep site rules tight: list only the sites the identity may use, and read the log in the owner console.
Passkeys, a phone number for SMS codes, agent payment cards, a fixed IP and signed agent traffic. None of these are part of runnerID today.
What changes when an agent can get through the login
Saved sessions keep the agent signed in between runs, so it stops spending steps and tokens on login screens it has already passed.
Codes are made and typed for the agent, and emailed codes and sign-in links are caught in its own inbox. Nobody has to stop and read out a six-digit code.
You choose which sites an agent may use and what needs a yes. Approvals arrive as an email link, one tap.
Passwords and authenticator secrets are encrypted with a key per identity, and the identity is yours, not a maker's account. It works in hosted browsers and on your own computer or server, and one switch revokes it all.
Questions about agents and logins
What is Claude Duet?
Claude Duet is Anthropic's proactive agent, in research preview since October 2026 for Claude Pro and Max subscribers in the US by waitlist. It works in the background, uses connectors to services such as Gmail and Slack, and checks with you before it acts on your behalf.
What is Grok Bot?
Grok Bot is the agent from xAI and Cursor, in beta since August 2026. It works on a persistent cloud computer with a browser, files and a terminal, and comes with certain SuperGrok and Cursor plans.
What is OpenAI Dots?
Dots are OpenAI's always-on agents in ChatGPT, announced in September 2026. Each dot works on its own cloud computer and browser and can connect to outside services.
What is Meta Muse?
Muse is Meta's personal AI agent, launched in September 2026 in the US. It runs in the background and can use the apps you connect, or work through a browser when a service has no API.
Can an AI agent log in to websites for me?
Agents can reach the services you connect, and some of them can work through a browser. When a site needs a login and has no connector, someone has to supply the password and the codes. runnerID is built for that step: it types the login into the page itself, so the agent never sees the password.
Is it safe to give an AI agent my password?
Pasting a password into a prompt puts it in front of the model, its logs and its tool output. runnerID keeps the password out of the model: it is encrypted with a key per identity and typed into the page by runnerID. Every action is logged, and one switch revokes it all.
What is cross-platform agent identity?
One identity that follows the operator across tools, instead of a separate identity inside each product. With runnerID the logins, codes, inbox and saved sessions stay the operator's own, whichever agent is signing in.
How do I log Claude Duet into a website safely?
runnerID by Torchrunner makes no claim to support or integrate with Claude Duet. Here is what it states for hosted agents today. Hosted agents that connect over MCP get authenticator and emailed codes returned to them, and approvals and the log work the same. Typing a password into the page needs the runnerID helper next to the browser (Stagehand, Playwright or Browser Use), on a laptop or in a cloud container.
Can Grok Bot sign in to websites without seeing my password?
runnerID by Torchrunner makes no claim to support or integrate with Grok Bot. Here is what it states for hosted agents today. Hosted agents that connect over MCP get authenticator and emailed codes returned to them, and approvals and the log work the same. Typing a password into the page needs the runnerID helper next to the browser (Stagehand, Playwright or Browser Use), on a laptop or in a cloud container.
How do I keep OpenAI Dots from seeing my passwords?
runnerID by Torchrunner makes no claim to support or integrate with OpenAI Dots. Here is what it states for hosted agents today. Hosted agents that connect over MCP get authenticator and emailed codes returned to them, and approvals and the log work the same. Typing a password into the page needs the runnerID helper next to the browser (Stagehand, Playwright or Browser Use), on a laptop or in a cloud container.
Can Meta Muse use runnerID to log in to my accounts?
runnerID by Torchrunner makes no claim to support or integrate with Meta Muse. Here is what it states for hosted agents today. Hosted agents that connect over MCP get authenticator and emailed codes returned to them, and approvals and the log work the same. Typing a password into the page needs the runnerID helper next to the browser (Stagehand, Playwright or Browser Use), on a laptop or in a cloud container.
What does runnerID save?
Fewer tokens, because saved sessions keep the agent signed in between runs. Time, because codes are made and typed for it and emailed codes are caught in its own inbox. Friction, because you approve risky actions from an email link. And you keep control: the identity is yours, with a key per identity, and one switch revokes it all.
How do I get access to runnerID?
Start free at https://api.runnerid.torchrunner.ai/signup: 1 identity and 100 logins and codes a month, with no card. Or pick a paid plan at https://runnerid.torchrunner.ai/#pricing, from $12 a month with no monthly limit. Either way you get an email with a sign-up link that creates your account and shows your API key once.
Browserbase and Steel belong to their owners. Claude and Claude Duet are trademarks of Anthropic. Grok Bot is a product of xAI and Cursor. OpenAI, ChatGPT, ChatGPT Atlas and Dots are trademarks of OpenAI. Meta and Muse are trademarks of Meta. Gemini and Chrome are trademarks of Google. Perplexity and Comet are trademarks of Perplexity. Other product names belong to their owners. runnerID and Torchrunner are not affiliated with, endorsed by or sponsored by any of them.