Pluto
Join the waitlist

A personal agent that stays on the job.

Pluto answers on the web, Slack and iMessage. It has an inbox, a computer, a card and a memory, and anything that reaches the outside world — a push, an email, a payment — waits for your approval.

Join the waitlistRead the docs
A thread in the web chat. The fix ran in Pluto’s sandbox; the push waits on the approval card.

What it does

One assistant, your channels, your rules

  • Every channel you already use

    Web chat with threads and artifacts, Slack in channels or DMs, and iMessage on a shared line. A phone number of its own is coming soon.

  • Proactive, not just reactive

    One-off and cron reminders, webhook triggers, inbound mail and push notifications. Pluto starts conversations and reports back where you asked.

  • An inbox of its own

    A real address through AgentMail, on your own domain if you connect one. New mail wakes it; it triages, replies, labels and hands the address out when yours should stay private.

  • A computer it can drive

    A persistent cloud desktop plus your own Mac or Linux machines, paired in one click from Manage. Files, apps and logins survive between conversations.

  • Memory that gets tidied

    Long-term memory with remember, forget and search, consolidated nightly, with a profile summary injected on every turn.

  • Approval on anything that leaves

    Pushes, emails, payments and deployments park on an approval card. Approve the task, not every step: on automated turns one approval covers that capability for the rest of the turn. Enforced in code, not in the prompt.

  • A team you build yourself

    Create as many specialists as you like, from the sidebar, ⌘K or by asking Pluto. Each gets a name, a purpose, standing instructions and exactly the capabilities you grant.

  • Artifacts with a history

    PDFs, Markdown, HTML, spreadsheets and decks land in a private, searchable library: autosaved drafts, immutable revisions, anchored comments and revocable share links.

Reach it anywhere

Channels
Web
Slack
iMessage
Phonesoon
Plutomemory · tools · sandbox · approval gate
Actions
Email
Card
Computer
Code
  • Web

    Threads, streaming replies that survive reloads, attachments, a workspace for artifacts and the computer view.

  • Slack

    Mention it once and it keeps the thread. Everyone else in the workspace reaches it as a guest with sensitive actions deferred to you.

  • iMessage

    A shared line routed per phone. Read receipts, typing, tapbacks, photos and PDFs it can actually read, and family group chats on opt-in.

  • Phone

    Its own number: texts either way, scripted or live voice calls, and verification codes for accounts of its own. Coming soon.

  • Email

    Inbound mail opens a thread; a signature-verified webhook with a polling sweep as backup.

Nothing leaves without you.

Pluto is capable because the boundaries are strict. Everything below is enforced in code, so a clever prompt cannot talk it out of them.

Sandbox
Push the fix to boringcomputers/shop?Nothing leaves the sandbox until you confirm.
Open a pull request against main
Keep it in the sandbox for now
Confirm
Outside
boringcomputers/shopPR #212
Opened only after you confirmed. The same gate covers email, payments, deployments and, on automated turns, anything else that writes outside.
  1. 01

    Sandboxed by default

    Code, downloads and builds live in a per-conversation sandbox. Repairs stay isolated until you approve a push, pull request or deploy.

  2. 02

    Approval cards, not hopes

    Automated turns may read freely; every externally visible write parks for you. Specialists and rooms follow the same gate.

  3. 03

    Guests stay guests

    In Slack and family group chats Pluto helps with harmless things and defers money, email and private data to the owner.

  4. 04

    Keys stay encrypted

    Bank access is read-only, every token is encrypted at rest on your Pluto, and the card sizes itself to the purchase you asked for.

Build your own team, with Pluto running it.

Make as many specialists as you want, from the sidebar, ⌘K or by asking Pluto. Each one gets a name, a purpose, standing instructions, a model default and exactly the capabilities you grant. Put up to eight in a room, wake them with an @mention, and see everything; every outside write still parks for your approval. The three below are examples.

Website launchShip the new marketing site by 3 October
Add member

@scout what did the competitor teardown turn up? @editor please tighten the hero copy once the teardown is in.

Research ScoutSpecialist · 2:14 PM

Three things stand out across the six sites I read.

  1. 1.Everyone leads with a product screenshot; nobody leads with a sentence.
  2. 2.Pricing sits one click away on every site except one, which converts best.
  3. 3.The two fastest sites ship no hero video at all.
PlutoChief of staff · 2:15 PM

I have queued the copy pass; the draft lands here when Copy Editor finishes. Research Scout also wants to send the teardown to the agency, which needs your say.

Research Scout wants to email the teardown to Studio Wren.Parked until you approve · automated turns never send on their own.
Send it
Hold it, I will read it first
Not nowApply
Copy EditorSpecialist · 2:31 PM
A personal agent that stays on the job.Was: “The AI assistant that never sleeps and handles everything for you.” Cut the superlative, kept the promise, 7 words.
Open artifactRevision 2 of 2
Research Scout waiting on your approval · Copy Editor idle · Pluto watching
Message the room. @mention agents to wake them, @everyone for all
Fable 5.1

  • Pluto

    chief of staff · always there

    The one fixed member. Reads every channel, holds the memory, creates and delegates to specialists, and brings anything that leaves to you.

  • Research Scout

    example · @scout · Sonnet 5

    Granted web, files and memory. Reads freely; its writes park for your approval.

  • Copy Editor

    example · @editor · Haiku 4.5

    Granted artifacts only. Tightens drafts and flags claims it cannot verify; nothing leaves.

  • Your next specialist

    new agent · ⌘K or “Pluto, make me a…”

    Name it, say what it is for, write its standing instructions, pick a model and trim its capabilities. It holds every capability unless you do.

Yours, not shared.

Every Pluto is a separate deployment for one business. You get the whole thing: the assistant, its inbox, its computer and its memory.

Add what you need, when you need it: a card, a bank connection, a cloud desktop, your Slack workspace. Each is switched on per Pluto.