Grok Bot gets its own email inbox and can clear 2FA on its own
xAI's agent gets a @mail.grokbot.com address and reads its own 2FA codes — no API yet, as Gemini retires two Flash models and Copilot sandboxing ships free.
Copy markdown
Your agent gets an email identity
xAI's Grok Bot can now claim its own @mail.grokbot.com inbox that signs up for services, contacts businesses, schedules meetings, and pulls emailed verification codes without touching your inbox. Ask Bot in-app or tag @bot on X to claim an address; it's live on iPhone, iPad, and Mac. For anyone building autonomous flows, an agent that clears its own signups and 2FA is the piece that's been missing.
The catch: no API, no guardrails published
There's no public API, MCP tool, or documentation yet — it runs only inside the Bot chat interface, so you can't wire it into your own agent stack today. xAI also hasn't published quotas, retention, attachment limits, or any send-approval behavior, so treat autonomous sending as unbounded until it does.
Gemini quietly retires two Flash models
gemini-3.7-flash and gemini-3.5-flash were deprecated Oct 8; calls now auto-route to gemini-3.8-flash and gemini-3.6-flash. Routing keeps you running, but pin the new strings before a silent model swap shifts your outputs mid-pipeline.
Gemini's Deep Research preview dies Oct 23
deep-research-pro-preview-12-2025 shuts down October 23. Switch the agent param in interactions.create to deep-research-preview-04-2026 (faster, UI-streaming) or deep-research-max-preview-04-2026 (most thorough) before your research calls start erroring.
Copilot sandboxing ships free
Local sandboxing is now GA across Copilot CLI, the Copilot app, and VS Code Agent Host, fencing an agent's file, network, and credential access at no extra cost. If you've been running coding agents unsandboxed, this is default-on containment you can flip on today.