Four chase emails drafted, in your own outbox

Which computer ends up holding your logins?

Yours.

The sessions are the ones already in your browser, on your hardware, scoped to one profile. Nothing is re-authenticated elsewhere and nothing persists in a datacenter, and Keep Awake holds the machine up so a routine still finishes with the lid closed.

With a cloud agent you sign into your accounts inside the vendor’s environment once, and the sessions persist there. xAI is upfront about the consequence: because the computer is shared across your Bots, a credential or file placed on it is reachable by any of them.

Approvals, side by side

Strawberry’s card sits in front of the consequential action and names it, and Ask Always mode in Settings → AI permissions turns every step into a stop. An action approved here happens in the session already on your machine, so there is no second copy of your logged-in state anywhere to think about. The full model is at /security.

xAI documents allow-once, deny and always-allow controls, tells you to set explicit boundaries in the request, and notes that an approval controls the proposed action and does not reverse work already completed.

What happens when a site asks for a code?

Usually nothing, because the device the site trusts is the device the work is happening on. Your MFA already happened this morning, the cookie is in the browser, and the tab opens. It shows up ten times a week. The mechanics are at how do AI agents log into websites.

xAI's docs describe taking over the shared computer to complete a password, passkey, two-factor prompt, CAPTCHA or payment step, then telling the Bot to continue, and advise against pasting one-time codes into chat.

What to hand over first

Start with the runs that end inside an account you already own:

• The 50 accounts in your book, checked against every company site this month, with the six worth a call named.
• Anything that ends in a change inside a tool you are signed into, with the approval card in front of it.
• Anything involving a credential you would not paste anywhere, kept on the machine that already holds the session.
• The recurring pass nobody remembers: save it as a routine and turn on Keep Awake so it finishes overnight.
• The sorted-by-role version of the same list is the agentic work index.

Frequently asked questions