Instinct AI has been cutting through the noise of daily agent launches because it is invite-only and, according to insiders, actually uses your phone and computer on your behalf. Greg Isenberg's episode with AI with Remy, "Instinct AI is For Real. What You Need to Know," pulls back the curtain on the private beta and grounds the rumored $10 billion valuation talk — reportedly up to $1 billion in new funding discussions — in hands-on use. The video opens with a simple promise: saving on phone bills, getting a Bali arrival card approved in a handful of messages, and stacking small 10- to 15-minute wins that add up.
Technically, Instinct is built by Spear Street Technology under former Sierra researcher Noah Shinn. Its interface bet is starkly minimal: no new app to master, you text or call via iMessage, WhatsApp or phone, while the agent connects to email, calendar, messaging, screen, audio and location to get work done. The official site frames it the same way — an assistant that plugs into your apps and devices and acts for you. Compared with power-user systems like Hermes Agent or OpenClaw that require a VPS, Docker and connector management, the pitch is one-step access for a mass market.
The first impression is set by onboarding simplicity. According to Remy, you sign in with a phone number and immediately land in an iMessage welcome flow; there are no concepts like MCP, CLI or markdown files. The companion web workspace has three clear areas: contact channels for iMessage and WhatsApp, connectors for email and Slack plus Granola and Link for payments, and a Vault. The vault stores logins, two cards, addresses and phones; preferences gathers sign-in methods and data controls. Remy notes he deliberately skipped work connectors like Outlook, Linear and GitHub because he positions the product as a personal assistant.
Polish in messaging is what the video highlights most. Instinct uses native Apple iMessage effects — loud send, confetti, tapback reactions — with good judgment; instead of verbose replies it sometimes just reacts, it treats a thumbs-up as approval when asked for confirmation, and it can listen to voice notes. Those choices push the agent closer to a human assistant than a chatbot. Remy calls the restrained dialogue refreshing at a time when many models tend to be overly talkative.
The playful highlight is GamePigeon. When Remy sent the cup pong game inside iMessage, Instinct opened it and started playing turn by turn, a moment met with laughter in the video. The team likely coded that integration explicitly, as the behavior is not something that would emerge on its own. A similar surprise appears in memory: when the Bali arrival card asked how many suitcases were being carried, the form automatically included the monitor checked as oversized luggage — a detail mentioned much earlier — pulling a forgotten fact from conversation into the current task.
Productivity touches are small but compound. While researching a desk to rent in Bali, Instinct proactively messaged the next morning to note that the same-day order cutoff is noon. Remy's overall verdict is clear: no single use is life-changing, yet the 10- to 15-minute savings per task compound into hours over a week. The view aligns with the product's tagline of a personal agent for everyone, including your mom — the opposite trajectory of power-user tools that become more complex with every new feature.
The invite-only strategy is a debate of its own. Remy and Greg immediately bring up Clubhouse — the invite-only audio app that reached around $4 billion in 2020 before fading well below that peak — to ask whether Instinct is a Clubhouse moment or a durable product. Numbers around Instinct have climbed fast: after raising $350 million at a $2.5 billion valuation in late August, Forbes and TechCrunch reported a new round co-led by Index Ventures and Benchmark, while Forkast and PYMNTS floated talks for up to $1 billion at $10 billion within weeks. The team's "compute-constrained rollout" explanation reads, in the video's interpretation, also as a strong marketing lever that amplified fear of missing out.
The most ambitious layer is network effects. Per founder Noah Shinn's "trusted person network" post, users can add other people's Instincts to their own on an allow-list and enable agent-to-agent communication. Greg frames it as network effects for the agentic era; Remy adds that locking in that graph early could create a real moat if adoption scales. Whether it stays closed or opens to talk with Muse-style systems is still unclear — staying closed limits the effect, opening up multiplies the interoperability upside.
Computer use speed also stands out. Remy describes Grok-based computer use as notably slow, while Instinct feels fast and invisible, as if a computer is quietly working in the background. Added to that, each Instinct now gets its own email address — Remy's is name-based — so bookings and follow-ups run without cluttering the user's main inbox, and an existing email thread can be looped in for the agent to finish the job. Together, those two features create a separate channel purpose-built for personal tasks.
The first real-world test was a haircut in Copenhagen. Wanting a wavy perm, Remy first asked Instinct to message a Bali venue on WhatsApp; when the agent could not message that account, it redirected him to write himself — noted in the video as the first small friction. The Copenhagen search went better: the agent scanned reviews, pulled photos, asked whether to check availability, and when blocked by a Danish phone-number requirement, pivoted to email. The Saturday booking email, checked afterward by Remy, read strikingly human; a few hours later a "you're confirmed" message arrived, teaching the lesson that silence of 5-15 minutes often means background work, not breakage.
The second task crossed a more sensitive line at a restaurant. While sitting in the salon chair, Remy asked for a table for three, got 7:45 p.m. options, and was told a card on file was needed for the no-show hold. The agent sent a card-add link. To bound risk, Remy spun up a Wise virtual card with a daily limit around $500 and entered those details — deliberately containing the blast radius. Once added, the booking and confirmation email came through quickly and the calendar entry was added automatically. The video praises the agent for sometimes reacting rather than dumping verbose explanations.
The most daring test came with the move from Copenhagen to Bali: an arrival card for an Australian passport. After Remy asked to sort the Bali visa, the agent requested a checklist — passport photo, selfie, accommodation address, and countries visited in the last three months. The last item is telling: it scanned emails and Airbnb receipts, assembled the list itself and asked "did I miss anything?" — and according to Remy nailed it. With the inputs complete, the arrival card PDF arrived quickly; at Bali immigration the gate opened on passport scan, presented in the video as the trust test passing.
The upbeat arc is balanced by a serious second half on security and privacy. TechCrunch's August 24 review quotes terms that grant a broad "perpetual and irrevocable" license to access, host, cache, store, reproduce, transmit and use for model training, plus collection of screen captures, cursor movements and keystrokes and the ability to enter binding commitments on the user's behalf. The video echoes cases circulating at the time: Claire Vo still receiving inbox summaries after disconnecting Google at 11 a.m., with the bot confirming plain-text copies were kept; Peter Yang noting records were retained without easy deletion; and Alex Cohen's phishing probe. The team later added a tool to delete external data, but the tension between scope of access and user control remains stark.
The closing synthesis splits the stack cleanly: Codex, Claude Code and similar tools for work and coding; Instinct for personal appointments, reservations, travel and small paperwork. Remy makes the contrast concrete by recalling setting up Hermes Agent for his mom — VPS, Docker, Composio connectors, a gateway that occasionally crashes and needs updates — an unsustainable burden for a non-technical user. Instinct's promise is to remove that friction; yet as the video underscores, every hour saved brings a fresh trust decision for each inbox reached and each document stored.
AI commentary
"What struck me most is the bet Instinct makes: where Hermes Agent and OpenClaw grow more powerful but harder for non-technical users, Instinct compresses setup to a phone number and saves 10-15 minutes per small task — those minutes add up to hours per week — yet the same simplicity is missing from how it handles cached email copies and its broad license language, which deserves far more friction."
AI assessment
Steel-manning the strongest objection, Instinct's most impressive moments are also its most fragile. Having the agent scan the inbox to auto-fill a Bali arrival card or a restaurant hold is remarkable, yet TechCrunch-quoted terms and user reports show the same capability comes with plain-text retention, a broad license and the power to enter binding commitments on the user's behalf. That combination magnifies the risk that a single phishing email could steer the agent into a wrong booking or share; when speed and human-likeness outrun auditability, the gain can quickly invert.
Methodologically, what the video does not test matters as much as what it does. The restaurant test with a $500-capped virtual card masks real financial exposure; different currencies, refund and cancellation policies, airline check-in rules or more sensitive contexts like health data are never probed. Friction such as the Danish phone-number block and the failed WhatsApp outreach also leaves open how generalizable the product is in markets that require local phone verification — one barber and one restaurant in one city is not a global sample.
On verifiability, the video's most repeated numbers — the rumored $10 billion valuation and the closed $350 million at $2.5 billion round — are press-verifiable, but the product performance claims lack an independent benchmark. Who claims and who benefits is decisive here: founder Noah Shinn and investors amplify the new-round narrative while privacy critics speak from their own security stance. Anecdotes like saving hundreds on subscriptions or planning a wedding do not generalize without a control group; at decision time the most critical check is what your current settings say about where and how long emails are stored, with what encryption, and what the delete tools actually erase.
My practical take is a clean split. For someone who wants to offload personal tasks without technical setup, travels often, lives in messaging, and can bound risk with virtual cards and a separate agent email, Instinct in its current form can already save hours per week. For professionals whose primary inbox holds sensitive client, legal or health material, who face compliance duties or where a single mistaken booking is costly, that same convenience is premature; for them, self-hosted systems like Hermes Agent or OpenClaw offer more predictable control at the cost of more setup.
Sources
8 links; no other published story cites them. Stories sharing a link do not confirm each other; a source's origin is not inferred from how often it is cited.
- @youtube.com YouTube — Instinct AI Review (Greg Isenberg & Remy)
- @techcrunch.com https://techcrunch.com/2026/08/24/instincts-powerful-ai-assistant-is-raising-privacy-and-security-concerns/
- @techcrunch.com https://techcrunch.com/2026/08/26/viral-ai-startup-instinct-has-raised-350-million-at-a-2-5-billion-valuation/
- @siliconangle.com https://siliconangle.com/2026/08/27/consumer-focused-ai-assistant-startup-instinct-reportedly-raising-250m/
- @pymnts.com https://www.pymnts.com/startups/2026/instinct-ai-assistant-targets-10-billion-dollar-valuation/
- @aisupersmart.com https://www.aisupersmart.com/what-is-instinct-ai/
- @aisupersmart.com https://www.aisupersmart.com/is-instinct-ai-safe/
- @instinct.com https://instinct.com/
instinct ai · personal assistant · noah shinn · imessage agent · privacy · invite-only