Ayal Karmi
The recent wave of personal AI assistants, including Instinct, Meta’s Muse, OpenAI’s Dot, and GrokBot, is giving businesses a new way to reach customers. People are asking these assistants to book trips, find restaurant tables, and make purchases, then giving them access to the accounts and payment details they need to follow through.
For businesses, preparing for this channel means working on enablement, which gives assistants a reliable way to use the service, and enforcement, which controls what they are allowed to do.
How personal assistants work
The new generation of personal assistants separates itself from “classical” AI applications like ChatGPT in three main ways: (i) focusing on completing tasks for users, from booking to purchasing, (ii) being highly proactive and looking for meaningful ways to help even when not prompted, and (iii) integrating deeply into users’ lives to help end-to-end.
To do this, these assistants often ask users to connect many services like email, calendar and even bank accounts! They also maintain dedicated vaults to store passwords and credit cards.
The ability to keep working between conversations has consequences for businesses. An assistant might monitor a schedule, remind someone about an unfinished task, or keep checking whether a reservation has opened up. A single request from the user can turn into repeated visits to the same service over hours or days.
For tasks that involve websites, assistants can operate a browser on a virtual computer in the cloud. The browser lets them interact with services much as a person would, and the user can open it and take over when needed.
Sharing a browser also makes it harder for a business to tell who is acting. An assistant may use the customer’s logged-in session, so its requests arrive under the same account and permissions as the human’s. The service may only notice the difference when the behavior becomes unusual.
That happened in a reported Resy incident involving a user who asked Instinct to find a table at 4 Charles Prime Rib. The agent checked availability every ten minutes and, around the time new reservations were released, sent requests every 0.4 seconds. Its activity log reportedly showed roughly 200 API requests an hour. Resy deactivated the user’s account and cancelled his future reservations.
Enablement
For enablement, businesses have two main options. They can build a direct integration with an assistant or make their existing website agent-ready. We expect many businesses to need both, because they offer different levels of control over access and the customer experience.
Meta’s Muse Connector Platform is one example of the direct approach. Businesses can submit a connector for review and, if approved, appear in Muse’s directory. A connector can expose a business’s API or an existing MCP server, giving the assistant a defined set of actions it can call. MCP is a way to describe and expose those actions as tools for an AI system.
Both approaches are important, but they have different trade-offs.
Direct first-party integration
Because this is likely to be the highest-priority path for assistants right now, it will probably be best for native discovery, for example being presented in an assistant’s app store or selected natively. It is deeply integrated with the assistant and relatively easy to secure with built-in permissions, rate limits and other policies. However, the business has less control over the user experience, and users are more intermediated throughout the journey, which may reduce some of the value of the direct customer relationship.
Website
Best for controlling the customer relationship, delivering branded experiences, maximizing upsells, and supporting situations where the user needs to take over. You own the experience, while the agent determines how it navigates and interacts with your site.
This becomes particularly useful when a journey needs a human step. An agent might find the right product and prepare the cart, then ask the user to approve the purchase, complete authentication, or make a subjective choice.
Because the agent and the user can share the browser, the website becomes a place where they can continue each other’s work. The agent handles the parts it can complete, and the user steps in with the relevant page and context already open.
Enforcement
The Resy example shows why enablement needs to be paired with enforcement.
With a direct API or MCP integration, this is relatively easy to manage. The business knows the request is coming from an agent, so it can apply dedicated permissions, rate limits and policies.
On the website, the same account and browser session may be used by the human one moment and the assistant the next. Treating the entire session as automated risks restricting the customer along with the agent.
Our view is that businesses should support a separate path for agents through WebMCP tools alongside the normal interface for people. Both paths can call the same backend APIs, but requests made through the tools can carry site-defined metadata that identifies them as declared agent activity.
The human lane can continue to have strong bot protection.
Requests coming through the agent lane can be marked as agent activity and tied to a separate agent session, allowing the business to apply different permissions, rate limits and risk policies without affecting the user’s normal session.
This creates a pretty simple trade: use the supported agent lane and get predictable access; try to automate the human lane and continue to face the site’s normal bot protection.
We wrote more about this approach in Solving Agent Identity with WebMCP.
What it means to be ready for agents
We think the website is worth investing in because it keeps the business involved throughout the experience. It gives agents a way to help while preserving a familiar place for customers to make decisions and finish the task. Preparing for personal assistants means making that journey work for both of them, with enough control for the business to support it reliably.
To explore how to prepare your business for agents, visit nekuda and find practical WebMCP tools, guides, and resources at WebMCP.com.
