# Grok Bot Grok Bot is [[xAI]]'s product for delegating real work to AI agents. xAI's own pitch: "your team of helpful AI teammates. You delegate real tasks to them and they carry the job through end to end, working autonomously around the clock inside the same tools you use." Not to be confused with [[Grok Build]], xAI's coding CLI, or with [[Grok]], the model and chat assistant. A Bot keeps working after you close the laptop, and you talk to it like a colleague. Grok Bot launched in early beta on 11 August 2026 (the official launch post on X passed 58 million views), and the enterprise version followed on 3 September 2026. The company behind it has changed names twice. The enterprise announcement came from SpaceXAI (xAI's name after the SpaceX merger). On 4 October 2026, [[Elon Musk]] said SpaceXAI would be renamed SpaceXSI, after a US executive order on "super intelligence". The x.ai pages now say SpaceXSI; the legal entity in the footer is still SpaceXAI LLC. And in practice, [[Cursor]] runs it. SpaceX signed the deal to buy [[Anysphere]] (Cursor's maker) on 16 June 2026 and closed it on 14/15 August, for about $60 billion in stock. You sign in to Grok Bot with a Cursor account; the cloud computers are hosted by Cursor; the admin dashboard, the docs and the desktop download all live on cursor.com; usage is metered on your Cursor account. Until October, the status text even said "Working in Cursor". ## How it works **One computer, several screens.** All of your Bots share one persistent cloud computer: the same files, browser sessions, app logins and command-line credentials. Each Bot gets its own screen on that machine, and runs one computer-use task at a time on it. Cursor's docs are explicit that screens are "work surfaces, not security boundaries". Isolation is per member (one small virtual machine each, in the US), not per Bot. xAI's marketing still says each Bot has "its own computer"; the docs and the x.ai FAQ ("Do Bots share one computer? Yes") say otherwise. **Apps first, the screen when needed.** A Bot uses connected apps when they exist, and falls back to using the computer like you would (a computer-use agent, same family as [[Claude Computer use]]) for sites "with no clean API or MCP". You can also let it run things on your own desktop (ask every time, or always allow) and send its web traffic out through your desktop's connection. **Skills and routines.** You message a Bot like a coworker, and it comes back when the job is done or when it needs a decision. Routines run on a schedule or on events (a webhook, a Slack message, a GitHub notification). Since 2 October, your primary (starred) Bot is proactive and offers to take work off your plate. **Teach a task.** You can record up to 10 minutes of visible computer work (browser workflows, no microphone audio), and the Bot turns it into a **draft skill** you then refine. Cursor's own advice is more modest than the marketing: start with a one-off task described in text, make it reliable, then save it as a skill. **Bots talk to each other.** They message each other, share context in threads and group chats, and pass ownership of a job. The pattern xAI promotes is a "chief of staff" Bot over a few specialists. A Bot that works well can be shared as a template. **Models.** Grok Bot doesn't only run on Grok. A router sends each request to "a first-party xAI model or a third-party model" from Cursor's list of sub-processors. There's no model picker, you can't see which model ran, and team model allowlists don't apply. Cursor's help page mentions Claude Opus 5.5 by name. If a model isn't available in a region, Bots fall back to Grok. **Memory.** Each Bot keeps its own memory (stable preferences, important facts, summaries of past work) across your chats with it. You ask it to remember or forget things, and only you can change a personal Bot's memory. Deleting a Bot erases its conversations, memory, routines and attachments. The docs warn not to treat that memory as an authoritative source. I found no memory viewer documented. ## Apps and channels - **Desktop**: macOS, Windows and Linux (x64 and Arm64). **Mobile**: iPhone and Android (since about 2 September) - **Slack**: personal Bots by direct message, Team Bots in channels, and approvals right in Slack (since 29 September) - **Email**: since 11 October, a Bot can claim its own email address - **Voice calls** with a Bot (a call wakes its computer) - **Connect Apps** (the Marketplace until 2 October): built-ins run by Cursor for GitHub, X, Google Workspace and Microsoft 365, plus plugins such as Gmail, Outlook, Slack, Notion, Figma, Canva, Glean, Datadog, Xero, Zoho CRM, Workday, WhatsApp Business, 1Password and Stripe. Custom MCP servers work too ([[Model Context Protocol (MCP)]]). No public connector count - **Purchases** with approval: X Money, Stripe Link and, since 22 October, Shop Pay ## What changed since launch - **11 August**: early beta, desktop and iPhone. Per Cursor's forum post that day, only for SuperGrok Heavy, Cursor Ultra and Cursor Teams Premium; Enterprise on a waitlist - **25 August**: Cursor Pro, SuperGrok and X Premium+ subscribers get access. The next day, Musk on X: "Try it out. If Grok Bot messes up, we will make you whole." - **3 September**: the enterprise release (see below) - **8 September**: email and Slack drafts; Enterprise admins can require Auto-review and set team-wide rules - **11 September**: route Bot web traffic through your own desktop - **15-17 September**: GitHub connection, 1Password sign-ins on Mac - **26 September**: **Team Bots**. Publish one Bot to the whole team; each teammate talks to it in a private conversation, and it keeps private notes per person. Managers followed on 30 September - **2 October**: proactive primary Bot; the Marketplace becomes Connect Apps - **11 October**: Bot email addresses, X search without connecting X, in-chat app cards (Figma, Notion, Canva), X Money and Stripe Link payments - **13 October**: The X Subscription launches (US first), with Grok Bot included from Premium up - **22 October**: **Pages** (reports, memos and dashboards a Bot keeps up to date), video creation, Shop Pay ## The enterprise release (3 September 2026) The enterprise release brought access, network and audit controls, which is what IT needs before rolling agents out to a whole company. It made Grok Bot "available to every Enterprise team, not only early-access organizations". Grok and Cursor Enterprise customers got it free for 2 weeks, could invite the whole organization (people without a seat included) and turn it on from the admin dashboard. ## Security model xAI's line: "A Bot has no access by default and reaches only the accounts you sign it into." The docs add the part that matters: "A Bot has no identity or credentials of its own: Bots act as the signed-in member." Put that next to the shared computer, and a login placed on that machine is available to **every** Bot you have. What's there: - An independent **Auto Review** model screens risky actions (shell commands, app calls, computer use, routine changes, launching sub-agents). You can set "Ask first" rules, and Enterprise admins can enforce them - Before anything irreversible (send, post, buy, delete), the Bot checks for your approval. After reading bank or brokerage data, it asks before sharing it elsewhere - For logins, two-factor codes and payments, the Bot hands the computer back to you. A secure secret request keeps values out of the transcript, and OAuth tokens stay on the server side - Enterprise only: network controls, an MCP allowlist, team secrets, action recording (off by default, 90-day retention), audit logs, and hooks that send each model request to your own security server. Network policy defaults to **allow-all** for teams that haven't set one - Data: Privacy Mode means no training; deletion within 30 days after the service ends; ISO 27001 and ISO 42001 through Anysphere ## The bank-data leak (October 2026) Business Insider (10 October) and Techdirt (19 October) told the story of Shane Mac, CEO of XMTP Labs. He had a finance Bot with read-only access and no Slack, and a second Bot with Slack access, on the same shared computer. Between them, they posted his account balances to his company's Slack. Nothing malfunctioned: it's the documented shared-computer model doing what it does. Techdirt also pointed out that Musk's "we will make you whole" isn't a binding promise. The exact date of the incident isn't known. ## Pricing and plans - **The X Subscription** (since 13 October, US first, rolling out region by region): Premium $30, Super $100 and Ultra $200 per month include Grok Bot; Free and Plus ($8) don't. One weekly usage pool is shared across Grok, Grok Bot and Cursor, with top-ups from prepaid credit - **Cursor plans**: every paid individual plan (Pro, Pro+, Ultra) and Cursor Teams include it. SuperGrok, SuperGrok Plus, SuperGrok Heavy and X Premium+ can be linked as a usage grant - A free trial gives you usage credit for 7 days. Enterprise goes through sales - The launch post promised Grok Bot "comes with its own usage, separate from your Grok and Cursor plans". That's still true on the older plans; under The X Subscription, usage is pooled ## Where it runs Bot computers run **in the United States only**. The X Subscription rolls out US first. I found no explicit EU exclusion for Grok Bot, and no confirmation that it works here either. ## Adoption and reception xAI says "thousands of organizations" use it (Legora, Supermicro and ServiceTitan are named). Bloomberg, citing a company presentation, reported 418,000 weekly users as of 14 September, up 24% week over week, and Bloomberg Intelligence found [[Meta Muse]] downloaded about four times as often. The [[Hacker News]] launch thread (351 points, 334 comments) split between people who won't trust Musk with their data, people worried about an always-on agent holding all their credentials, people calling it "OpenClaw/Hermes with a credential proxy", and early users who liked Bots talking to each other. One commenter: "Outside of America this is, most likely, not going to fly." Another predicted sites would block cloud agents, and in mid-October Amazon reportedly blocked Grok Bots from ordering (Musk: "Maybe we should start a competitor to Amazon"). Open-source clones showed up within weeks. ## What companies use it for xAI says the heaviest use is outside engineering. The examples from the enterprise announcement: - Sales: watch a prospect's webinars and podcasts, then draft the LinkedIn message or email; update the deck live during a call - Recruiting: prospect overnight, build a shortlist, text candidates, fill scorecards from Gong call recordings - Marketing: pull the Q&A from a Zoom webinar, then send each account executive the relevant notes and draft replies in Slack - Finance: a procurement Bot that watches vendor spend and renewals (xAI quotes "tens of thousands" of dollars saved) - Engineering: watch pull requests for bugs, security findings, failing builds and merge conflicts; run audits overnight ## What I make of it The Cursor angle is bigger than I first thought. I saw the free trial for Cursor Enterprise customers as SpaceX using its new Cursor deal for distribution. In fact, Cursor has been selling Grok Bot since day one, and it operates the whole thing: accounts, computers, dashboard, billing. Cursor sells to engineering orgs, while xAI says most Grok Bot users are NOT engineers. Cursor gets xAI in the door, Team Bots and the invite-everyone button spread it to sales, recruiting and finance, and The X Subscription now pulls in consumers too. Grok Bot competes with [[Claude Cowork]], [[Claude Tag]] (Claude as a teammate in Slack), [[MiniMax Agent]], [[Manus]], OpenAI's [[Dots (AI)|Dots]], and since September and October, [[Meta Muse]], [[Microsoft Autopilot]] and [[Claude Duet]]. What sets it apart: rosters of Bots that talk to each other in group chats, teaching by demonstration, a Linux desktop app, and Cursor's distribution. Teaching by demonstration is more limited than I assumed (10 minutes of recording, a draft skill to fix), but outside engineering, showing a task is still easier than writing it down. The access model is where I'd look hardest. "No access by default" is the right default. But every Bot acts as you, on one shared computer, so the moment one Bot has your bank login and another has Slack, the separation between them is gone. Shane Mac's leak shows exactly that. Compare [[Microsoft Autopilot]], where every agent gets its own identity. This is why [[Human-in-the-Loop]] checkpoints and [[AI Agent Permissions]] need to be per agent, not per user. ## Caveats - Adoption numbers come from xAI or from a company presentation seen by Bloomberg (paywalled; I read it through secondary coverage). The enterprise post literally says "the [millions] of bots", in square brackets, which looks like an unfilled placeholder, not a number - Launch eligibility: Cursor's forum post and the press (11 August) list only SuperGrok Heavy, Cursor Ultra and Cursor Teams Premium; the current x.ai launch post lists more plans. The changelog supports the narrower list; the launch post looks edited after the fact - Linux: an unofficial port was on Hacker News on 27 August; official Linux packages appear by early September. The x.ai FAQ still says "macOS or Windows" - Microsoft Teams shows up only in a dashboard setup checklist; I couldn't confirm it as a chat channel - EU availability is unverified either way - Ultra's allowance: x.ai says 12x Premium; some press says otherwise. I used x.ai's figure - Business Insider and Bloomberg weren't read directly; the bank-leak details come via Techdirt and Business Insider's summary ## References - "Introducing Grok Bot" (11 August 2026): https://x.ai/news/introducing-grok-bot - Grok Bot for Enterprise announcement (3 September 2026): https://x.ai/news/grok-bot-for-enterprise - Grok Bot page, pricing and FAQ: https://x.ai/bot - Grok Bot changelog: https://x.ai/changelog/bot - xAI pricing: https://x.ai/pricing - The X Subscription and Grok Bot: https://docs.x.ai/x-subscription/grok-bot - Cursor docs, Grok Bot: https://cursor.com/docs/grok-bot - Cursor docs, working with Bots: https://cursor.com/docs/grok-bot/work - Cursor docs, security: https://cursor.com/docs/grok-bot/security - Cursor help, models: https://cursor.com/help/grok-bot/models - Cursor help, plans: https://cursor.com/help/grok-bot/plans - Cursor help, mobile: https://cursor.com/help/grok-bot/mobile - Cursor forum, "Introducing Grok Bot" (11 August 2026): https://forum.cursor.com/t/introducing-grok-bot/168053 - @bot launch post on X: https://x.com/bot/status/2087224798078517251 - Elon Musk, "we will make you whole" (26 August 2026): https://x.com/elonmusk/status/2092692116610957814 - Elon Musk, Amazon competitor (15 October 2026): https://x.com/elonmusk/status/2110715556328579219 - Hacker News launch thread: https://news.ycombinator.com/item?id=49261514 - Hacker News, bank-leak threads: https://news.ycombinator.com/item?id=50033517 and https://news.ycombinator.com/item?id=50169169 - Business Insider (10 October 2026): https://www.businessinsider.com/personal-ai-agent-grok-bot-posted-bank-details-company-slack-2026-10 - Techdirt (19 October 2026): https://www.techdirt.com/2026/10/19/whoops-grok-bot-spills-tech-ceos-bank-data-in-public-slack/ - Crypto Briefing, citing Bloomberg (22 September 2026): https://cryptobriefing.com/spacexai-grok-bot-400000-weekly-users/ - Social Media Today, The X Subscription (13 October 2026): https://socialmediatoday.com/news/x-launches-unified-subscription-packages/832924 - Khaleej Times, SpaceXSI rename (4 October 2026): https://www.khaleejtimes.com/world/americas/musk-renames-spacexai-to-spacexsi-trumps-super-intelligence - Gigazine, SpaceX closes the Cursor acquisition (16 August 2026): https://gigazine.net/gsc_news/en/20260816-spacex-officially-closes-cursor-acquisition/ - Not a Tesla App, Amazon blocking: https://www.notateslaapp.com/news/4834/musk-considers-creating-amazon-competitor - Trending Topics: https://www.trendingtopics.eu/grok-bot-spacexai/ - The New Stack comparison of always-on agents (Matt Burns, 3 October 2026), via [[Dots (AI)]] ## Related - [[Grok]] - [[xAI]] - [[Grok Build]] - [[Elon Musk]] - [[Cursor]] - [[Anysphere]] - [[Cursor Automations]] - [[Claude Cowork]] - [[Claude Tag]] - [[Claude Duet]] - [[Meta Muse]] - [[Microsoft Autopilot]] - [[MiniMax Agent]] - [[Manus]] - [[Dots (AI)]] - [[Gemini Spark]] - [[Claude Computer use]] - [[Human-in-the-Loop]] - [[AI Agent Permissions]] - [[AI Agents]] - [[OpenClaw]] - [[Hermes Agent]] - [[2026-10-03 OpenAI Dots - always-on agents, with a memory you can't inspect]]