Grok Bot review: the agent that logs in as you

xAI's Grok Bot is a team of always-on AI agents that sign into your real apps and finish work end to end. I read the launch and the first reviews, and my take is simple: the setup is the most approachable I have seen, and the login it wants is the biggest ask.

Grok Bot launched on 11 August 2026, and it is not another chat window. Each Bot gets its own cloud computer, signs into your tools the way you would, and keeps working after you close the laptop. I have not run it against my own agent fleet yet, so this is a read of the launch materials and the first wave of reviews, not a hands-on verdict. Two things stood out, one good and one that should give you pause.

The Grok Bot desktop app. A left rail lists a fleet of Bots, each with a status line: Chief of Staff, EA, Inbox Manager, Sales Outbound, Talent Scout, Growth Marketer, Customer Support, Expense Manager, Invoice Collector. The centre is a chat with the Chief of Staff Bot. On the right, a panel titled 'Chief of Staff's screen' shows that Bot's own computer running Google Calendar, above a Routines list: a morning briefing every day at 8am, an inbox cleanup on weekdays, a paused weekly team update. An iPhone on the far right shows the same roster. — The desktop app is the fleet view. Every Bot in the left rail runs on its own computer (the right panel is one Bot's live screen) on its own routines, and you message any of them like a coworker. This is what "a team of agents" means in practice.

The setup is the most approachable I have seen

Grok Bot's best idea is teach-by-demonstration. You record yourself doing a task once, and the Bot turns that recording into a repeatable routine. No code, no API wiring, nothing a developer has to bless first. It remembers your past corrections, so you explain a preference once and it holds across runs. And because the work happens on a cloud computer instead of your laptop, a slow job that waits on a page load or a confirmation email waits without tying up your machine. On repetitive, click-heavy chores, that combination is the most approachable version of "AI that does real work" I have seen.

It logs in as you, and that is the whole risk

Here is the catch, and it is the core of the design. Grok Bot is a credential-holding agent: it signs into your accounts with your real logins, not through sandboxed APIs. If a tool has a login screen, the Bot uses it. All of your Bots then share one cloud computer tied to your account, so they pass files, browser sessions and logins between each other with no separate security boundary.

Two Grok Bot phone screenshots. Left, 'Signs in to your tools': a Bot named Chief of staff sits at a browser login screen for Acme CRM with a real email and password filled in. Right, 'Comes back finished': the same Bot reports it updated a Q3 board deck from Salesforce, Mercury, QuickBooks and Rippling, then sent it. — The login on the left is the risk in one picture: the Bot holds a real credential and signs in as you. The finished job on the right is why people accept the trade.

That is the opposite of how I run my own fleet. I put a model gateway between my agents and everything external, so no agent ever holds a real key, and a leaked or runaway agent is capped rather than a breach. Grok Bot inverts that trust: the shared login is the product. It also breaks in ordinary ways. A recorded path can snap when a site changes its layout, and the Bot may keep clicking the old spot without flagging it, which is why the reviews all say to watch its first runs and keep it away from payments, messages and deletions.

It rides on the $30 plan

Grok Bot is not a separate purchase and it is not a premium add-on. Access comes with SuperGrok, xAI's entry paid tier at $30 a month, the same plan that unlocks the Grok 4.6 model and higher rate limits. The free tier does not include it. So the value question is small: if you would pay $30 for Grok anyway, the Bots come along at no extra cost, and if you would not, this is not the feature that flips you.

The bottom line

Grok Bot is the first agent product I would hand to someone who has never touched one, because the teach-by-demo setup is that clean. But it earns that ease by holding your real logins on a shared computer, and it is too new to have proven itself on messy work. Today that makes it a fit for low-stakes, repetitive tasks you can supervise, not for anything that moves money or speaks for you. If you already pay for SuperGrok, point a Bot at the boring chores. Otherwise, the $30 tier is a low bar, but a days-old agent is not the reason to clear it.