For two years, every AI company has promised you agents. Agents that book your travel. Agents that answer your emails. Agents that hand off to other agents. Agents that run your business while you sleep.

Almost none of it shipped. Demos worked on stage. Real products stayed locked inside chatbot windows, doing clever parlor tricks while the actual work still happened in Slack and Gmail and Salesforce, where the AI could not see.

Perplexity just kicked the wall down. On Thursday the company launched Personal Computer for Mac, a downloadable app that plugs Perplexity's AI directly into Gmail, Slack, GitHub, Notion, Salesforce, and a growing list of other workplace services. It watches for triggers. It executes multi-step tasks across all of them. And it is already available to paying subscribers today.

What it actually does

The pitch is simple and slightly chilling. You tell the app what you care about. New email from this client, triage it and draft a reply. New GitHub issue tagged bug, pull the stack trace and ping the on-call engineer in Slack. New Salesforce deal stage, update the spreadsheet and notify the account owner. The app sits on your Mac, watches all of it, and does the work.

Perplexity also ships Comet, its own Chromium-based AI browser, as a built-in surface Personal Computer can drive directly. Need the agent to go click a button on a SaaS tool that does not have a proper API? It just opens Comet and clicks it.

The distribution is also notable. The app ships as a DMG download from perplexity.ai/personal-computer, not the Mac App Store. That is Perplexity doing what Apple's own app review guidelines would never let them do. An agent that reads your email and controls your browser is not clearing that review process anytime soon.

This is the real agent moment, and it is not a chatbot

Here is the part that should make OpenAI, Anthropic, and Google pay attention. This launch is a different product category from ChatGPT, Claude, and Gemini. It is not a better chatbot. It is a replacement for the chatbot interface entirely.

The bet Perplexity is making is that the chat window is a dead end. Nobody wants to copy and paste emails into ChatGPT to get them summarized. Nobody wants to ask Claude for a to-do list it can not actually do. They want the AI inside the apps, pulling its own context, taking its own actions, and only pinging them when something needs a decision.

Perplexity, a company most people know for its search product, just shipped a version of that future while the big labs are still talking about it. ChatGPT has a desktop app, but it is still fundamentally a chat UI with some system access. Anthropic's Claude Desktop and the new Claude Design tool are powerful but still assume you bring the work to Claude, not the other way around.

The scary part nobody is talking about

Giving an AI agent persistent access to Gmail, Slack, GitHub, Notion, and Salesforce is giving it access to basically everything your company knows about everything. Contracts. Salaries. Unreleased product plans. Customer lists. Incident post-mortems. Board decks.

We have already seen what happens when AI agents get compromised. Last week we covered researchers hijacking Claude, Gemini, and Copilot agents through GitHub to steal credentials. Microsoft patched a Copilot Studio prompt injection only to watch data exfiltrate anyway. Sophisticated prompt injection attacks on agents with this much access are not theoretical. They are already happening.

Perplexity is running ahead of the safety research. That is true of the whole agent industry right now. The product is compelling enough that buyers will accept the risk. The first mass compromise of a consumer agent is coming. It is not a question of if.

Why this is bigger than Perplexity

The real story here is not Perplexity. It is that agent products have finally left the demo phase. Perplexity had the most to prove, a 4-year-old AI search company getting its lunch eaten by OpenAI and Anthropic on every frontier, and it had to ship something real. So it did. The bigger players will now have to respond.

OpenAI already merged ChatGPT, Codex, and Atlas browser into a single superapp. Claude Code has an IDE mode. Google's Gemini lives inside every Workspace surface. What Perplexity just proved is that all of these products now have to be agents. The chat era is ending. Sources: 9to5Mac, Cult of Mac, Gizmodo, Perplexity Help Center.