ChatGPT Can Text Your Friends Now
OpenAI shipped an Apple Messages plug-in for ChatGPT on Mac, and it's more invasive — in both the useful and the unsettling sense — than it sounds. ChatGPT can now read, search, draft, send, and delete iMessage, SMS and RCS texts. Ask it to catch up on a group chat, dig a flight number out of message history, suggest a reply, or just send the thing. Apple silicon Macs only, and notably it works with Codex and ChatGPT Work, not just the consumer app.
The safety architecture is the part worth studying. The plug-in runs locally, doesn't index your message history, only reads when you make a specific request, and requires explicit approval — content and recipient — before anything sends. That's the same pattern we flagged with Binance capping agent trading accounts and Anthropic shipping Mythos 5 as patch-only: nobody constrains what the model wants, everybody constrains what its hands can touch. The approval gate is a spending cap for your relationships.
Strategically, this is OpenAI walking into Apple's most protected room without asking. Messages is the moat product — the green-bubble wall that keeps families on iPhones — and Apple's own AI story there is Siri, perpetually next year. A third party reaching into that database via a Mac plug-in, while Apple and OpenAI are otherwise entangled, is a real test of whose surface this actually is. Forbes framed it as a stress test of Apple's privacy brand, which sounds right.
And for the agent thesis: personal messaging was arguably the last major surface agents couldn't touch. Email fell long ago, calendars fell, code fell. Your texts were the holdout. That line just moved, and once your assistant can read the thread and answer for you, the question of who is texting whom gets philosophically interesting fast.
Story: https://techcrunch.com/2026/08/20/chatgpt-can-now-send-texts-for-you-with-new-apple-messages-plugin/
← Back to all articles
The safety architecture is the part worth studying. The plug-in runs locally, doesn't index your message history, only reads when you make a specific request, and requires explicit approval — content and recipient — before anything sends. That's the same pattern we flagged with Binance capping agent trading accounts and Anthropic shipping Mythos 5 as patch-only: nobody constrains what the model wants, everybody constrains what its hands can touch. The approval gate is a spending cap for your relationships.
Strategically, this is OpenAI walking into Apple's most protected room without asking. Messages is the moat product — the green-bubble wall that keeps families on iPhones — and Apple's own AI story there is Siri, perpetually next year. A third party reaching into that database via a Mac plug-in, while Apple and OpenAI are otherwise entangled, is a real test of whose surface this actually is. Forbes framed it as a stress test of Apple's privacy brand, which sounds right.
And for the agent thesis: personal messaging was arguably the last major surface agents couldn't touch. Email fell long ago, calendars fell, code fell. Your texts were the holdout. That line just moved, and once your assistant can read the thread and answer for you, the question of who is texting whom gets philosophically interesting fast.
Story: https://techcrunch.com/2026/08/20/chatgpt-can-now-send-texts-for-you-with-new-apple-messages-plugin/
Comments