An AI assistant that lives in iMessage

iMessage is the most-answered app on an iPhone, which makes it the obvious place to put an assistant and a surprisingly closed place to do it. Apple does not offer a general bot API. Here is how the products that manage it actually work, and what each approach costs you.

Route one: an Apple-approved business agent

Apple's Messages for Business lets approved organisations hold conversations with customers inside the Messages app. In June 2026, Poke became the first AI agent approved on that platform, which put a general-purpose assistant in a native iMessage thread.

• Upside: it is the most native experience available, inside Apple's own rails.
• Downside: approval is Apple's to grant, so this route is closed to most products and the terms are not yours to control.

Route two: a service with its own number

The common approach. The assistant has a phone number, you text it, and it texts back — a normal thread that behaves like any other contact. This is how Cael works, alongside Telegram.

• Upside: works today on any iPhone with no setup beyond saving a contact, and the conversation lives where you already look.
• Downside: message contents pass through the provider's systems, so their data handling matters. Ask whether accounts are isolated, whether integration tokens are encrypted, and whether you can delete everything.

Route three: self-host a bridge

Run the assistant yourself on a Mac and bridge it into Messages locally. OpenClaw is the best-known open-source option, connecting a couple of dozen channels to an agent you control.

• Upside: your data stays on hardware you own, and you can extend it however you like.
• Downside: you need an always-on Mac, comfort with the terminal, and a clear head about credential security — a self-hosted agent typically holds real keys to real accounts.

What to check before connecting anything

1. Does it gate irreversible actions? Booking, buying, and sending should require a confirmation, not a guess.
2. Is your data isolated and encrypted? Particularly integration tokens for mail and calendar.
3. Can you delete it? A real delete, from a settings page, without emailing support.
4. What happens when it gets stuck? Good behaviour is a plain admission and a fallback. Bad behaviour is a confident summary of work that did not happen.
5. Does it actually stay quiet? An assistant that texts you to stay engaged is worse than no assistant.

Getting started sensibly

Whichever route you take, hand over something small and reversible first — a restaurant to research, a price to watch, a morning summary. Small tasks reveal how a product behaves under uncertainty, which is the thing you actually need to know before it touches your calendar.