All posts

3 min readDataReport

State of shared agents, September 2026

What people actually ask other people’s agents to do, from the first thirty days of muti’s private beta. The numbers are small and we say so. Roughly a third of requests came from someone other than the owner, most approvals were answered in under a minute, and the tool that asked most was Bash.

By Noah· Product at Muti AI

This is the first edition of a report we intend to update every quarter: what people ask other people’s coding agents to do, and what happens when they do. The data comes from muti’s private beta, covers the thirty days to 6 September 2026, and is small. Fifty-eight requests, six machines, ten rooms. We publish it anyway because nobody else is publishing anything on shared agents, and small honest numbers beat large imagined ones.

All figures are aggregates. No request text, no names, no room names.

The numbers

Five figures from the first thirty days, with their denominators.Five figures from the first thirty days, with their denominators.

MetricValueDenominator
Requests from someone other than the agent’s owner31%58 requests
Requests that completed81%53 finished; 10 failed
Requests cancelled7%4
Median time to answer a tool approval38 s9 approvals
Approvals allowed / expired8 / 19
Tool that triggered approvals mostBash (7 of 9), then WebFetch, Read9
Median run time (start to finish)41 sp90: 3 m 12 s
Median wait from request to start2 s—
Rooms with at least one non-owner member4 of 10—
People who are members of a room they don’t own4—
Requests auto-approved by a standing grant6—

What we think they mean

A third of requests from non-owners is high for a beta with no marketing. Owners invited people and those people used the agent. The sharing is the product, and it happened without prompting.

Approvals are fast when they are rare. Nine approvals across fifty-eight requests, answered in a median of 38 seconds. That is the behaviour the design hopes for: the four always-pause actions and permission modes keep prompts scarce, so the prompts that remain get a real look. See four actions an agent should always ask before doing.

Bash asks. Most approvals were shell commands. File reads and edits mostly ran under acceptEdits; the moments a human was needed were commands. That matches what the permission modes are designed to do.

Failures are mostly runtime failures, not permission failures. Ten requests failed; in the timeline they are test failures, missing tools and one runtime timeout. None was a denied approval.

Forty-one seconds is the median job. Shared agents so far are asked for small, specific things: rerun this, summarise that, export these. Long refactors are rare and mostly owner-driven.

What the numbers do not mean

  • They are not representative. Six machines, mostly ours and our friends’. The share of non-owner requests will fall as the owner base grows before it rises again.
  • Completion is not correctness. “Done” means the runtime finished without error; whether the result was good is not measured here.
  • Approval latency is owner-dependent. Nine data points, several owners, one number. Treat it as “under a minute” rather than “38 seconds”.

What we will add

Next edition: request categories (code / documents / data / files), share of requests with attachments, and approval latency by hour of day. All aggregate, all published with denominators.

Method

Figures come from the same tables the product runs on: requests, tool approvals, room memberships and timeline events, counted over UTC days. No sampling. Soft-deleted rooms and agents are excluded from “current” counts and included in “happened” counts. The audit model is described in what an audit log must record.

Frequently asked questions

Can I get the raw data? No. The aggregates are all we publish; requests are private to their rooms.

Why publish at n = 58? Because the alternative is publishing nothing, and because stating the denominator lets readers weigh it. The next edition will be larger or it will say why not.

How often? Quarterly, with the same metrics so they can be compared, plus additions announced in the previous edition.

If you want to be in the next edition, give your agent a room.

Published

Give your agent a room.

muti is free during the private beta. Connect the machine where your agents live and invite the people you trust.

Get started

Keep reading

6 min readComparison

QoderWake and muti

Of every agent product launched in 2026, Alibaba's QoderWake is the closest in shape to muti. Both run on your own machine, and both let a group send it work, through a chat that has to be paired first. They split on whose agent it is, what it runs, and who approves when a colleague's request reaches a delete.

9 min readComparison

WorkBuddy, QwenWork and QoderWake

Tencent's WorkBuddy lets you drive the agent on your own computer from WeChat and WeCom. Alibaba's QwenWork merges desktop, cloud and DingTalk agents into one product. QoderWake runs a team of digital employees on your machine behind a single bot the whole group can mention. All three let colleagues use the agent. They answer how in very different ways.

5 min readPersonal agents

An agent with its own phone number

Manus Cue gives each personal agent an email address, a phone number, a wallet and a computer. That makes the agent reachable by anyone who has the number, which changes the permission question from "what may my agent do" to "what may a stranger make it do". What Manus 2.0 shipped, and what reachability asks of an agent.