Skip to content

Command Palette

Search for a command to run...

BLOG / AI AGENTSFoundations

What Is Grok Bot? xAI's Always-On AI Teammates Explained (Pricing, Routines, Risks)

Grok Bot gives xAI's agents a cloud computer, skills learned from screen recordings and scheduled routines. How it works, what it costs, and the shared-VM risk.

Bhavin Mistry October 7, 2026 9 min readLast reviewed

Topics:Always-on agentsAI agents in production

Marketing says each Grok Bot has its own computer. The documentation says something different: every bot on an account shares one. That single detail changes how safely you can use xAI's new always-on teammates, and it is easy to miss behind the best feature of the product, teaching a bot a task by recording yourself.

TL;DR

Grok Bot is xAI's always-on "AI teammate" app, which runs on Cursor's authentication, billing and distribution and launched in beta on August 11, 2026. You message bots like colleagues from desktop or iPhone. Each bot has a screen on a persistent cloud computer with a browser, terminal, files and memory. You can teach a bot a skill by recording yourself doing a task, then run it as a scheduled or triggered routine, and bots can coordinate with each other in group threads. Since late August it has been included in Cursor Pro and SuperGrok plans and above (from $20 and $30 a month). One caveat matters more than any feature: all bots on an account share one VM, so credentials one bot can use, all bots can use. Facts were re-checked against the cited sources on October 11, 2026.

How Grok Bot works

Grok Bot has three building blocks:

  • Bots are named agents you message. Each has its own screen so several can work in parallel.
  • Skills are tasks a bot learned, most often by watching a screen recording of you doing it, about ten minutes long.
  • Routines attach a skill to a bot and a schedule or trigger, such as "every weekday at 8am" or "when a new invoice email arrives".

Bots can message each other, share context in threads and pass work along. Put several in a group chat and they will assign ownership among themselves and pull you in for judgement calls.

Teaching a skill: do it the right way

Teaching by demonstration is Grok Bot's best feature and its easiest to misuse. xAI's own documentation recommends testing a learned skill on real tasks before automating it. In practice:

  1. Step 1: Record the happy path once

    Do it cleanly and narrate decisions out loud: "I skip invoices under $50"

  2. Step 2: Run it manually

    Three to five times on real inputs, and watch

  3. Step 3: Record the edge cases

    A missing field, a login prompt, an unexpected pop-up, each separately

  4. Step 4: Make it a routine

    Only then, and have the bot post a short summary after each run

From recording to routine

Approvals and what the bot will not touch

Humans keep control of passwords, passkeys, two-factor codes, CAPTCHAs and payments. When a bot needs a secret it uses a "secure secret request", which xAI notes is not a general-purpose password manager. Approvals are per action, with allow once, deny or always allow. An Auto Review mode applies your rules automatically, but it is model-based and xAI's docs say it should complement, not replace, least privilege.

The shared-VM caveat

Marketing says each bot has its own computer. The documentation is more precise: all bots on an account share one persistent cloud VM, isolated from other users but not from each other. Each bot has its own screen, but files, browser sessions and command-line credentials persist across the entire roster.

What it sounds like

  • Each bot has its own computer
  • A compromised bot stays contained

What the documentation says

  • All bots on an account share one persistent cloud VM
  • Files, browser sessions and command-line credentials persist across the whole roster
What marketing implies versus what the docs say

What that means for you:

  • If one bot is logged into your bank in its browser, any bot can reach that session.
  • A prompt injection that compromises one bot can reach everything the others can.
  • Rule of thumb: only connect a service to Grok Bot if you would be comfortable with every bot on the account using it.

For anything sensitive, split work across accounts or use a product with per-agent isolation. See why every AI agent needs its own identity.

The Cursor connection

Grok Bot runs on Cursor's authentication, account settings and cloud infrastructure, and the desktop installer comes from Cursor's download servers. Data governance, including retention, training opt-out and deletion, follows Cursor's terms, not xAI's. Check those before connecting work accounts.

How much does Grok Bot cost?

Grok Bot has no standalone subscription. It comes with its own usage pool on these plans from late August 2026 (reports give August 26 or 27 for the wider rollout, with some plans getting access earlier):

PlanPrice
Cursor Pro$20/month
SuperGrok$30/month
Cursor Teams Standard$40/seat/month
Cursor Pro+$60/month
SuperGrok Plus$100/month
Cursor Teams Premium$120/seat/month
Cursor Ultra$200/month
SuperGrok HeavyIncluded; check xAI for the current price

Enterprise access opened on September 3, 2026, at first through a waitlist. Supported platforms are macOS, Windows and iPhone (iOS 18+).

Good first routines

  • Inbox triage: label and summarise new emails every morning, drafting replies without sending them.
  • Competitor watch: check five pricing pages weekly and post differences to a channel.
  • Report assembly: pull numbers from three dashboards into a spreadsheet every Monday.
  • Developer chores: with Cursor, triage new issues and open draft pull requests for small fixes.

Frequently asked questions

What is Grok Bot? Grok Bot is xAI's always-on AI teammate app, launched in beta on August 11, 2026. Bots run on a persistent cloud computer, learn skills from screen recordings, run scheduled routines and coordinate with each other.

How much does Grok Bot cost? It is included with paid Cursor plans from $20 a month and SuperGrok plans from $30 a month. There is no standalone subscription.

Is Grok Bot safe to use with work accounts? Use care. All bots on an account share one cloud VM, so any credential or session one bot can use, every bot can use. Keep sensitive services off it or use per-agent isolation elsewhere.

What is the difference between a Grok Bot skill and a routine? A skill is a task the bot has learned, often from a screen recording. A routine assigns that skill to a bot and runs it on a schedule or trigger.

What model does Grok Bot use? xAI has not publicly named the model behind Grok Bot.

What will a Grok Bot never do on its own? Humans keep control of passwords, passkeys, two-factor codes, CAPTCHAs and payments. When a bot needs a secret it uses a secure secret request, which xAI notes is not a general-purpose password manager.

Whose data rules apply to Grok Bot? Grok Bot runs on Cursor's authentication, account settings and cloud infrastructure, so retention, training opt-out and deletion follow Cursor's terms, not xAI's. Check them before connecting work accounts.

Which platforms does Grok Bot support? macOS, Windows and iPhone (iOS 18+). Enterprise access opened on September 3, 2026, at first through a waitlist.

Sources

AI agents

Your next step

Reading is the start. Turn it into skill: read the chapter, practise on something real, check the numbers, then follow a path.

  1. Read · ChapterAgent Loops
  2. Practise · Debug challengeThe Agent That Wouldn't Stop
  3. Use a free toolAI ROI Calculator
  4. Follow a roadmapAgentic AI Engineer roadmap
All articles on Always-on agents
#Grok Bot#xAI#AI teammates#Cursor#always-on agents#agent routines

Discuss this article

Got a question, a counter-example or a correction? Bring it to the community.

Join the discussion

Email updates

Enjoyed this? Get the next guide by email.

One email when something substantial is published. No digests, no daily drip. Unsubscribe in one click.

We will email you a confirmation link first, then send an occasional email when a substantial guide is published. Unsubscribe in one click. Stored on our own servers, never sold or shared. See the privacy policy.

Prefer a feed reader? Follow by RSS.