nox.cool now supports the Personal Agent Protocol

nox.cool now speaks the Personal Agent Protocol. At a business that takes part, Nox stops clicking through the website: it uses the business's own system, signs in as you only after you approve, and puts every order the business proposes on a card with its exact terms.

News3 min readThe nox.cool team

A nox.cool OK card titled Confirm with Larkspur Prints: three prints of Lisbon sunset, 8×10 matte, $13.50, with the terms the shop sent listed underneath

Key points

  • At a business that publishes a Personal Agent Protocol file, Nox uses the business's own system instead of its website.
  • Before using it, Nox checks the business's file against its sign-in server, so one site can't pose as another.
  • You sign in on a card in the chat: on the business's own page, or with your email or phone and the code it sends you. Nox never sees a password or the code.
  • An order or change the business proposes comes to you on a card with the business's own terms, and happens only if you approve it.
  • Settings › Connections › Businesses shows where Nox has worked for you, whether you're signed in, and what Nox may do there.

nox.cool now supports the Personal Agent Protocol. At a business that takes part, Nox works through the business's own system instead of clicking through its website. It signs in as you only after you approve, and every order the business proposes comes to you on a card with its exact terms. It's available today in nox.cool's early access.

What is the Personal Agent Protocol?

The Personal Agent Protocol (Poppy, for short) is an open protocol introduced by Sierra and Meta for personal AI agents working with businesses. A business that takes part publishes a file at /.well-known/poppy.json that says how agents sign people in and which of its systems they can use. Version 0.2 was published on 24 October 2026, and that's the version Nox speaks.

How does Nox work with a business that takes part?

Name the business in a task and Nox looks it up first, checking its file against the business's own sign-in server so another site can't pose as it. Then:

  1. It uses the business's system. Looking things up (stock, prices, your rewards) runs at once. Anything that changes something asks you first.
  2. You sign in on a card. Nox asks only when a task needs your account. The card opens the business's own sign-in page, or, if the business only asks for an email or phone number, takes it and the code the business sends you. Nox never sees either.
  3. Orders come to you with their terms. When the business proposes an order or a change, Nox reads it straight from the business and puts its summary and terms on an OK card. Nothing happens until you approve exactly that version.
A nox.cool card titled Sign in at Larkspur Prints, asking for an email for Larkspur Prints only, with a Send me a code button
Signing in at a business on a card. Nox never sees what you type.
A nox.cool OK card titled Confirm with Larkspur Prints, with the shop's summary and the terms it sent: photo, size, finish, quantity, total 13.50 USD and delivery
The business's own terms, approved by you. Larkspur Prints is made up, for the picture.

How do I try it?

  1. Sign in to nox.cool and open Nox.
  2. Ask for something at a business that takes part, naming its website: "Check my rewards at (the shop's website) and reorder my last prints."
  3. Nox tells you whether the business takes part. If it does, sign in on the card when Nox asks, then approve or decline the order card.

You decide what Nox may do at each business

Settings › Connections › Businesses lists every business Nox has worked with for you, whether you're signed in, and what Nox may do there: Read only, Ask first (the default) or Allowed. Even with Allowed, an order the business proposes still asks you. Sign out cancels Nox's access at the business too.

The Businesses group in Settings: Larkspur Prints, signed in, sees your account and makes changes, set to Ask first; Juniper Air, not signed in
Where Nox has worked for you, and what it may do there.

Also in this release

  • Shared channels stay safe. Nox's answers in a shared Slack or Teams channel never show a card, security code, password or ID number, and an answer with bank or health details goes to your direct messages instead.
  • Disconnecting an app cancels access at the app. When you disconnect a connected app, nox.cool now asks the app to cancel its access too. 34 of the 53 apps in our catalog support this; for the others, Settings tells you to remove nox.cool in the app's own settings.
  • Safer downloads. Spreadsheet downloads (your usage list and your account export) can't carry a hidden formula from an email subject or a task title.
  • Security update. Every part of nox.cool now runs on the October 2026 security release of Node.js.

Questions and answers

Does Nox ever see my password? No. You sign in on the business's page, or type your email and the business's code on a card that goes to that business only.

Can Nox order without asking? No. Every order the business proposes waits for your OK, with its terms.

Read more

The full story, from what the protocol is to how Nox keeps you safe at each step, is in what is the Personal Agent Protocol, and why Nox speaks it.

Try it with Nox

nox.cool is in early access. Sign in, or ask for an invite on the home page.

Keep reading