nox.cool now supports the Personal Agent Protocol
nox.cool now speaks the Personal Agent Protocol. At a business that takes part, Nox stops clicking through the website: it uses the business's own system, signs in as you only after you approve, and puts every order the business proposes on a card with its exact terms.

Key points
- At a business that publishes a Personal Agent Protocol file, Nox uses the business's own system instead of its website.
- Before using it, Nox checks the business's file against its sign-in server, so one site can't pose as another.
- You sign in on a card in the chat: on the business's own page, or with your email or phone and the code it sends you. Nox never sees a password or the code.
- An order or change the business proposes comes to you on a card with the business's own terms, and happens only if you approve it.
- Settings › Connections › Businesses shows where Nox has worked for you, whether you're signed in, and what Nox may do there.
nox.cool now supports the Personal Agent Protocol. At a business that takes part, Nox works through the business's own system instead of clicking through its website. It signs in as you only after you approve, and every order the business proposes comes to you on a card with its exact terms. It's available today in nox.cool's early access.
What is the Personal Agent Protocol?
The Personal Agent Protocol (Poppy, for short) is an open protocol introduced by Sierra and Meta for personal AI agents working with businesses. A business that takes part publishes a file at /.well-known/poppy.json that says how agents sign people in and which of its systems they can use. Version 0.2 was published on 24 October 2026, and that's the version Nox speaks.
How does Nox work with a business that takes part?
Name the business in a task and Nox looks it up first, checking its file against the business's own sign-in server so another site can't pose as it. Then:
- It uses the business's system. Looking things up (stock, prices, your rewards) runs at once. Anything that changes something asks you first.
- You sign in on a card. Nox asks only when a task needs your account. The card opens the business's own sign-in page, or, if the business only asks for an email or phone number, takes it and the code the business sends you. Nox never sees either.
- Orders come to you with their terms. When the business proposes an order or a change, Nox reads it straight from the business and puts its summary and terms on an OK card. Nothing happens until you approve exactly that version.


How do I try it?
- Sign in to nox.cool and open Nox.
- Ask for something at a business that takes part, naming its website: "Check my rewards at (the shop's website) and reorder my last prints."
- Nox tells you whether the business takes part. If it does, sign in on the card when Nox asks, then approve or decline the order card.
You decide what Nox may do at each business
Settings › Connections › Businesses lists every business Nox has worked with for you, whether you're signed in, and what Nox may do there: Read only, Ask first (the default) or Allowed. Even with Allowed, an order the business proposes still asks you. Sign out cancels Nox's access at the business too.

Also in this release
- Shared channels stay safe. Nox's answers in a shared Slack or Teams channel never show a card, security code, password or ID number, and an answer with bank or health details goes to your direct messages instead.
- Disconnecting an app cancels access at the app. When you disconnect a connected app, nox.cool now asks the app to cancel its access too. 34 of the 53 apps in our catalog support this; for the others, Settings tells you to remove nox.cool in the app's own settings.
- Safer downloads. Spreadsheet downloads (your usage list and your account export) can't carry a hidden formula from an email subject or a task title.
- Security update. Every part of nox.cool now runs on the October 2026 security release of Node.js.
Questions and answers
Does Nox ever see my password? No. You sign in on the business's page, or type your email and the business's code on a card that goes to that business only.
Can Nox order without asking? No. Every order the business proposes waits for your OK, with its terms.
Read more
The full story, from what the protocol is to how Nox keeps you safe at each step, is in what is the Personal Agent Protocol, and why Nox speaks it.
Try it with Nox
nox.cool is in early access. Sign in, or ask for an invite on the home page.
Keep reading

What is the Personal Agent Protocol, and why Nox speaks it
The Personal Agent Protocol lets AI agents work with businesses openly instead of posing as people. Here is how it works, and how Nox keeps you in charge.

What most AI agents still can't do: five things to check
Most AI agents now share the basics. Five things still set them apart, from what you see before it buys to what a job costs the second time.

What should an AI agent show you before it acts?
An AI agent's approval should show the thing itself: the real page, the price, the email. Why a sentence isn't enough, and how nox.cool built it.