Microsoft lately launched at Construct 2026 Microsoft Scout, an always-on agent. Scout belongs to a brand new class of brokers Microsoft referred to as Autopilots: always-on brokers that work autonomously on a consumer’s behalf with their very own id, while not having to be prompted every time. Microsoft Scout integrates with Work IQ and is predicated on the open-source agent framework OpenClaw.
Microsoft argued that after being outfitted to do easy, limited-in-scope duties by miscellaneous applied sciences like MCP, brokers and agent frameworks are more and more tackling complicated, long-run duties, thus transferring additional past chatbots’ interactive query/reply paradigm:
Work is transferring ahead in new methods, with the rhythm shifting from single exchanges to one thing extra steady. Most methods nonetheless cease at answering the query. The true unlock is within the follow-through, the place methods maintain your priorities and act on them for you, beneath your management.
Scout is constructed on the open-source agent framework OpenClaw, initially created by Peter Steinberger, who lately joined OpenAI. OpenClaw self-describes as “The AI that truly does issues.” Like OpenClaw, Scout can execute extremely privileged native operations, together with studying and writing native information, executing shell scripts, making use of code patches, launching specialised sub-agents for parallel duties, and automating browser periods. Scout additionally helps Mannequin Context Protocol (MCP) servers, permitting builders to increase Scout’s entry to native assets and third-party developer instruments.
With a number of real-world disasters and horror tales already made public (e.g., the 500-message spam loop), some analysts expressed early concerns concerning the safety mannequin utilized in OpenClaw:
The decision is obvious: till the core structure is rewritten for security-first isolation, nobody—residence customers or enterprises—ought to be operating this software. The productiveness positive aspects aren’t definitely worth the complete system compromise at the moment being handed to attackers on a silver platter.
A vital engineering part of Scout is thus arguably its safety structure. Microsoft seeks to mitigate the dangers by assigning every Scout occasion its personal ruled Entra id. Slightly than operating beneath a generic shared service account, Scout acts as an attributable entity throughout the company listing. Its credentials are scoped to particular person duties, redacted from diagnostic logs, and sure by Microsoft Purview sensitivity labels and Knowledge Loss Prevention insurance policies. For extremely delicate operations, the agent requires human sign-off earlier than execution, performing as a closing safeguard in opposition to unauthorized system modifications.
Microsoft Scout additionally leverages Work IQ, Microsoft’s synthetic intelligence layer that integrates knowledge from Microsoft functions (e.g., SharePoint, Groups, Outlook, OneDrive, Dataverse) and persists an understanding of how people and groups work. Work IQ additionally ships with scoped permissions, coverage enforcement, runtime observability, and different enterprise safety and compliance options.
Builders can get entry to Microsoft Scout by accepting the phrases of the Frontier preview program. Enabling the agent requires a gated process: a corporation should attest to the Frontier phrases within the Microsoft 365 admin heart, and IT directors should explicitly push the desktop app to consumer machines by way of an Intune coverage. Customers should additionally maintain an energetic GitHub Copilot Enterprise or Enterprise license to authenticate.
As is usually the case, the developer group’s response has been a mixture of architectural curiosity, safety skepticism, and humor. On Hacker Information, one consumer alluded to continuously reported software quality problems of Microsoft’s software suite by emphasizing the appeal of an agent that would spare users from interacting with it:
Perhaps Microsoft can work out how you can monetize not having to make use of Home windows as a service.
“You don’t have to make use of Groups and Outlook any longer” is actually a pleasant pitch.
On Reddit’s r/microsoft_365_copilot group, consumer WaffleToasterings clarified the differences between the private preview and the Frontier preview:
The Frontier model is actually OpenClaw on desktop that may connect with the Graph plus WorkIQ, besides it does utilise your {hardware} which means your system have to be on. Microsoft Scout in Personal Preview is a cloud-based Autopilot agent.
Microsoft Scout is accessible as a desktop software for Home windows 11 and macOS 12.