AI Agents Gain Dedicated Real-World Identities: Email, Cloud Accounts, and Persistent Infrastructure

AI agents are gaining dedicated real-world identities across email (Atomic Mail), full digital employee credentials (Delos Workers), financial accounts (Alchemy AgentCard), and persistent workplace messaging (Anthropic's Claude Tag). Claude Tag, launched June 23 in beta, replaces Anthropic's existing Slack app entirely rather than supplementing it, giving agents a persistent shared channel identity that retains organizational context across team interactions over time [8][7]. Anthropic has plans for wider rollout beyond current Enterprise and Team tiers [17], and launched Claude Code v2.1.187 on the same day [11].

When agents hold their own email addresses, financial accounts, and workplace messaging identities, they become persistent actors inside organizations rather than tools humans invoke and discard. Claude Tag's design as a replacement for, rather than an addition to, the existing Slack chatbot indicates Anthropic views persistent agentic identity as the correct long-term model for workplace AI — a bet with implications for how other enterprise AI tools will be repositioned.

Starting in mid-June 2026, a cluster of product launches began giving AI agents dedicated real-world identities. Atomic Mail launched an API-first email service where inboxes belong to agents rather than humans, with roughly 40-second setup and no human intervention required [1][2]. Alchemy announced AgentCard, enabling agents to hold and spend funds on behalf of users [3]. Delos launched Workers on June 22, framing agents as full digital employees with their own email, phone number, Slack and Teams presence, computer, and memory, each trained on one business's routines [4][5]. Cloudflare added temporary account-free Workers deployments with 60-minute lifetimes, framed partly as agent infrastructure; developer Simon Willison characterized that framing as marketing applied to a general-purpose developer tool [6].

On June 23, Anthropic launched Claude Tag in beta for Enterprise and Team Slack customers [7]. The product replaces Anthropic's existing Slack app rather than sitting alongside it [8], giving agents a persistent identity inside Slack: a single Claude instance shared across all participants in a channel retains context as different team members engage over time. Claude Tag also supports an ambient mode in which it proactively surfaces relevant information and follows up on unresolved threads without being explicitly tagged [7][9]. Anthropic reported that its internal deployment generates 65% of the product team's code [7]. The product ships with administrator controls for token spend and full audit trails — governance infrastructure that the earlier email and financial identity launches did not include. On the same day, Anthropic and Salesforce previewed a Claude Code integration with Slack as a distinct capability [10]; observers read both launches as a coordinated push toward team-oriented AI operations [11].

Analyst Prasenjit Sarkar argued the architecturally significant aspect is not Slack invocation — which Slackbots have supported for years — but the persistent shared identity model that gives the agent organizational memory across interactions [12][13]. Critics noted that the product is currently enterprise-only and limited to Slack, which constrains its reach for smaller teams or organizations using other messaging platforms [14].

Two structural tensions run through this space. The first is architectural: Atomic Mail, Delos, and Claude Tag bet on permanent persistent identities, while Cloudflare's offering is explicitly ephemeral — different assumptions about what production agent deployment looks like [6][1][7]. The second is organizational: centralized SaaS identity services compete with voices in the crypto community who argue agent identity and verifiable execution should be built on decentralized infrastructure instead [15][16]. Claude Tag's enterprise governance controls represent one answer to accountability questions that the earlier identity launches left open.