ChatGPT is moving from answering prompts to acting inside one of the most sensitive surfaces on your phone: your messages.
OpenAI has launched an Apple Messages plug-in for ChatGPT, letting users connect their Messages inbox to the chatbot. Once connected, ChatGPT can sort, analyze, edit, search, draft, delete, and even send messages on a user’s behalf.
That is a small interface change with a very big trust question attached. ChatGPT is no longer just helping you write a text. It is being positioned as an operator for the inbox itself.
Everyday conversations just got easier with the new Apple Messages plugin.
Search messages, catch up on conversations, draft and send replies—all with ChatGPT on your Mac.
Now available in ChatGPT Work and Codex on desktop. pic.twitter.com/nicfZMuxZc
— ChatGPT (@ChatGPT) August 20, 2026
From Assistant To Inbox Operator
The reported plug-in lets users bring their Messages inbox directly into ChatGPT, where it can help manage the content of conversations rather than simply respond to copied-and-pasted snippets. OpenAI is pitching the tool for personal use, but also for work: the plug-in reportedly works with Codex and ChatGPT Work.
The examples matter. A promotional video cited in the report shows a user asking ChatGPT to suggest follow-up messages based on texts received the previous day. The same plug-in can also search through old message history, draft replies, send those replies, and delete messages.
That makes this feel less like a writing assistant and more like an action layer for private communication. The inbox becomes searchable, editable, and executable through natural language.
It fits a wider product pattern: tech companies are trying to make AI the control surface for things that used to require menus, filters, and manual decisions. Google is testing a similar shift in a very different context, with natural language controls for tuning Discover. The message is the same: users are being trained to ask systems to do things, not just navigate them.
The Trust Issue Is Now Part Of The Product
Messaging is not like organizing a playlist or summarizing a document. It is intimate, messy, and often context-heavy. That makes OpenAI’s privacy framing central to whether this becomes useful or unsettling.
OpenAI told Bloomberg that the plug-in runs locally on a user’s machine and “doesn’t create an index of all someone’s messages.” That is an important reassurance, but not the same as a full explanation of what is processed, when, and how users can audit the system’s actions.
The more immediate product tension is approval. OpenAI encourages users to monitor what ChatGPT is doing and warns against enabling persistent approval, because it “removes your final chance to review a message before ChatGPT sends it as you.”
That warning says a lot. The product is powerful precisely because it can act. But the moment an AI can send a message under your name, convenience and accountability collapse into the same button.
For platforms and brands, the signal is bigger than texting. AI is moving deeper into the places where relationships are managed, not just where content is created. If users accept that bargain, messaging becomes less like a private archive and more like a task surface AI is expected to operate.