superbot

The work superbot is sold for is the kind a person does by hand: it orders food, works the sites you are signed into using sessions the Helper reads from your own browsers, reads and crawls pages, fills in forms, builds a spreadsheet, document, deck or PDF from a spec, and calls a business and reports back what they said. Calls and texts go out from your own iPhone number through a paired Mac, every one asks you first, and the same number is dialed at most once in 24 hours.

The repeating half is an automation: "every weekday at 07:00, summarise my inbox", described once in plain words, then listed, paused, changed or deleted the same way. Results arrive by text message or push, and the vendor states that an automation runs on superbot's servers, so your computer does not need to be on. A routine triggered by a GitHub, Linear or Jira event or a webhook is saved as a draft you switch on, and the GitHub case needs the Superbot GitHub App on the repo.

Two features sit beside the schedule. Daemon mode keeps an agent watching on its own while you are away, a parked chat waits for one condition and wakes when it clears, and a Fleet board lists every agent working for you across your devices and in the cloud. One account covers macOS, Windows, Linux, iOS and Android test builds, and superbot.gg/chat opens in a browser with no install and no account at all.

Computer use has three states, Off, Ask and Always, and it starts at Off. When a task needs your screen the agent asks "Turn on computer use" with a reason, and the choices are Allow in this chat, Always allow or Not now. On a Mac the first grant also asks the operating system for Accessibility and Screen Recording. The home page adds one hard rule: it never types into a password field.

What the Helper reads on the machine is the other side of that. Browser cookies and site storage, saved logins from 1Password, Bitwarden, LastPass, KeePass and the browsers, and SSH keys are read after you allow them, and each read has its own switch under Settings > Privacy. Live view is on by default, while "Require approval on this computer" is off by default, so another device on the account opens view only and takes control after one Allow. Remote MCP is the stricter default: off on each computer, and only the account holder may turn it on. The two shell safety switches, sandboxing agent commands and guarding sudo, are off by default and an agent cannot set either one.

Plans run Free, Plus at $20, Pro at $100, Max at $200 and Teams at $25 a seat, each carrying a monthly credit allowance: 10,000 on Free, 22,000 on Plus, 120,000 on Pro, 270,000 on Max and 30,000 a seat pooled on Teams. Yearly billing takes Plus to $16.67 a month, billed $200, under a control labeled "Save up to 20%". Past the allowance Plus and Teams bill $1.00 per 1,000 credits, Pro $0.90 and Max $0.80, and credit packs from $5 to $1,000 never expire while plan credits reset on the 1st.

Under that sits a per-token rate card for the two house models, with the API and MCP lane priced above the in-app lane and fast mode doubling every rate. Media has its own ceiling: pictures, video, audio and 3D run on superbot's account, cost credits, and each kind has a daily limit, though a sign-in or key of your own is tried first and spends nothing.

Free is the cheapest way to test the schedule, and it is also where the schedule stops: it carries no long runs, no scheduled runs and models "Up to mid tier". The 7-day Pro trial asks for a card, charges nothing, and one account gets one trial. No calculator turns an errand into a credit figure, so the monthly cost of a busy automation is not knowable in advance.

The second product on the same account is the relay and its gateway. A local Helper plus one endpoint at api.superbot.gg/v1 serves your Claude, ChatGPT, Gemini, Grok, Muse Code, Kimi Code and GLM Coding Plan sign-ins, your provider keys and any OpenAI or Anthropic compatible URL to other tools behind a single caller key, with per-person limits and one log of every call. The commercial point is the exception: "Calls that run on your own API keys spend no superbot credits."

For buyers who never open the app, there are two narrower doors. Any MCP client that connects to superbot.gg/mcp gets one tool, superbot, which takes a job in plain words and does it, and your own MCP servers answer remotely at api.superbot.gg/v1/mcp once you turn the switch on. The gateway allows 1,200 requests a minute per key and publishes an OpenAPI spec, route tables and scopes.

The privacy notice is specific and not uniformly flattering. App chats are never used for training, but product telemetry stores the prompt, reply and any error of each turn for every user for 180 days, and the page states plainly that there is no setting that turns off chat text. Incognito keys and a team's zero data retention are the two real controls.

Separately, during the Model API beta the vendor takes a licence to keep request and reply text for 180 days and train its own models on it, with incognito keys and zero-retention teams excluded. Chat turns, MCP tool calls and requests the agent answers itself sit outside that licence. Export is self-serve at /account and returns chats with full message text, projects, rules, skills, MCP servers and settings. No SOC 2 report, ISO 27001 certificate or DPA is published, and no page offers a choice of storage region.

Two facts on the vendor's own pages change the decision. The relay's Team tab lets you hand keys to other people whose work then runs on your sign-ins and your balance, and with prompt history on, the text of their prompts and replies is kept for 30 days by default; the terms place the duty to tell them on you. And consent for every call or text is the account holder's responsibility, unverified by the vendor, with emergency numbers such as 112, 911 and 999 excluded.

Large parts of the product are labeled beta, including cloud agents, the Model API, org policy for teams and the mobile builds, and the terms allow beta features to change or be withdrawn without notice. The same page says "We do not promise uninterrupted service". There is no SAML or OIDC login, no audit report and no uptime commitment, so a procurement review will stall. Anyone who cannot accept a fixed 180-day retention of prompt text should pass, as should a buyer who wants scheduled runs on the Free plan, which does not allow them.

It suits a person or a small team already holding several AI subscriptions who want chores and standing tasks handled in one place. The vendor also states a name collision itself: SuperBot at superbotapp.ai is an unrelated support chatbot, made by a different company.