Instinct, the AI startup that lets you text and call an assistant wired into your own apps, has raised $350 million at a $2.5 billion valuation. TechCrunch reported the round on 26 August 2026, and the number that stopped me wasn't the valuation.
It was this: the product is still in private beta, and the loudest public criticism is about app permissions. Investors priced that combination at $2.5 billion anyway. That tells you exactly what is being bought here, and it isn't a model.
Here is what the reporting establishes, and nothing beyond it:
| Fact | Detail |
|---|---|
| Company | Instinct, operating as Spear Street Technology |
| Founder | |
| Noah Shinn, age 23 | |
| Age of company | Roughly one year |
| Series B | |
| $250 million, co-led by Index Ventures and Benchmark | |
| Total raised | $350 million |
| Valuation | $2.5 billion |
| Status | |
| Private beta as of 26 August 2026 | |
| User count / revenue | Not disclosed |
Note the last row. No user numbers, no revenue. Arithmetic on the first two rows implies roughly $100 million raised before this round, which is a lot of runway for a one-year-old company that hasn't opened the door yet.
The product itself is easy to describe: an assistant you connect to your apps and devices, and then talk to over text and calls. Shinn's own framing of what people do with it:
"They've planned cross-country road trips, bought weekly groceries and concert tickets, and cancelled hundreds of dollars of subscriptions. Someone's even planning their wedding with Instinct." — Noah Shinn
Read that quote again as an engineer rather than as a user. Every single item on it is the same technical shape:
Steps 1 through 3 are a solved problem. Any current frontier model with tool-calling does them well enough to demo. If you have a laptop and a free-tier API key, you can build a convincing version of "cancel my subscriptions" this weekend. I'd budget an evening for the plumbing and a second one for the error handling.
Step 4 is the entire business. "With the user's credentials" is where the $2.5 billion sits.
Key takeaway:Instinct's moat is not intelligence, it's authorisation. Whoever holds the OAuth scopes for your calendar, your inbox, your card and your delivery apps owns the workflow — and that position is far harder to copy than the prompt that sits on top of it.
This is why the privacy complaints and the valuation are the same story, not two competing ones. Users flagged permissions they found overly generous and terms of use they found invasive. From an investor's seat, wide permissions read as depth of integration. From the user's seat, the same thing reads as exposure. Both are correct.
If you're a small team here thinking about an agent product, this is the split worth being honest about before you write a line of code:
| Layer | Commodity or moat? | Why |
|---|---|---|
| LLM reasoning + tool-calling | Commodity | |
| Available to anyone with an API key | ||
| Prompt engineering / planner loop | Commodity | |
| Replicable in days; nobody defends this | ||
| Voice + SMS transport | Commodity | |
| Off-the-shelf telephony providers | ||
| Connectors to third-party apps | Partial moat | |
| Real engineering, but copyable | ||
| Held user authorisations at scale | Moat | |
| Requires trust, and trust takes years | ||
| Liability when the agent buys the wrong thing | Nobody's asked yet | |
| The open question in this whole category |
That last row deserves more attention than it gets. An assistant that "bought weekly groceries" is an assistant with live payment authority. The failure mode of a chatbot is a wrong answer. The failure mode of an agent with your card is a wrong charge, and there is no established norm yet for who eats it.
If you're pricing out the model layer for your own build, our AI API cost calculator will get you a realistic per-call figure in a minute. Fair warning: the model cost is usually the cheapest line item in an agent product. Support and refunds are not. The permission trade looks different on a Sri Lankan phone than it does on a San Francisco one, and I don't think that difference is well understood by anyone building these products.
None of this means don't build agents. It means the "just connect everything" onboarding that reads as frictionless in a launch video reads as reckless to a user who has one phone and one bank account.
My read, plainly:
Bottom line:$350 million bought a bet that users will trade broad app permissions for convenience. If that bet pays off, the playbook becomes standard. If it doesn't, the teams that asked for less will be the ones still standing.