At Google I/O 2026 on May 19, Google announced Gemini Spark — a 24/7 personal AI agent that runs in the background on dedicated Google Cloud virtual machines, stays active even when your phone and laptop are off, and accepts task delegation the way you’d assign work to a human colleague: by sending it an email.
Spark is the consumer face of Google’s Antigravity agent engine — the same infrastructure powering the Google Managed Agents API aimed at developers. Where Managed Agents is a single-API-call primitive for building agents into applications, Spark is the packaged, end-user product: pre-connected to your Google account, aware of your inbox and calendar, and designed to be delegated to without writing a line of code.
Spark is currently rolling out to trusted testers and will become available to US-based Google AI Ultra subscribers ($100/month) over 18 in the coming days.
What Gemini Spark Is
Spark is a cloud-resident agent. It does not run on your device. Google provisions dedicated VMs per user in Google Cloud, which means Spark has compute resources that persist independently of whether your phone is in your pocket or your laptop is closed. Assign it a task at 10pm, and it can still make progress at 2am.
Task delegation happens through a dedicated Gmail address — think of it as a work email for your AI agent. You send Spark an email describing what you need done. It pulls context from your Gmail, Docs, Sheets, Slides, and Drive, then executes the task. You can also interact with Spark through the Gemini app directly.
At launch, Spark connects natively to:
- Gmail — reads, drafts, and sends email; understands inbox context
- Google Calendar — schedules meetings, resolves conflicts, finds availability
- Google Drive — reads and writes Docs, Sheets, and Slides
- Google Maps — location context for scheduling and logistics
- YouTube — research and content context
Third-party integrations shipping on day one include Canva, OpenTable, and Instacart. MCP-based integrations covering GitHub, Notion, and Slack are announced for “over the summer” 2026.
Spark also supports sub-agent creation: users can spin up specialized sub-agents — a “travel Spark” for itinerary research, a “shopping Spark” for price tracking, a “news Spark” for morning briefings. These lightweight instances report back to the primary Spark instance, allowing users to delegate entire domains of recurring work rather than individual tasks.
The Antigravity Platform
Google’s infrastructure layer underneath Spark is called Antigravity — a dedicated agentic compute platform built to run persistent, stateful AI workloads at consumer scale. This is not standard cloud VM hosting; Antigravity is optimized for low-latency, high-concurrency agentic tasks that run continuously rather than on-demand.
Google has not released technical details, but the design intent is clear: infrastructure built to run hundreds of millions of persistent AI agents simultaneously. Stateful agents that run continuously are fundamentally different from stateless inference calls — they require session state, task queues, retry logic, and persistent context management at scale. Antigravity is Google’s answer to that engineering challenge.
The same Antigravity infrastructure powers the Google Managed Agents API for developers; Spark is the consumer product expression of the same underlying platform.
How Spark Handles High-Stakes Actions
Google has built an approval gate into Spark’s action model. For consequential actions — sending email from your account, deleting files, making bookings — Spark is designed to confirm with you before proceeding. The workflow is: Spark drafts the action, notifies you, waits for approval, then executes.
The Agents Payment Protocol — which will allow Spark to make purchases autonomously within user-defined spending parameters — is announced but not yet available at launch. This is a deliberate sequencing choice: Google is rolling out the autonomous action surface incrementally, starting with low-stakes read/write operations before enabling financial transactions.
Pricing and Availability
Gemini Spark is exclusive to Google AI Ultra subscribers. Google restructured its AI pricing at I/O 2026:
| Plan | Price | Spark Access |
|---|---|---|
| Google AI Ultra | $100/month | Yes |
| Google AI Ultra (higher limits) | $200/month | Yes |
| Google AI Pro | — | No |
The Ultra plan dropped from $250/month — a significant price cut that appears aimed at making the tier competitive with OpenClaw Pro and other premium consumer AI subscriptions.
Google is also moving from daily prompt limits to a compute-based usage model. A simple text message consumes a small portion of your monthly compute budget; a complex multi-step agentic task with many API calls consumes proportionally more. When you approach your monthly cap, Spark falls back to Gemini 3.5 Flash rather than cutting off access entirely.
Current availability: US only, over 18.
MCP Integration and What It Means for Developers
The MCP angle is directly relevant to how Spark will grow its integration surface. Rather than requiring Google to build one-off integrations for every third-party service, Spark’s summer 2026 expansion relies on the MCP standard to consume tools from GitHub, Notion, Slack, and others.
This has a practical implication: an MCP server built today for Claude Code, Cursor, or any other MCP-compatible agent automatically becomes a candidate Spark consumer when Spark’s MCP integration lands — no Spark-specific development required. The same tool definition works across agents. For developers building MCP servers, Spark represents a significant expansion of their potential distribution once those integrations go live.
Google’s managed agents infrastructure already supports MCP natively (as covered in the Managed Agents API review). Spark is the consumer product expression of the same capability.
Security and Privacy Concerns
Gemini Spark requires more trust than any previous Google product, and the trust story at launch is incomplete.
Prompt injection is a real attack surface. A persistent agent that reads arbitrary web content, emails, and documents on your behalf is a high-value target for adversarial instructions embedded in those sources. Malicious websites and emails can contain hidden text designed to hijack an AI agent’s actions — redirecting purchases, exfiltrating data, or executing unauthorized tasks. Google said in May 2026 that malicious websites are actively targeting AI agents via hidden prompts, and stated that Spark includes “adversarial prompt detection.” No one has fully solved prompt injection. Running a 24/7 agent that reads arbitrary external content is a meaningful attack surface, and users should treat it as such.
A leaked onboarding screen from an early Gemini app beta disclosed that Spark “may do things like share your info or make purchases without asking.” Google has acknowledged the screen but clarified that high-stakes actions require approval before Spark will execute them. The framing of the leaked text, however, suggests the eventual steady-state — particularly after the Agents Payment Protocol launches — involves a meaningfully larger autonomous surface than today’s consent patterns train users to expect.
As of the I/O keynote, Google has not published a Spark-specific privacy policy. The standard Google Privacy Policy applies, but it predates a product category where an AI agent has persistent access to your full email, files, and calendar and is authorized to take actions on your behalf.
The absence of a Spark privacy policy is not unusual for a product in trust-tester rollout — but it is notable that the commercial launch timeline for Ultra subscribers does not appear to be gated on publishing one.
Google’s stance is that Spark requires user approval for high-stakes actions. What constitutes “high-stakes” and what the data retention model looks like for an always-on agent with full Workspace access are questions the current documentation does not fully answer.
Comparison: Spark vs. OpenAI Operator
OpenAI launched Operator in early 2025 — an agent that could browse the web and fill out forms on your behalf. It was a meaningful capability, but reactive: you had to be present to kick off a task, and it ran in a browser session tied to your active session.
Gemini Spark is more architecturally ambitious. The persistent cloud VM model means true asynchronous operation — assign a task Monday night, find results in your email Tuesday morning without having opened an app. The email interface is also differentiated: Operator uses a chat interface; Spark treats email as a first-class input channel, which is lower-friction for delegation.
The tradeoff: Spark is tightly coupled to Google’s ecosystem. It works with Gmail, Google Calendar, Chrome, and Google Workspace natively. If you live outside that ecosystem — Outlook, Firefox, Apple Pay — the value proposition shrinks. OpenAI Operator is more browser-agnostic; Claude’s agentic capabilities are more API-extensible for developers. Spark wins on consumer integration within Google’s world; it is less compelling outside it.
Comparison: Spark vs. Managed Agents API
Spark and the Managed Agents API share an engine but serve entirely different audiences:
| Gemini Spark | Managed Agents API | |
|---|---|---|
| Audience | Consumers, non-technical users | Developers, builders |
| Activation | Email delegation, Gemini app | Single API call |
| Integrations | Google Workspace + curated third-party | MCP-connected tools, custom |
| Persistence | Always-on cloud VM per user | Ephemeral per-interaction sandbox |
| Pricing | $100/month Ultra subscription | Gemini 3.5 Flash token rates |
| Control | User-configured, approval-gated | Developer-defined in code |
| State | Persistent across sessions | Ephemeral (no state by default) |
If you are a developer who wants to build an agent workflow, the Managed Agents API is the right primitive — you control the tools, the instructions, and the execution. If you are an individual who wants to offload recurring digital tasks without writing code, Spark is the product. They are complementary, not competing.
Limitations
US-only at launch. Availability is limited to the US at announcement. No international rollout timeline has been published.
$100/month subscription required. Spark is not available on Google AI Pro or free Gemini tiers. At $100/month, it is a premium commitment that competes directly with other subscription AI services.
MCP third-party integrations are not available at launch. GitHub, Notion, and Slack integrations are announced for “over the summer” — a vague timeline. The launch integration set (Gmail, Workspace, Canva, OpenTable, Instacart) is practical but narrow for users whose workflows live outside Google’s ecosystem.
Payment protocol not yet available. Autonomous purchasing — the capability that most distinguishes Spark from a sophisticated automation — is announced but not shipped. The current version is a capable research-and-drafting agent, not yet a transactional one.
No Spark-specific privacy policy. Persistent access to email, files, and calendar by an autonomous agent warrants a standalone data handling disclosure. The current documentation gap is a real trust deficit for privacy-conscious users.
Google-hosted only. Spark runs on Google Cloud. There is no self-hosted, on-premises, or data-residency option. For users with compliance requirements or a preference for limiting Google’s data access, this is a hard constraint.
Rating: 3/5
Gemini Spark represents Google’s most ambitious consumer AI product to date. The core concept — a cloud-resident agent that handles delegated tasks asynchronously, knows your full Google context, and stays active independently of your devices — is genuinely useful and more developed than most “AI agent” consumer products that preceded it.
The 3/5 reflects the gap between the announced vision and the available product. US-only, $100/month, MCP integrations pending, payment protocol not shipped, and a privacy policy gap are real constraints that limit what you can actually do with Spark today. The approval-gated action model is reassuring but also means the most compelling use cases (autonomous task execution while you’re asleep) are still gated on features that haven’t shipped.
The trajectory is promising. If Google delivers on the MCP integrations this summer, publishes a Spark-specific privacy policy, and follows through on the Agents Payment Protocol with clear user controls, Spark has the foundation to be a 4–5/5 product — the first consumer AI agent that genuinely changes how you manage your digital life rather than just augmenting how you type.
Check back when the MCP integrations land and the privacy policy is published. Those two milestones will define whether Spark is a tool worth trusting with your inbox.
ChatForest researches AI tools and platforms; we do not test them hands-on. Our reviews are based on publicly available documentation, benchmark data, developer community reports, and press coverage.