This piece is for the CIO or Head of IT who will soon be asked whether an agent may log in to a system on the business's behalf.

What changed

Google's Gemini API changelog for 2026-10-30 reads: "Released the Computer Use tool to general availability (GA) across the Interactions and GenerateContent APIs." The tool has been in preview since 2025-10-07. General availability means Google now offers it for production use, not only for trials.

In plain terms, it works as a loop. The model looks at a screenshot and proposes the next step, such as a click or some typed text. The business's own software carries out that step, takes a new screenshot and sends it back. The loop repeats until the job is done. Google describes it for browser, desktop and mobile work.

Google is direct about the limits. Its documentation says the tool "may contain errors and security vulnerabilities". It advises close supervision for important tasks and running agents in an isolated environment.

Why it matters

Without a screen to work through, an AI agent needs a connection: an API, or an integration someone built and paid for. Many systems offer neither. Think of an older in-house system, a supplier's portal, or a web service that gives you a login and nothing else. Work in those systems stayed with a person, or waited for an integration project that kept slipping down the list.

If your team retypes the same details from a portal into your own system every week, that work is now within an AI agent's reach.

The catch: a screen is the hardest place to govern

A connection can record exactly what was asked and what came back. A screen does not. Four things change when an agent works through one:

  1. The layout can move. A supplier redesigns a page, and a button the agent relied on is now somewhere else.
  2. The screen can talk back. Text on a page can try to give the agent instructions. Google offers an optional check for hidden instructions in screenshots, which tells you the risk is real.
  3. Some clicks cannot be undone. To an agent, submit, pay, send and delete look the same as any other button.
  4. The record is weaker by default. "The agent clicked here" is thin evidence unless every step, screenshot and approval is kept.

Five decisions before you switch it on

  1. Where is the screen the only route? Use it for systems with no other way in. Do not use it for systems where a connection exists but nobody has built it yet.
  2. Which actions need a person's yes? Anything that submits, pays, sends or deletes should wait for a named approver.
  3. Where does the agent work? In a separate environment, with its own login and only the access its job needs.
  4. What is recorded? Each step, the screen it saw, and who approved what.
  5. How does it earn more room? Start with reading and preparing. Let it submit only once the record shows it gets the job right.

Our view

Screen access widens what an AI agent can reach. It does not widen what an agent should be trusted to do. The businesses that gain most will treat this release as reach under rules: an agent with a defined job, a person approving what matters, and more autonomy only against evidence.

Futuvara is a creative technology agency. We build, implement and run AI platforms for our partners. If a system with no API is holding work back in your business, Start an Agentic conversation.

Start an Agentic conversation →

Sources: