Gemini Spark is Google's always-on AI agent. It lives on a virtual machine in Google's cloud and keeps reading your Gmail, working through your Calendar and editing your Docs after you've closed the laptop. Google introduced it at I/O on May 19, and since late July anyone in the US paying $20 a month for Google AI Pro can turn it on. So the useful question isn't what Spark can do. It's how much of your account you're willing to let it see.
What Is Gemini Spark, and What Can It Actually Access?
Spark is not a chatbot you open and close. Google describes it as a "24/7 personal agent": it runs on Gemini 3.5 Flash, uses Antigravity (the same agent framework Google uses for its own tools), and gets a dedicated cloud VM, so a task keeps going when your phone is off. You can hand it a multi-step job, schedule recurring ones, or forward it email through its own Gmail address.
Out of the box it connects to Gmail, Calendar, Docs, Sheets and Slides. Outside apps plug in over MCP, the Model Context Protocol, and Canva, OpenTable and Instacart were the launch partners. In September Spark also got Skills, reusable custom instructions that Google says will eventually replace Gems.
The Shopping Feature Isn't Live Yet
The most-discussed feature is the one you can't use. Google built the Agent Payments Protocol (AP2) so agents can buy things within limits you set, and Labs VP Josh Woodward compared it to "giving a teenager their first debit card." At launch, though, Spark only walks you to checkout and then hands control back so you can approve the purchase. I couldn't find any confirmation that autonomous purchasing has shipped inside Spark as of this writing. Expect it, but don't assume it's here.
How Much Access Should You Give Gemini Spark?
Here's the uncomfortable part. Before launch, Forbes reported on leaked onboarding text warning that Spark "may do things like share your info or make purchases without asking." That wording didn't make it into the shipped product, which asks for approval before high-stakes actions like sending email or spending money. Still, it shows where Google is heading. Today, changes to shared documents need your sign-off, but Spark can edit your private files without asking.
A Sensible Way to Set It Up
- Start with Calendar and one Workspace app, not everything. Spark is opt-in per app, so a deadline tracker built from Gmail doesn't also need Canva and Instacart.
- Be careful with your main inbox. An agent that reads every incoming email is open to prompt injection, where hidden instructions in a message or web page try to take control of it. Google has layered defenses, but nobody has fully solved this problem.
- Keep sensitive files out of private folders it can edit. Spark needs approval before changing shared docs but not private ones. Move anything you can't afford to have quietly rewritten.
- Treat spending caps as required once AP2 arrives. When purchasing goes live, set a low per-transaction limit and a short category allowlist before you allow anything else.
- Check the Privacy Hub. Data from connected apps is kept until you delete it, and Google shares "necessary info" such as your name and address with partners to complete tasks. There's still no privacy policy specific to Spark, only the general Gemini Apps one.
Spark's value scales with access, and so does its blast radius. The approval prompts are the only thing between a misread email and a sent one, so don't click through them on autopilot.
Key Takeaways
- Gemini Spark is a cloud-hosted agent that keeps working on your Gmail, Calendar and Docs while you're offline. It costs $19.99/month through Google AI Pro in the US.
- It asks before sending email or spending money. Autonomous purchasing through AP2 is announced but not confirmed live.
- Connect the fewest apps that get the job done, and treat your inbox as an attack surface, not just a data source.
- Even six months after launch, Spark is still the clearest sign that Google wants assistants to act on their own, not wait for you to ask.
Frequently Asked Questions
It's reasonably safe for low-stakes inbox work, because Spark asks for approval before it sends anything. The real risk is prompt injection from malicious emails, so read every approval prompt carefully and think twice before connecting an inbox that holds financial or legal correspondence.
Spark comes with Google AI Pro at $19.99 a month in the US, with up to 15 tasks running at once. Google AI Ultra, from about $100 a month, gives you higher limits and wider international availability. Free and AI Plus accounts don't get it.
Not right now. Spark takes you to checkout and hands control back for your approval. Google has announced autonomous purchasing with spending limits through its Agent Payments Protocol, but there's no confirmation yet that it has launched in Spark.
No. Google has excluded the European Economic Area, the UK, Switzerland and Nigeria from the rollout so far, and hasn't given a date for those regions.