Apple has opened Siri AI to all third-party app developers. A Siri AI Developer Preview arrived on November 3 alongside the first iOS 27.3, iPadOS 27.3, macOS 27.3 and visionOS 27.3 betas, and for the first time any app can expose its capabilities to the rebuilt assistant. Until now, Siri could only act inside app categories Apple had defined in advance, such as sending a message or playing an audiobook.
The integration works through App Intents. A developer picks the actions Siri may perform, marks each one as a tool, and describes in plain language what it does and what inputs it needs. When a user asks for something, Siri reads those descriptions and chooses the action that fits. Apple's examples run from checking a delivery to booking a reservation to placing an order, all phrased in the user's own words rather than rigid command syntax.
Two additions stand out. The first is skills: short natural-language notes that teach Siri how several actions chain together, so a shopping app can cover search, cart, payment and delivery in one conversation. Apple says a skill cannot force fixed behavior, meaning Siri will not necessarily run the steps in the listed order. The second is reach: Siri AI can now surface any entity in the Spotlight semantic index, not only content that matches a predefined schema, which matters for apps whose data never fit Apple's categories.
Apple is applying the same machinery to its own apps, with new Siri actions across Mail, Files, Notes, Maps, Photos, Safari and more; in Mail, Siri can unsubscribe from a mailing list or undo a recently sent message. The company has also removed the Siri AI waitlist, so the feature now auto-downloads when users opt in. Nothing changes for consumers yet: App Store builds do not carry the integration, submissions open in the spring, and Apple says the feature reaches customers in a few months.
The security surface is real. Apple's June risk discussion named two threats: someone holding a locked phone could attempt lock-screen actions, and instructions hidden in content Siri reads could steer it, the technique known as prompt injection, which Apple calls an active research area. Actions rated high risk require user confirmation. The beta notes already list a known issue where Siri AI might display data a developer marked as requiring authentication without requesting an unlock first. Apple's own bank example shows the intended design: a balance check requires on-device authentication, and the routing number is hidden from Siri entirely.
There are geographic and policy gaps too. Siri AI is not available on iPhones in the European Union or to users under 13. It works today in English, French, Japanese, Korean, Portuguese and Spanish, with Traditional Chinese and others listed as coming. Apple has not yet published the terms, usage policies or any fee structure for Siri AI experiences.
The timing surprised developers, many of whom expected App Intents integration at the next WWDC rather than a November preview. It also completes a sharp turnaround after a 2025 in which Apple overpromised and underdelivered on exactly this feature. The spring submissions window is when the real contest starts: whichever apps define what a Siri skill should look like will shape how hundreds of millions of iPhone owners delegate everyday tasks to an assistant that can finally act across the whole system.
Comments (0)
Log in to join the discussion
Log InNo comments yet