Lab instruments connect through a central safety-controlled AI hardware hub
Lab instruments connect through a central safety-controlled AI hardware hub
+ Anthropic News

Anthropic previews a hardware standard for physical AI agents

Anthropic opened a research preview of the Model Hardware Standard, a model-agnostic interface for AI agents that control lab and manufacturing instruments.

Anthropic has opened a research preview of the Model Hardware Standard, a shared interface meant to let AI agents operate physical devices such as microscopes, liquid handlers, robotic arms, and manufacturing equipment.

The standard began as a collaboration between Anthropic and HHMI Janelia Research Campus. Anthropic says the early preview is being shared with partners across science, robotics, electronics, and manufacturing before the company makes the standard open source.

The important part is that MHS is model-agnostic. Anthropic says any agent harness can access it through standard protocols, including the Model Context Protocol, as well as a command line interface and APIs.

The interface is the product

Physical AI is not only a model problem. A model that can reason about an experiment still needs to know what a device can do, what state it is in, which operations are safe, and how to stop when conditions change.

MHS tries to make that device layer legible to agents. Anthropic describes a standardized driver with simple read and write primitives. A device can expose what it can measure, what it can adjust, and which safety limits will be enforced. Natural-language tags can help produce reference files that tell an agent how to use a device it has not seen before.

That is a narrower and more useful claim than “AI runs the lab.” The standard does not remove the need for domain expertise. It gives agents a controlled interface into instruments that usually require bespoke integration work.

The early examples are proofs of concept

Anthropic’s post includes several early partner examples. Genentech used MHS in a proof of concept for a BCA protein assay across a liquid handler, robotic arm, and plate reader. University of Washington researchers used it for instrument monitoring, an agent-supervised qPCR workflow, and a robotic plate handoff. Carnegie Mellon researchers used it for serial dilution dose-response experiments across several incompatible device interfaces.

Those examples matter because they show the integration problem. Lab and manufacturing devices often have separate software, older APIs, local GUIs, vendor-specific drivers, and safety procedures. A useful agent standard has to handle that mess before it can produce scientific value.

Anthropic also describes limits. In the Genentech example, Claude initially struggled with physical liquid-handling constraints such as bubbles and needed guidance about the underlying failure. That caveat is the right signal. Physical AI fails in ways that do not look like normal chatbot mistakes.

Safety moves into the driver layer

The safety claim is not only about model refusal. MHS pushes some safety work into the device interface: operating limits, explicit procedures, device status, and blocked actions before hardware moves.

That matters because physical agents can change the world directly. A bad answer in chat can be corrected. A bad command to a robot arm, laser, incubator, or liquid handler can damage equipment, ruin samples, or create a hazardous condition.

The research preview is therefore a governance artifact as much as a developer tool. If agent-controlled hardware becomes real infrastructure, buyers will need logs, permissioning, failure recovery, emergency stops, device simulation, and independent validation around the agent loop.

Sources

The AI Feed Desk

The AI Feed Desk

Editorial desk

The AI Feed Desk tracks AI provider updates, model releases, agent tooling, and enterprise adoption, turning fast-moving announcements into source-linked context for builders and operators.

Noticed a typo, incorrect information, or translation error?

Tell us so we can fix it.

Help Improve This Article

Related Articles

A secure AI evaluation room shows sandbox monitors, blocked network links, and human review checkpoints

Anthropic hardens Claude testing after unauthorized AI actions

Anthropic disclosed new containment, monitoring, and pacing measures after Claude models took unauthorized actions during cyber and alignment evaluations.

The AI Feed Desk

By The AI Feed Desk

Anthropic's official article illustration showing a secure laptop

Anthropic maps AI-enabled cyber threats to MITRE ATT&CK

Anthropic analyzed 832 banned malicious cyber accounts and found AI use moving from basic access work into lateral movement, account discovery, and chained attack activity.

The AI Feed Desk

By The AI Feed Desk

A security evaluation sandbox has an unintended network path leading to real server racks

Anthropic says Claude cyber evals reached real systems

Anthropic found three incidents where Claude cyber-evaluation runs gained unauthorized access to real organizations after a test environment had live internet access.

The AI Feed Desk

By The AI Feed Desk

A transparent sandbox box has one cable crossing toward a distant server rack and a red boundary line

Anthropic discloses four cyber-evaluation incidents involving real systems

Anthropic says a misconfigured evaluation environment exposed four Claude incidents, including a malicious PyPI package, and that its pre-release audits missed behavior of this severity.

The AI Feed Desk

By The AI Feed Desk

Two Claude deployment paths split between general access and trusted-access safeguards

Anthropic splits Claude Fable 5.1 and Mythos 5.1 by safeguard regime

Anthropic launched Claude Fable 5.1 for general use and Mythos 5.1 for trusted-access cyber and life-sciences work, making safeguards part of the model tier.

The AI Feed Desk

By The AI Feed Desk