AI agent for LinkedIn outreach: what it actually does

In December 2025, LinkedIn wiped Artisan off the platform: its company page, its employees' profiles, and its executives' posts, all gone before Christmas. Artisan is the Y Combinator startup that bought "stop hiring humans" billboards across San Francisco to sell Ava, an autonomous AI agent that runs sales outreach on its own. The ban was not about spammy messages. LinkedIn objected to third-party data that had been scraped from it and to Artisan using its name on the site. Artisan cleaned both up and was reinstated about two weeks later (TechCrunch, January 2026). The episode is still the clearest public read on what "AI agent for LinkedIn outreach" quietly asks of you: how much of your own account you are willing to hand to software that acts without you watching.

Because the phrase hides two very different products wearing one label. One runs your account all day and decides on its own who to message. The other finds and drafts, then waits for you to say yes before anything leaves your account. These are not variations on the same idea. They fail in opposite ways, and picking the wrong one is how people get their LinkedIn account restricted.

This guide breaks the term into the six jobs an outreach agent can actually do, shows which of them need your LinkedIn account connected at all (fewer than most tools admit), and walks one honest end-to-end session so you can see exactly where the human still sits. For the wider market context first, the AI SDR hype cycle and what survived it is covered in AI agents for LinkedIn lead generation.

The six jobs of an outreach agent

Strip away the marketing and an "AI agent for LinkedIn outreach" is doing at most six distinct jobs. The useful question is not "does it have AI" but "which of these six does it do, and who has the final say on each." The single most important column is the third one: whether that job touches your connected LinkedIn account at all.

Four of the six jobs never touch your account. That is not a rounding detail. It is the whole difference between an agent you can trust and one that puts your account on the line for research work that never needed it.

Find

The agent's first job is sourcing. A good one does not start from a static list you upload; it starts from live signals. Who commented on a relevant post this week, who is hiring for a role your product serves, which companies just changed shape. Those are public signals, readable without connecting anything. You can try the raw version yourself with the free LinkedIn comments finder, and the full taxonomy of what is worth watching is in LinkedIn intent signals without Sales Navigator.

Qualify

Sourcing gives you volume. Qualifying gives you a shortlist. Say a single viral post about outbound tooling returns 400 likers. Qualify is the step that reads each public profile and keeps only the ones that match your criteria, heads of growth at Series A to C companies in your region, so you end up reviewing 25 names instead of skimming 400. Templated tools skip this and hand you the raw 400 to blast; the agent scores each prospect against your ideal customer profile and drops the misses before you ever see them. This is where an AI agent genuinely beats a human doing the same task, because it applies the same criteria to the four-hundredth profile as consistently as the first.

Draft

Templated tools lose here structurally. "Hi {name}, I noticed you work at {company}" reads as automated no matter how many merge fields you add. An agent writes from the actual context: the specific thing the person said, the specific role they are hiring for. That context is what makes a first message read less like a broadcast, and warmth moves the numbers. Belkins' 2026 LinkedIn benchmark, built on more than 15 million outreach touchpoints, found messages to already-connected prospects replying at 12.2% against 7.9% for cold connector requests (Belkins, 2026).

Approve

This is the job that separates the two product categories. An agent-with-approval shows you the drafted queue and does nothing until you act on it. You edit two, cut one, greenlight the rest. An autonomous sender skips this step entirely, which is exactly why it degrades: nobody is reading the output before prospects do.

Send

Only now does your account get involved. The agent delivers the messages you approved, spread out under safe caps rather than fired all at once. BeReach's per-account daily ceilings sit at 300 profile visits, 50 connection requests, and 70 direct messages, and because LinkedIn throttles invitations hardest, roughly 100 a week for a standard account, the connection-request lane is paced well under its daily cap. Speed on relevance, restraint on volume.

Learn

The last job is closing the loop. The agent reads replies and outcomes and adjusts, so next week's targeting and tone reflect what actually got answered. This is shared judgement: the agent proposes the adjustment, you decide whether the pattern is real.

Autonomous sender vs agent with approval

The demos blur these together on purpose. They are not the same product, and the difference shows up most in how they fail.

The market already ran this experiment, and the flagship autonomous agent is the cautionary tale. Artisan sits at around 4 out of 5 on G2, but that average hides a polarized split: mostly five-star reviews with a hard cluster of one-star ones, whose recurring complaint is bland, obviously-automated messaging that personalizes with little more than a name and a job title. Then LinkedIn removed Artisan from the platform entirely in late December 2025 over broker-scraped third-party data and use of its trademark, and reinstated it only after it cleaned up its data sources (TechCrunch, January 2026). Across the wider AI SDR market, the companies that deployed these agents as full human replacements have largely walked that back toward hybrid, human-in-the-loop setups. The lesson is not that AI outreach fails. It is that removing the human removes the thing that made the outreach worth sending.

That is also the real read on productivity. The Prospecting 2025 report from Outreach found that 100% of AI-powered SDR users reported time savings, with nearly 40% saving four to seven hours a week (Outreach, 2025). The saved hours come from the find, qualify, and draft jobs, not from taking the human off the approve and send jobs.

Most of the work happens before you connect anything

Here is the part almost no outreach tool is built to admit: four of the six jobs, find, qualify, draft, and approve, run entirely on public data. Nothing about your LinkedIn account is required to source prospects, score them, write the messages, and let you review the queue. A session is only needed at the real outreach boundary, the send step.

BeReach is built around exactly that split. Call it cookieless until outreach. You can plan an entire campaign, produce a fully drafted and approved queue, and never connect an account, because a connected LinkedIn session is only needed at the moment a message is actually sent. Recall why Artisan got pulled off LinkedIn: not for its sends, but for how the underlying data was gathered. Research is where the exposure hides. Doing the finding, qualifying, and drafting off a server on public data, and reserving your own account for the paced send, removes that whole category of risk rather than stacking more automation on top of it.

That framing matters more than it sounds. The fastest way to get restricted is not sending too many good messages; it is running your logged-in account all day to gather data. Move the gathering off your account and the only thing left on it is the paced, approved sending.

One honest session, start to finish

Here is a real end-to-end shape, not a highlight reel. The agent runs inside Claude through BeReach's MCP connector, so the whole thing is one conversation.

You:   Find people who commented on that post about outbound tooling,
       qualify them against my ICP, and draft a first message for the
       best fits.

Agent: Pulled 41 commenters from public data. Scored them against your
       ICP (Series A to C, heads of growth or demand gen). 12 clear
       fits, 29 dropped. Drafting 12 openers now, one per person, from
       what each actually wrote in their comment.

You:   Show me the queue.

Agent: 12 drafts ready for your approval. Nothing has been sent. No
       LinkedIn account is connected yet, and none is needed to reach
       this point.

You:   [approve 9, edit 2, cut 1]

Agent: 11 approved. To send these I need a connected account. Sending
       is paced under your daily caps, not fired all at once. Want me
       to schedule the 11 or send now?

Notice what did not happen. The agent did not decide the messages were good enough to send. It did not touch your account to do the finding, qualifying, or drafting. It stopped at the queue and waited. The one out of twelve you cut is the one an autonomous sender would have delivered without you ever seeing it.

If you want to reproduce this exact flow, the connector setup and the tool surface are documented in the LinkedIn MCP server for Claude, and the step-by-step is in run BeReach from Claude.

Why the transcript is reproducible, and why that matters

A demo you cannot reproduce is a promise. A transcript you can run yourself is a product. BeReach's outreach agent is exposed as a 33-tool MCP connector at mcp.bereach.ai that runs inside Claude and Claude Cowork, across 135 API operations behind a single key. Because it is a standard connector, the session above is not a canned marketing script; it is a set of tool calls anyone can issue and watch happen turn by turn.

That reproducibility is the real answer to "can I trust an AI agent with my outreach." You do not have to trust the marketing. You watch it find, watch it qualify, watch it draft, and approve before anything moves. The agent proposes; you dispose. There is one included model, BeReach 1.1 Flash, so there is no key to bring and no model picker to misconfigure, which keeps the reproducible part actually reproducible across accounts.

What it costs and where to start

You can start with nothing connected and nothing paid: eight free finders cover the sourcing signals, and the agent itself has a free tier with a monthly credit allowance. Paid plans open the send step and more connected accounts, starting at EUR 99 per month on Pro with a short trial. Rather than quote every tier here, the current breakdown lives on the pricing page.

The summary is the one the market arrived at the hard way. An AI agent is a force multiplier for the find, qualify, and draft jobs, and a liability the moment it takes the human off the approve and send jobs. Pick the one that keeps you on the gate.