Apple opens Siri AI developer preview to custom app actions Apple opens Siri AI developer preview to custom app actions

Custom operations become assistant tools

Apple’s implementation guide adds a tool annotation to an eligible custom App Intent. An intent already exposed through a Siri-compatible schema needs no extra annotation. A configuration-only intent cannot become a tool without an operation to perform. The distinction separates an app’s executable capabilities from metadata used to configure interfaces.

Testing starts inside the development team

Apple’s preview guide limits distribution to development-signed Xcode builds and internal TestFlight testers. External TestFlight testers and App Store versions cannot use these new integrations. The device must support Apple Intelligence. There is no separate developer program or new entitlement to obtain. Requests also depend on context. In the background, the person names the app; that is unnecessary when the app is foregrounded, has an active Live Activity, or the user continues a Siri conversation that already names the app. The guide describes custom content moving between apps and appearing in developer-provided card snippets. These are explicit integrations: Siri only accesses the content and actions the app exposes.

Skills guide a model, not a script runner

The skills guide describes one skills bundle per app target, containing a separate Markdown file for each skill. Each file has a name, description and instruction body. Xcode validates and compiles the bundle, then the device indexes it. Siri first matches the metadata to a request and reads the instructions after selecting a skill. Supporting scripts and reference files are not accepted. A skill can explain which operation to prefer, what to avoid and which questions need clarification. Apple explicitly says this guidance cannot enforce deterministic behavior or make Siri execute a listed sequence in order.

Private fields need explicit protection

The custom-actions guide distinguishes an exposed operation from the information it returns. Developers mark eligible intents as tools and supply descriptions for their parameters. Presenting entity information requires no authentication by default. An entity-level policy can protect the whole entity, while individual properties can have their own requirements. Property policies apply to Siri responses; sensitive intent results need authentication on the intent itself. Internal visibility hides a property from Siri, Shortcuts and other system features. For cross-app tasks, custom entities also need transferable representations that the receiving app can handle.

Preview access does not settle the launch terms

Apple says customers will receive the new integrations in a few months, with App Store submissions opening in spring. Terms and usage policies for these experiences will follow. Siri AI excludes under-thirteen users and remains unavailable in the European Union on iOS, iPadOS and watchOS. Server-model features have variable daily limits; expanded paid access is planned, without a price here.