AI Outreach

Two AI Marketing Agents for Outbound and Organic Growth

Direct Answer

Cody Schneider demonstrates two useful marketing-agent patterns: use a fresh intent signal to prioritize outbound research, and turn approved internal conversations into a recurring organic content loop. The architecture is stronger than the headline. Deterministic code collects and cleans data; an LLM makes narrow judgment calls; a person controls contact, publication, and commitments; results return as structured evidence for the next run.

The first demo also exposes a serious implementation gap. Its source signal comes from scraping LinkedIn reactions and comments, then enriching those profiles and automating email and LinkedIn messages. LinkedIn's current agreement prohibits scraping and unauthorized automated messaging. Purchased contact data does not automatically establish consent or another lawful basis. The responsible build therefore keeps the signal idea but changes the default sources and permissions.

JQ AI SYSTEMS take: automate evidence collection, ranking, drafting, suppression, and reporting. Keep identity, permission, external sends, account access, and public claims behind a named human owner.

Watch the Full Episode

Video and framework credit: Greg Isenberg and the Startup Ideas Podcast; guest Cody Schneider. Follow Cody on X. This article uses the supplied transcript as the demonstration record and independently checks current product pages, platform terms, and official regulatory guidance as of 6 August 2026. It is operational guidance, not legal advice.

The Two Agents at a Glance

SystemInputJudgmentOutputPrimary risk
Signal outboundRecent category interest plus an approved prospect sourceICP fit, relevance, reply intentReviewed contact brief, draft message, CRM taskPlatform terms, privacy, unwanted contact, deliverability
Organic contentApproved calls, interviews, notes, and transcriptsInsight extraction, angle selection, adaptation to author voiceReviewed post, scheduled publication, performance memoryConfidentiality, invented claims, employee impersonation

They share the same control pattern: source, normalize, decide, draft, review, act, measure, learn. The difference is what leaves the system. Outbound creates a private contact decision. Organic creates a public statement attributed to a person. Both need provenance and approval.

Agent Versus Automation: Put the Model Only Where Judgment Lives

Cody's cleanest technical point is that an agent can be ordinary code running on a schedule with an LLM attached only where interpretation is needed. There is no benefit in asking a model to do a deterministic job badly.

StageUse code or rules forUse an LLM for
CollectionApproved API calls, timestamps, rate limits, source receiptsNothing unless a document needs semantic extraction
Data qualitySchema checks, deduplication, validation, suppression, retentionExplaining ambiguous records for review
QualificationHard exclusions, geography, role, company-size rulesEvidence-based fit score and reason
DraftingRequired disclosures, footer, opt-out, field limitsRelevant first draft grounded in approved evidence
ActionPermissions, daily caps, idempotency, audit logRecommend an allowed action, not bypass the policy
LearningEvent joins, metrics, experiment IDsSummarize patterns and propose the next test

Agent One: What the Signal-Based Outbound Demo Actually Does

The episode begins from a sensible observation: a recent like or comment on a relevant category post can reveal more current interest than static firmographics. Cody recommends monitoring roughly 10 to 20 creators or company pages in a category, which he describes as enough to cover much of its visible conversation. Treat that as his practitioner estimate, not a published market benchmark.

In the live workflow, API Maestro actors on Apify retrieve posts, reactions, and comments. A Claude Code script accepts a post URL, collects the records, and deduplicates public profile URLs. The demonstration returns 63 raw engagers from one post. Those URLs then enter a waterfall of enrichment providers, email verification, a sending platform, and an agent that interprets replies.

Creator or company post
  -> reactions and comments actor
  -> deduplicate profile records
  -> ICP fit check
  -> email / phone enrichment waterfall
  -> email verification
  -> cold email + automated LinkedIn DM
  -> reply agent
  -> meeting

This is a useful description of the demo, not a recommended production default. Apify labels the reactions actor as community-maintained. Technical access, public visibility, and a purchasable API are not the same as platform authorization, lawful processing, or permission to contact someone.

Where the Demonstrated Pipeline Crosses a Line

Claim or actionWhat the current source saysOperational decision
Scrape LinkedIn profiles, reactions, or commentsLinkedIn User Agreement section 8.2 prohibits software, scripts, robots, and similar methods used to scrape or copy profiles and other data.Do not make scraped LinkedIn engagement the default source.
Automate LinkedIn DMs or engagementThe same agreement prohibits bots or unauthorized automated methods used to send messages and create engagement.Use native/manual outreach or an explicitly approved LinkedIn product and current permission scope.
Buy a work email and add it to a newsletterData availability does not create consent or purpose compatibility. UK guidance says GDPR still applies to personal data in B2B marketing, while electronic-marketing rules vary by subscriber type and jurisdiction.Keep newsletter enrollment opt-in. Document source, purpose, lawful basis, notice, objection, and retention for any prospecting data.
Rely on CAN-SPAM as permissionFTC guidance applies to commercial email, including B2B, and requires truthful identity, non-deceptive subjects, a postal address, opt-out, timely suppression, and vendor oversight.Treat CAN-SPAM as a US compliance floor, not global consent or a quality standard.
Enrich mobile numbers and automate contactUS telephone and robotext rules can require prior express written consent for marketing to wireless numbers, with additional state and international rules.Exclude mobile outreach from the default build. Add it only after channel-specific legal review and documented consent.
The practical correction: a person showing category interest is a prioritization clue, not an invitation to scrape, enrich, and contact them everywhere. Keep the signal; replace the collection and contact path.

A Safer Signal-Based Outbound Architecture

Start from signals the business owns or is clearly authorized to use: a demo request, webinar registration with a disclosed follow-up purpose, newsletter reply, product-qualified event, event attendee list with appropriate notice, referral, inbound conversation, or a CRM record with a documented source. Public social activity can inform manual account research without becoming an automated contact list.

Approved first-party signal
  -> source receipt + purpose + jurisdiction
  -> suppression and previous-contact check
  -> deterministic ICP exclusions
  -> LLM fit score with cited evidence
  -> optional minimum-data enrichment
  -> verification and confidence labels
  -> draft one relevant message
  -> human review and send decision
  -> reply classification
  -> automatic opt-out suppression
  -> human-owned next step
  -> outcome written back to CRM
GateRequired evidenceStop condition
SourceWhere the record came from, when, and for what disclosed purposeUnknown, prohibited, or incompatible source
RelevanceOne current problem or intent signal tied to the offerOnly generic industry fit
PermissionJurisdiction and channel rule recorded; counsel-approved policy where neededUnresolved legal or platform basis
SuppressionNo unsubscribe, objection, complaint, customer exclusion, or active threadAny suppression match
MessageAccurate identity, evidence-backed relevance, no fabricated personalizationUnverifiable claim or sensitive inference
SendNamed reviewer, approved channel, daily cap, complete audit recordNo owner or cap exceeded

Waterfall Enrichment: Useful Mechanics, Narrow Data

Cody's proposed sequence moves from cheaper providers to more expensive fallbacks: GitLeads first, Apollo second, then Origami or Prospeo. LeadMagic appears as an additional mobile-number source, and MillionVerifier checks email status. In his illustrative walkthrough, 50 profile URLs produce 32 emails at the first step, 10 more at the second, and the remainder continue down the waterfall. That is an example calculation, not a measured coverage benchmark.

StagePurposeControl to add
Provider 1Try the lowest-cost approved sourceStore provider, timestamp, confidence, and permitted use
Provider 2+Fill only the fields still requiredStop after the minimum useful data; do not enrich by default
VerificationEstimate deliverability and catch-all riskDo not translate "valid" into "permitted"
NormalizationDeduplicate person, company, and active conversationsUse stable IDs and a cross-channel suppression table
RetentionKeep only what is needed for the documented purposeExpiry date, deletion job, access log, correction process

Phone enrichment should be a separate, disabled-by-default branch. It raises a different consent and intrusion profile than a business email and should not run simply because another provider returned no address.

The $200 per Month Figure Is Infrastructure, Not Unit Economics

Cody estimates roughly $100 per month for dedicated sending infrastructure capable of around 10,000 emails, plus Instantly's roughly $97 plan: about $200 per month. That is a creator-reported snapshot of one configuration. It excludes several costs that determine whether the system is economically or reputationally sensible.

Cost layerIncluded in the headline?What to measure
Sending platform and inbox infrastructureMostlyMonthly platform, domains, mailboxes, placement tests
Source collection and enrichmentNoCost per approved, usable record
Verification and data cleanupNoCost per non-suppressed, deliverable address
LLM and workflow executionNoCost per reviewed draft and classified reply
Human research and approvalNoMinutes per accepted contact and response
Privacy, legal, security, and vendor reviewNoPolicy ownership and recurring audit cost
Reputation and opportunity costNoComplaints, blocks, negative replies, lost relationships

Do not optimize for emails sent. Report cost per accepted prospect, qualified conversation, meeting held, opportunity created, and customer won, alongside objection, complaint, bounce, and suppression rates. A cheap system that creates distrust is expensive.

A Reply Agent Should Draft, Classify, and Stop

May do automaticallyRequires human approvalMust suppress or escalate
Classify positive, neutral, objection, referral, out-of-office, unsubscribeSend an external responseUnsubscribe, stop, not interested, complaint
Draft a short response from approved factsCommit price, timeline, scope, refund, or legal positionSensitive data, threat, regulator, journalist, legal request
Suggest the next CRM stage and ownerBook a meeting or add another personWrong person, deceased person, protected or vulnerable context
Apply an approved suppression rule immediatelyOverride suppression or contact through another channelAmbiguous intent below the confidence threshold

Every classification should preserve the original message, model version, chosen label, confidence, policy result, and reviewer correction. Those corrections become the evaluation set. Raw reply volume is not the learning loop; reviewed decisions are.

Agent Two: The Organic LinkedIn Content Engine

The second architecture is more durable. Cody starts from conversations that already contain real expertise: weekly employee interviews, sales calls, podcast transcripts, approved Slack discussions, Notion documents, or a codebase. The system extracts specific observations, drafts posts for each team member, sends them through an approval workflow, schedules them in Ordinal, and reads performance back.

Approved conversation or transcript
  -> source ownership and consent check
  -> redact confidential and personal data
  -> extract claims, examples, and quotable insights
  -> preserve evidence links and speaker identity
  -> propose angles for the right author
  -> draft in that author's reviewed voice
  -> factual, legal, and brand review
  -> author approval
  -> authorized scheduler or native publish
  -> post-level analytics + qualified conversations
  -> reviewed learning memory
  -> next topic or responsible remix

Ordinal currently documents account authorization, scheduling, approvals, and analytics for personal and company LinkedIn profiles. LinkedIn also exposes official post APIs, although some marketing permissions are restricted to approved users. Use the permissioned path supported by the current account and provider; do not assume every automation feature is allowed forever.

Cody describes recycling winning ideas on roughly a 90-day cadence. That can work when the insight remains accurate and the new version adds context. Blindly reposting the same claim is not a learning system. Store why the original worked, what changed, and which audience response justified the adaptation.

The Organic Agent Needs a Source Policy, Not Just a Style Prompt

ControlMinimum ruleFailure it prevents
Approved source listName the channels, projects, calls, and owners the system may readTurning private work into training or marketing material without permission
Participant awarenessExplain recording, transcription, reuse, retention, and opt-outSurprise publication and trust loss
RedactionRemove customer identifiers, credentials, contracts, private HR, health, and financial dataConfidentiality and privacy breach
Claim provenanceLink every number, quotation, result, and product claim to its sourceConfident fabrication
Author approvalThe named person approves the final text and mediaEmployee impersonation
Learning memoryStore approved themes and reviewer corrections, not unrestricted raw conversationsPermanent sensitive-data accumulation
Performance reviewMeasure qualified replies, profile visits, assisted pipeline, and correctionsOptimizing for outrage or empty reach

Cody provocatively says the social media manager is dead. A better conclusion is that the role moves upward. Source governance, editorial taste, claim review, author coaching, channel judgment, and learning design matter more when drafting becomes cheap.

A 14-Day Pilot for Both Systems

Days 1-3: define sources and permissions

  • Choose one owned signal source for outbound and one approved transcript source for organic content.
  • Write the allowed purpose, jurisdiction, retention period, owners, approval points, and stop conditions.
  • Create one suppression table shared across every outbound channel.

Days 4-6: run read-only

  • Have the outbound system produce five prospect briefs without contact or phone enrichment.
  • Have the content system extract five candidate insights with source quotations and confidentiality labels.
  • Score factual accuracy, relevance, source quality, privacy, and reviewer time.

Days 7-10: permit drafting

  • Draft at most one message for each accepted prospect; do not send automatically.
  • Draft one post for each participating author; require tracked edits and explicit approval.
  • Turn reviewer corrections into a small evaluation set.

Days 11-14: run a bounded live test

  • Use a tiny, counsel- and policy-approved outbound sample with named human sends.
  • Publish one approved post through a current authorized path.
  • Review qualified conversations, corrections, objections, suppressions, publication time, and any negative signal.
  • Expand only the stage that met its acceptance threshold without a control failure.

Copy-Ready Operating Contracts

Signal-based prospecting contract

Objective:
Prioritize a small set of relevant, approved prospects for human review.

Allowed sources:
[first-party form, CRM, event, referral, product event]

Required fields:
source, date, disclosed purpose, jurisdiction, company, role,
relevance evidence, suppression result, confidence, reviewer

Model tasks:
1. Score fit only from supplied evidence.
2. Cite the evidence for every score.
3. Draft one message only after the record passes all gates.
4. Mark unknowns; never infer sensitive traits or fabricate context.

Disallowed actions:
Scrape platform data, automate social messages, enrich mobile numbers,
add anyone to a newsletter, bypass suppression, or send externally.

Success:
Accepted prospect briefs and qualified human-approved conversations,
with zero unresolved source, suppression, or identity failures.

Source-backed content contract

Objective:
Turn approved expert material into reviewable posts without impersonation.

Allowed sources:
[named calls, transcripts, documents, channels, owners]

Before drafting:
1. Confirm the source is approved for marketing reuse.
2. Redact private, customer, credential, HR, health, and financial data.
3. Extract claims with source locations and confidence.

Draft rules:
- Preserve the author's actual point of view.
- Do not invent stories, numbers, quotes, or customer outcomes.
- Label uncertain claims for review.
- Use one clear idea and one evidence-backed example.

Publication rule:
The named author must approve the final copy and media.

Learning rule:
Store reviewer corrections, approved themes, and post outcomes.
Do not retain unrestricted raw conversations as a permanent memory.

Video Chapters

TimeTopic
00:00Marketing agent overview
02:27Agent one: cold outbound
04:26Finding category creators on LinkedIn
09:09Apify and API Maestro actors
10:59Extracting engagers in Claude Code
12:59Agent versus automation
15:45GitLeads, Apollo, Origami, and Prospeo waterfall
17:13Compliance and data-broker claims
21:40MillionVerifier and LeadMagic
25:38Sending infrastructure and costs
28:33Software factories and marketing as code
31:41Agent two: organic LinkedIn content
39:34Earned media and distribution
42:31Closing thoughts

Bottom Line

The episode's strongest idea is not "send more." It is marketing as a measured software system: fresh evidence enters, deterministic stages keep it clean, the model makes bounded judgments, a person controls consequential action, and outcomes return as memory.

For outbound, replace scraped engagement and automated multichannel contact with authorized signals, minimum-data enrichment, suppression, and human sends. For organic content, protect the source material, prove every claim, preserve the author's agency, and learn from qualified response rather than vanity reach. Those changes make the agents less theatrical and far more usable.

Sources and Tool Map

Common questions

What is a marketing agent?
A marketing agent is a recurring system that reads approved data, applies a defined decision policy, uses tools within a permission boundary, and measures the outcome on a later run. The LLM should handle judgment-heavy steps; deterministic code should handle collection, deduplication, verification, suppression, logging, and limits.
Is scraping people who engage with LinkedIn posts allowed?
LinkedIn's current User Agreement prohibits software, scripts, robots, and other methods used to scrape or copy profiles and data, as well as unauthorized bots for messages and other engagement. A third-party actor being technically available does not mean LinkedIn has authorized the use. Review the current agreement, provider terms, and applicable law before processing any data.
Does buying or enriching a work email make outreach legal?
No. A returned or verified address says nothing by itself about consent, lawful basis, transparency, purpose compatibility, platform rules, or whether contacting the person is appropriate. Requirements differ by jurisdiction and channel, and objections must be respected.
What does email verification actually prove?
Verification estimates whether an address is technically deliverable or risky. It does not prove that the person is the right prospect, that the data is accurate in every respect, that the message is wanted, or that the sender may lawfully use the address.
Can an AI agent send cold email replies autonomously?
A safer first version classifies replies, applies suppression immediately, drafts a response, and suggests a next step. A person approves external messages, commitments, pricing, legal claims, calendar bookings, or any response where intent is uncertain.
How should an organic LinkedIn agent use employee calls and Slack?
Only from an approved source list and with participant awareness. Redact customer data, confidential plans, credentials, health or financial information, and private employee discussion. Each named author should review and approve the final post rather than letting the system impersonate them.
What should these marketing agents optimize?
The outbound system should optimize for qualified, permission-respecting conversations and opportunities, not volume sent. The organic system should optimize for approved publication, useful audience response, qualified conversations, and evidence-backed learning, not impressions alone.
Share
X LinkedIn Reddit
Build Yours

Want a system
like this one?

Book a free 30-minute call. We map your situation, identify the highest-impact automation, and figure out if we are a fit.

Book Free 30-min Call