Meta launched Muse on September 8, a personal AI agent that connects to a user's email, calendar, payment methods and everyday apps in order to complete multi-step errands on their behalf. It is the company's largest consumer AI bet so far, and it arrives less than two weeks after Meta agreed to an $18 billion multistate settlement over social media harms.
Key takeaways
- Muse is live in the US on the web, iOS, Android and inside WhatsApp chats, with Meta's AI glasses to follow.
- Pricing is a free tier plus two paid plans, Power at $20 a month and Maximum at $100 a month, and a payment card is required even to start on the free tier.
- Meta says Muse runs inside a dedicated virtual machine with its own browser and never sees a user's passwords or payment credentials.
What Muse actually does
The pitch is execution rather than conversation. Meta describes an agent that sends emails, books travel, fills out forms, negotiates lower bills, builds plans, turns a recipe reel into a grocery list, issues party invitations and completes purchases through Link by Stripe. Shop Pay and 1Password integrations are listed as coming soon.
It runs on Muse Spark, Meta's latest model, and ships with built-in connectors for a set of common services. Users opt in to each connection one at a time rather than granting blanket access. Where a service Meta has not integrated exposes a public API, Muse can wire up a connection using credentials the user supplies; where there is no API at all, it falls back to driving a browser. The agent keeps working after the app is closed, and Meta says it will learn from conversations over time and begin making unprompted suggestions.
Users can name the agent, pick its avatar and tune how it communicates β a deliberate attempt to make an AI agent with deep account access feel like a familiar assistant rather than a process running somewhere in Menlo Park.
How Meta is framing the security question
The architecture Meta published alongside the launch is the more interesting part. According to the company's Muse overview, the agent operates inside what it calls Muse Secure VM, a dedicated environment with its own browser. A separate process, Sentinel, runs on the same virtual machine but is isolated from Muse at the system level. Meta's stated result is that Muse has no visibility into passwords or payment methods, and that conversations and agent data are not shared with its advertising systems. Meta AI chief Alexandr Wang has described the arrangement as an isolated environment that never sees actual credentials.
Those are claims, not audits. Security researchers have not yet had time to probe the boundary between Muse and Sentinel, or to test what a prompt-injection attack reaches when the agent is mid-checkout in a browser session.
Whether consumers will hand over the keys
Meta's harder problem is history, as TechCrunch noted in its launch coverage. The company settled with the FTC in 2011 over making private information public, paid a then-record $5 billion penalty in 2019, was charged with violating that same privacy order in 2023, stored user passwords in readable form, and remains the defendant of record in the long tail of Cambridge Analytica. A New Mexico judgment over child safety ran to $942 million.
An agent that books flights and pays for them requires more trust than a feed ever did, and Meta is asking for it at an awkward moment.
Outlook
Muse lands in a crowded field. Gemini Spark and Claude Cowork are chasing the same consumer-agent slot, and the underlying plumbing problem β how an AI assistant holds state across long-running, multi-service tasks β is the same one driving recent changes to the Model Context Protocol. Distribution through WhatsApp is Meta's genuine edge here. Whether that is enough to overcome the trust deficit is the question the next two quarters will answer.
FAQ
Is Meta Muse free?
There is a free tier, but it is metered and Meta requires a payment card to get started. Paid plans are Power at $20 a month and Maximum at $100 a month, and the app shows a usage meter plus a warning when free usage runs out.
Where can I use Muse?
Muse is available in the United States on the web, through iOS and Android apps, and inside WhatsApp chats. Meta says support for its AI glasses is coming, but has not given a date.
Can Muse see my passwords?
Meta says no. The agent runs inside a dedicated virtual machine called Muse Secure VM with an isolated Sentinel process, and the company states Muse has no visibility into passwords or payment methods. Independent security review of those claims has not yet happened.
