Meta Muse Explained: What Meta's Personal AI Agent Does, What It Costs, and Whether to Trust It

Muse is the most ambitious thing Meta has shipped in AI: an agent that reads your email, holds your payment details and acts for you, from the company that has spent years being asked to collect less personal data. It also took off faster than almost anyone expected.

This guide covers what Muse does, how its sandbox and approvals work, what it costs, where it's available, the privacy trade-offs, how it compares with Grok Bot and OpenAI Dots, and what businesses and website owners should do about it. The companion guide covers Grok Bot in the same depth.

1. What is Meta Muse?

Meta Muse is a personal AI agent from Meta, launched on 8 September 2026, that carries out digital tasks on your behalf, using its own cloud computer, your connected accounts and a built-in browser. Meta's description is that Muse "doesn't just answer questions, it actually does the work". Reported (TechCrunch)

At launch, Meta said Muse could send emails, book travel, lower bills, fill out forms, build plans, turn recipe reels into grocery lists and send party invitations. It connects to email, calendars and payments, and to apps for health, smart home, dining, shopping, music and events. CNBC reported it can also watch home security camera feeds. Reported

Muse is separate from the Meta AI chatbot in Facebook, Instagram and WhatsApp. Meta AI answers. Muse acts, keeps working after you close the app, and checks back in when something changes or it needs your approval. Reported

2. How big is Muse already?

• No. 2 in the US App Store within two days of launch. Reported (TechCrunch)
• Over 3.4 million downloads after Meta promoted it at Connect on 23 September, up from about 2.5 million. Reported (TechCrunch)
• More than 1,500 developer applications to build connectors in under a week, according to Meta's Alexandr Wang. Reported

That makes Muse the first consumer agent at real scale that isn't ChatGPT. Downloads are not the same as retention, and the numbers that will matter come later. Speculation

3. How does Muse work?

Every Muse user gets an isolated Linux virtual machine in Meta's cloud, which Meta calls Muse Secure VM. The agent works inside a locked-down compartment on that machine, and a separate program called Sentinel decides what it is allowed to do. Meta designed it on the assumption that "the agent may be under attack", so mistakes are contained rather than prevented. Confirmed (Meta engineering)

The sandbox

The agent, its files and its tools run in a restricted container with limited system access. Meta's own description: "two isolated security domains on one box, not an LLM powered agent with root." Safety classifiers, credential storage and the permission system all run outside that container, so the agent cannot switch them off. Confirmed

Sentinel, the gatekeeper

Muse proposes actions; only Sentinel approves them. It checks every connector action against your settings and every outgoing network request, and tracks when a process has read your data, so it can ask before that data leaves the machine. Confirmed

Your passwords never reach the AI

Code inside the agent's compartment only ever sees stand-in tokens. Sentinel swaps in the real credential at the network boundary: "The agent never sees real tokens." The email connector also strips one-time passcodes, password-reset links and magic login links before Muse reads anything. Confirmed

Approvals you can scope

When Muse needs permission, it pauses and shows a dialog outside the chat, so a malicious web page can't fake an approval. You can grant permission once, for a session, for a task, for a set time or permanently, and later requests must match that grant exactly. Confirmed

The browser

Muse drives a real, up-to-date Chromium browser that you can watch and take over at any time. A dedicated browser sub-agent reads an accessibility-tree snapshot of each page rather than its raw code, cannot run its own JavaScript, and has developer tools disabled. Classifiers check pages, images and downloads for hidden instructions and risky form submissions. Confirmed

Buying things

Every purchase with saved payment details needs your approval, showing the exact amount each time. The wallet, Stripe Link at launch with Shop Pay coming, issues single-use card numbers tied to one merchant, one amount and a short time window. Confirmed

Meta also runs a bug bounty for Muse paying up to $300,000, including up to $130,000 for a successful prompt-injection attack against one user. Confirmed

4. Every Muse feature, launched and announced

Feature details are from TechCrunch's Connect roundup, Meta's Connect recap and Meta's engineering post. Announced features have no firm dates unless shown.

5. The model behind Muse: Muse Spark

Muse runs on Muse Spark, the model family from Meta Superintelligence Labs that Meta introduced on 8 April 2026 and that also powers the Meta AI assistant. Muse Spark 1.3, released in early September, improved coding and agentic tasks, and Meta says it is "close to SOTA" on resisting prompt injection. Confirmed (Meta, Axios)

Developers can use the same models through the Meta Model API and Muse Code, Meta's tool for long-running, multi-agent workflows. Confirmed

6. How much does Muse cost, and where can you get it?

Muse has a free tier with usage limits and two paid plans, reported at $20 and $100 a month, which buy more usage rather than extra features. Mark Zuckerberg said Muse would be free for a large amount of use, with Meta expecting to make money later from a small fee on transactions. Reported (CNBC)

The prices are widely reported. The plan names and token allowances come from secondary coverage, and Meta has not said how many finished tasks a token allowance buys. Treat them as approximate. Reported

Where it works: Muse launched in the US for people 18 and over. It is available on iOS and Android, on the web at muse.ai, through WhatsApp, on Mac since 17 September and on iPad. Some coverage says Canada and Mexico have since been added. Meta has not announced dates for the UK, the EU, India or Australia. Reported

7. Muse for businesses

• Muse for Small Business (29 September): free with usage limits, with connectors for Shopify, Dropbox, Slack, Asana, Canva, Figma, QuickBooks, Klaviyo, Notion, Stripe and Zoom. It asks before publishing, messaging or spending. Reported (TechCrunch)
• Meta Enterprise Platform (28 September): a new unit led by former MongoDB CEO CJ Desai, selling Muse, Meta Business Agent, the Muse API and Muse Code to companies. No prices yet. Reported
• Connectors: a service plugs its API into Muse so the agent uses it directly instead of driving the website. Meta reviews every submitted connector. It does not review custom connectors that users build themselves. Confirmed

8. Is Muse safe? Privacy and data, plainly

Muse is engineered more carefully than most consumer agents, but three facts matter before you connect your accounts: training is on by default, Meta can still access your data to run the service, and Muse has already made at least one disputed permission mistake.

• Ads: Meta says Muse conversations and data in your VM are not shared with its ad systems. But sites Muse visits and purchases it makes count as your own activity, so they "may indirectly affect ads". Confirmed
• Training: conversations are stripped of key personal information and used to train Meta's models unless you opt out in settings, reported as Settings, then Data controls, then "Help improve our AI models". Meta has not said whether opting out removes data already used. Confirmed
• Meta's own access: Meta's write-up says its design "does not prevent Meta from accessing data when necessary to support, secure or operate the service." The Confidential VM, meant to make that cryptographically impossible, is still in testing. Confirmed
• The Mac notification incident: tech columnist Jason Aten reported on 19 September that Muse used the content of his Mac notifications without telling him. Meta disputed his account and said the model gave a wrong explanation of what happened. Reported (RuntimeWire)
• Disconnecting isn't deleting: removing a connector stops new data, but what Muse already learned can stay in its memory until you edit or delete it. Reported

Sensible settings: turn off model training if you don't want it, start with read-only connectors, keep approval on for anything that sends, pays or publishes, review Muse's memory every few weeks, and on a Mac leave Full Disk Access off unless you have a reason. How to run a computer-use agent safely goes deeper. Speculation

9. Meta Muse vs Grok Bot vs OpenAI Dots: what separates them

All three are always-on agents with their own computer. Muse is the consumer one, free to start and built around your personal life and shopping. Grok Bot is built for work teams. OpenAI Dots are for ChatGPT's most expensive plans.

For the other two in full, see the Grok Bot guide and what OpenAI Dots are.

10. How to get your business found and chosen by Muse

Meta publishes no Muse crawler, user agent or robots.txt rule. When Muse browses, Meta says "it will appear as your activity", so to your website a Muse visit looks like an ordinary person using Chrome. That changes what "optimising for Muse" means. Confirmed

What is grounded

• Muse reads the accessibility tree. The browser sub-agent sees a structured snapshot of your page's labelled elements, the same information a screen reader uses. Unlabelled buttons and form fields are hard for it to use.
• Connectors beat browsing. Partner services get API connectors; everyone else gets the browser path. A connector is the most reliable way to be used by Muse. Meta is accepting developer applications.
• Meta's documented crawlers are separate. Meta lists tokens such as meta-webindexer for Meta AI citations and meta-externalagent for training. Blocking training does not have to block citations. Reported (analysis of Meta's documentation)

What to do

1. Label everything. Real <button> elements, <label>s on every form field, clear link text. It helps screen-reader users and agents equally.
2. Make checkout and booking agent-friendly. No dead-end pop-ups, no CAPTCHA on the first page view, and prices and stock visible in the page itself.
3. Keep product facts consistent. The same price and availability in your page, your structured data and your Shopify or Merchant feed, because Muse can use the Shopify catalogue directly.
4. Fix your link previews. Muse lives inside Meta's apps, where links travel as Open Graph previews. Use an absolute og:image about 1200 by 630 pixels.
5. Write answers an agent can act on. Opening hours, prices, policies and booking steps in plain text near the top of the page, not hidden in images or PDFs.
6. Consider a connector if you run a booking, ordering or SaaS product with an API.

The full checklist is in is your website agent-ready. For shops specifically, see eCommerce SEO for AI shopping agents.

11. Frequently asked questions

What is Meta Muse?

Meta Muse is a personal AI agent from Meta, launched in the US on 8 September 2026. It carries out tasks for you, such as sending email, booking travel, filling in forms, paying bills and shopping, using a private cloud computer with its own browser. It runs on Meta's Muse Spark models and asks for approval before sensitive actions.

Is Meta Muse free?

Meta Muse has a free tier with usage limits. Paid plans are reported at $20 and $100 a month, giving more usage rather than extra features. Mark Zuckerberg said Muse would be free for a large amount of use, with Meta expecting to earn a small fee on transactions instead.

Where is Meta Muse available?

Meta Muse launched in the United States for adults aged 18 and over, on iOS, Android, the web at muse.ai and WhatsApp, with a Mac app since 17 September 2026 and an iPad app. Some coverage reports Canada and Mexico have been added. Meta has not announced dates for the UK, the EU, India or Australia.

How does Meta Muse keep my data safe?

Each user gets an isolated cloud virtual machine. The agent works in a restricted compartment, never sees your real passwords, and a separate program called Sentinel must approve any action or data that leaves the machine. Purchases use single-use card numbers and need your approval each time. Meta says chats are not shared with its ad systems.

Does Meta train AI on my Muse conversations?

Yes, by default. Meta strips key personal information from Muse conversations and uses them to train its models unless you turn off the "Help improve our AI models" setting. Meta has not said whether opting out removes data that has already been used for training.

What is the difference between Meta Muse and Grok Bot?

Meta Muse is a personal agent for everyday tasks and shopping, with a free tier, a built-in wallet and support for Meta's glasses and the Muse Charm device. Grok Bot, from SpaceXAI, is built for work teams, with several coordinating agents, workflow learning and shared Team Bots in Slack, starting with SuperGrok at about $30 a month.

What is Muse Charm?

Muse Charm is a palm-sized device Meta announced at Connect on 23 September 2026 for talking to the Muse agent without a phone. It came out of Meta's design lab led by former Apple interface chief Alan Dye and ships in December 2026. Meta has not announced a price.

How do I get my website used by Meta Muse?

Muse browses with a real Chromium browser as the user and reads pages through their accessibility tree, so label every button and form field, keep prices and booking steps visible in plain text, and keep product data consistent with your feeds. Businesses with an API can apply to build a Muse connector, which Meta reviews.

Work with me

Get ready for customers who send an agent

I'm Jayant Solanki, an SEO, GEO and automation strategist. I make sites, product data and booking flows that agents like Muse can read and finish on, and humans still enjoy.

Book a technical review →

Ranked #1 for "metal buildings" · +30% YoY organic traffic · Evidence-labelled research

Sources

• Meta, How we built safety into Muse (Tarek Sheasha, 8 September 2026)
• Meta, Everything we announced at Meta Connect 2026
• Meta, Introducing Muse Spark (April 2026)
• TechCrunch, Meta debuts its Muse AI agent, No. 2 app in the US, everything new coming to Muse, 3.4 million downloads and Muse for small businesses
• CNBC, Meta pushes into personal AI agents
• Axios, Meta debuts Muse Spark 1.3
• RuntimeWire, Muse used Mac notification content without disclosure, tester says
• Search Engine Journal, Meta published 2 documents about Muse (Slobodan Manic)
• jwatte.com, Is your site ready for Meta Muse? What Meta actually documents

Editorial note: this guide is based on Meta's published materials and named coverage. It does not claim hands-on testing of Muse, which is not available outside its launch countries. Prices and availability reflect 9 October 2026 and will be updated as Meta changes them.

Jayant Solanki

AI-Ready SEO, GEO & AIO strategist based in Indore, India, working with eCommerce, local-service and global brands across India, the UAE and the US. This page is maintained and will be updated as Muse expands to new countries and devices.

Google Analytics Certified (2026–2027) · verify

More about Jayant →