Meta Muse: capabilities, permissions and availability of the personal AI agent
Meta launched Muse on September 8. Explore its virtual computer, WhatsApp integration, purchase approvals and small-business connectors, with confirmed details and announced features clearly identified.
View the original post ↓Launch, VM design and connectors verified with Meta’s official publications. Planned features are identified; unsupported price and token claims are excluded.
On 8 September 2026 Meta launched Muse, a personal agent that takes tasks across apps the person already uses. The product URL in the rollout is muse.ai. The newsroom post is the source of record. Meta Newsroom’s own line that day: Muse doesn’t just answer questions, it does the work. [1]
Meta presents Muse as a personal agent built for broad distribution. Its launch brings the product to the Muse app, web and WhatsApp, with an expansion to AI glasses announced for later. The claim that it is the world’s first belongs to Meta’s positioning; this article evaluates its documented capabilities. [1]
This note is about the agent. Muse Spark and Muse Image share the name and are different products. [1]
Three Muses
| Name | What it is | When |
|---|---|---|
| Muse Spark | The language and multimodal model; Spark 1.1 powers expanded Meta AI task capabilities in July. | April 2026, then 1.1 in July |
| Muse Image and Muse Video | Media model family. Muse Image launched in Meta AI; the July announcement describes Muse Video as in development. | 7 July 2026 |
| Muse, the agent | The product at muse.ai. A thread you message. It acts | 8 September 2026 |
Meta says the agent is powered by Muse Spark. Spark is not the download. A picture coming out of Meta AI is Muse Image. A thread that booked a table is the agent. [1]
What it does
You message it in the Muse app or in WhatsApp. It runs on Muse Secure VM, a dedicated virtual machine that holds the agent and that person’s data, with its own browser. Meta’s design is that no other person’s agent can reach that machine. [1]
The person picks which apps it connects to, and how far. For email, read and send are separate grants. Credentials go into storage Muse can use without seeing them. Meta says Muse cannot see passwords, including ones typed into the browser. A Sentinel agent sits on the same machine, apart from Muse. Nothing reaches the internet unless Sentinel approves it. Sending an email or paying waits for the person. There is an audit trail of what it did and what it plans. [3]
Checkout is Link by Stripe. Meta says Muse is the first AI agent covered by Link’s purchase protections: damaged or lost items, price drops, no-fee returns, and a guarantee on eligible purchases. The wallet issues a one-time card so the real card stays hidden. Shop Pay is listed as coming soon. [1]
Meta states that conversations and data inside Muse’s VM are not shared with its advertising systems. The official announcement describes a free offering and paid subscriptions for heavier use. Check the current plans in the app or Meta’s subscription help; this article does not treat reported prices or token caps as confirmed terms. [1]
Muse remembers what matters, and the person can tell it to forget a specific thing. Meta says it will introduce Muse Confidential VM later this year: the whole machine encrypted with a key only the person holds, so not even Meta can access it. That is a stated plan, not a switch that is on today. [1]
Where it is, and what it costs
The 8 September post says Muse is rolling out in the US on iOS, Android and muse.ai, and coming soon to AI glasses. The 29 September small-business post describes the personal agent as available in the US and Canada. [2]
At Connect on 23 September Meta showed the next layer, not a second product: a voice mode that keeps working in the background while you talk, a realtime avatar, and Muse on the glasses in the coming months, triggered by the agent’s name and able to act on what you are looking at. Coming months is not in the glasses today. [7]
Small business, same agent
On 29 September Meta added Muse for Small Business: skills and connectors inside the same agent. The published list is Asana, Box, Canva, Dropbox, Figma, Granola, HighLevel, Intuit QuickBooks, Klaviyo, Lovable, Notion, Shopify, Slack, Stripe, Zoom, plus Facebook and Instagram business accounts. [2]
Nothing publishes, sends, or spends without approval. A Klaviyo or Shopify connector is not permission to send the campaign. [1]
Next to dots
For another approach to persistent agents, see our article about dots and GPT-6 Astra. When comparing products, evaluate available integrations, permissions, geographic availability and the work you can audit. A paid plan alone does not establish which agent is better for your workflow. [1]
The control claims above are Meta’s published design, including the safety note from AI at Meta. A design is not a guarantee that the gate always fires. [1]
Frequently asked questions
Is muse.ai a model?
No. It is the agent. The model under it is Muse Spark. Muse Image is the picture model, shipped in July on meta.ai. [1]
Is it available outside the US?
The 8 September post says the US. The 29 September post says the personal agent is in the US and Canada. Glasses are coming soon or in the coming months, depending on the post. [2]
Can it spend money?
It can check out with Link by Stripe after a confirmation. Meta says it is the first agent covered by Link’s purchase protections. Shop Pay is not in yet. [1]
Is the private VM live?
Muse Secure VM is what it runs on now. Muse Confidential VM, encrypted with a key only the person holds, is planned for later this year. [1]