Overview
Meta Muse is the personal AI agent Meta launched for US users on September 8, 2026, led by chief AI officer Alexandr Wang and built by Meta Superintelligence Labs (MSL). It lives in a persistent chat interface: through the dedicated app, on the web at muse.ai, or directly inside WhatsApp, you give it instructions and it opens a browser inside a cloud virtual machine to carry out real tasks such as shopping, booking movie tickets, reserving restaurants, sending emails and filling forms, then comes back to you when a task finishes or needs authorization.
On September 17, 2026 Meta released Muse for Mac, extending execution from the cloud onto the user's own computer. With explicit user authorization Muse can now carry out tasks directly on the machine; Meta's examples include tidying up the Downloads folder, finding lost files, and summarising messages and notes, with more capabilities promised over time. The significance is that tasks are no longer limited to what a browser can do, since local files and applications fall within reach. Running on the local machine also means the authorization boundary is the user's to hold, and Meta stresses that every action requires explicit permission.
What sets Muse apart from ordinary chatbots is its always-on, long-running nature. Tasks keep running in the cloud after you close the app, and it returns proactively when there is progress or when your approval is needed, such as before sending an email or completing a purchase. Its built-in browser is visible to you, and cross-app memory means a recipe video you saved on Instagram can be turned into a shopping list automatically, while dietary restrictions you mentioned are factored into later dinner invitations. Under the hood it is powered by Meta's latest flagship model, Muse Spark.
Security is the headline of this release. Muse runs in a MuseSecureVM that isolates each user's workspace, every outbound action passes through the Sentinel system which either matches an authorized policy or asks you for approval, and the agent cannot override Sentinel. Purchases go through Stripe's Link single-use card numbers, so the agent never touches your real card details. Meta plans to ship a confidential, end-to-end encrypted VM before the end of the year. Commercially, Muse offers a free tier plus $20 and $100 monthly subscriptions with no advertising; Meta's longer-term ambition is to bring Muse to the billions of users across Instagram, Facebook and WhatsApp, and later to its AI glasses.
Key Features
- On-device execution (Muse for Mac): Runs tasks directly on a Mac with explicit user authorization, tidying the Downloads folder, finding lost files and summarising messages and notes, extending reach from the cloud browser to local files and applications.
- Always-on persistent tasks: Tasks keep running in the cloud after you close the app and only return when finished or when authorization is needed, suiting multi-step goals that span days.
- Built-in visible browser: Executes real web operations such as searching, opening pages, filling forms and completing purchases in a browser you can watch, rather than staying at the chat layer.
- Cross-app memory and connection: A recipe saved on Instagram can turn into a shopping list automatically, and preferences mentioned once are remembered for later tasks, such as avoiding a friend's dietary restrictions.
- MuseSecureVM privacy isolation: Each user's workspace runs in its own virtual machine, data is not shared with Meta's advertising systems, and queries can be excluded from being used by Meta.
- Sentinel action approval: Every read/write action against the outside world is matched against permission policies first; sensitive actions are routed to the user, and the agent cannot override Sentinel.
- Ecosystem connectors: Ticketmaster, OpenTable and Google Gmail, Calendar and Drive are integrated, and custom connectors can be built for any service that offers an API.
Use Cases
- Local file housekeeping: clearing out a cluttered Downloads folder, recovering deleted or misplaced files and gathering notes scattered across apps
- Everyday chores: booking tickets, ordering food, shopping and filling in school permission forms, delegated with a single instruction
- Shopping and payments: purchases complete through Stripe Link single-use cards so real payment details never reach the agent
- Multi-day tasks: work continues after you close the app and reports back when progress is made or approval is required
- Instagram and WhatsApp power users: saved content turns into to-dos and mentioned preferences are remembered and applied
- Cross-service research: with Gmail, Calendar and Drive connected, the agent executes coherent tasks across Google services
Pros
- Muse for Mac extends execution from the cloud browser to local files and applications, covering housekeeping work a browser cannot reach
- Free tier covers most everyday tasks, so the core experience can be tried at no cost
- Deep integration with WhatsApp and Instagram means the entry point is a habit users already have
- Always-on tasks with a visible browser handle real web operations, not just conversation
- The MuseSecureVM and Sentinel design make sensitive actions controllable, directly answering trust concerns about personal agents
- Payments use Stripe Link single-use cards so financial information never passes through the agent
- No advertising, with an end-to-end encrypted confidential VM promised before the end of the year
Pricing
Free tier plus $20 and $100 per month subscriptions for heavier compute use, with no advertising. Initially available in the US only, on iOS, Android and the web, with Muse for Mac rolling out from September 17, 2026.
Summary
Meta Muse is the personal AI agent released by Meta Superintelligence Labs in the US in September 2026. A chat interface backed by a private cloud VM whose visible browser performs real tasks such as shopping, booking and emailing, it differentiates itself from ordinary assistants through always-on long-running jobs and cross-app memory. Muse for Mac, released on September 17, 2026, then extended execution from the cloud onto the user's own computer, where it can tidy the Downloads folder, recover lost files and summarise messages and notes under explicit authorization, bringing local files and applications into range. For users willing to delegate daily digital chores to an agent, Muse is one of the most interesting new options, though users outside the US will need to wait for further rollout.
Version History
- Muse rolls out real-time voice calls (2026-10-26): Muse is rolling out real-time voice calling in stages, letting users hold a spoken conversation with the agent instead of typing.
- Meta open-sources Muse Spark Open (816B multimodal) (2026-10-15): Releases Muse Spark Open, an 816B-parameter (42B active) open-weight natively multimodal model spanning text, image, video and audio with a 1M-token context, built for coding and agentic tasks; ships under the Muse Model License and is downloadable via Hugging Face, SageMaker and Model Garden, with API access on Together, OpenRouter and Fireworks; runs locally on two M5 Ultra Mac Studios via Apple MLX.
- Meta Muse Wonder series launches on Agent Arena, scores will be announced soon. (2026-10-12): Arena announced that Meta's Muse Wonder series models are now available on Agent Arena, where users can test them in practice, with scores to be announced soon.
- Muse reported to carry a zero-day that can lift account tokens, as Amazon blocks agent checkout and Shopify signs on (2026-09-22): Several developments landed for Meta personal agent Muse in a single day. On the security side, a report described a severe zero-day that local applications could use to lift account tokens. On the platform side, Amazon blocked Muse from shopping on its sites on a users behalf, saying it never authorized the access and noting that Muse does not identify itself and collects and stores account credentials; the same day Meta and Shopify announced a partnership that brings Shop Pay checkout to Muse for agentic shopping.
- Muse for Mac ships, letting the personal agent operate the local computer with user authorization (2026-09-17): Meta announced that Muse for Mac is rolling out, allowing its personal agent to complete tasks directly on a computer once the user grants explicit authorization. Meta's examples include tidying the Downloads folder, finding lost files, and summarising messages and notes, with more capabilities promised over time. Previously Muse was confined to a cloud virtual machine and its visible browser; this release extends the object of operation to local files and applications, while leaving the authorization boundary for users to confirm item by item.