A.I.
Rycode

Jeffrey 1 min read

Agent tools · Meta (Meta Superintelligence Labs)

Muse

Meta's personal agent in an isolated cloud virtual machine, rolling out in the US with optional paid token plans.

Last checked

Maker Meta (Meta Superintelligence Labs). Internal code name Hatch. [2]
Status and access Introduced 8 Sep 2026, rolling out in the US. [1] Muse and its subscriptions are in limited testing and aren't available in all locations yet. [5]
Price Free tier with a weekly usage limit; the free allowance size is not listed on Meta's subscription page. [5] Power plan: $20/month for 500M Muse tokens per week. [5] Maximum plan: $100/month for 3B Muse tokens per week. [5] Subscribers must be 18+ (or age of majority) with a Meta account. [5] REPORTED · Over 900,000 downloads in the first week, per Sensor Tower. [10]
Underlying models Muse Spark family; Meta's safety post names Muse Spark 1.3. [2]
Modalities in Text messages and file uploads. [3] Apple Health or Android SMS connectors. [6] REPORTED · Photos of documents or meals are suggested in-app. [10] Voice in the phone app today is not described on Meta's help pages. [3]
Modalities out Text, PDFs, spreadsheets, documents, images, and podcasts. [3] REPORTED · Video generation. [9] You can see its browser and take over at any time. [2]
Where it runs Muse Secure VM on a dedicated, isolated cloud virtual machine. Clients: iOS, Android, muse.ai web, and inside WhatsApp. [1] Linux cloud VM with Chromium. [2] AI glasses: coming soon. [1]
Known specs Paid plans: 500M or 3B tokens per week. [5] Bug bounty up to $300,000. [2] MEMORY.md file you can view. [4] Context window size, check-in frequency, and task limits are not listed on these pages. [5]

Capabilities

Tasks Meta highlights for Muse.

  • Send email, book travel, fill out forms, and negotiate on your behalf. [1]
  • Turn a long-term goal into a plan and advance it on its own; examples include selling a car, lowering a bill, or adjusting a training plan. [1]
  • Turn a saved Instagram recipe reel into a grocery list; plan a dinner-party menu that respects friends' dietary needs. [1]
  • Spawn subagents, build its own tools, and write custom connectors. [2] Make and edit artifacts and side chats that stay aware of the main chat. [3]

Strengths

Where Meta's published design compares to the other tools here.

  • Free tier and works inside WhatsApp. [1]
  • Published security design: Sentinel approves connector actions and outbound network traffic; credentials are stand-ins so the model never sees them; sensitive work runs in isolated helper processes. [2]
  • CLAIM · First AI agent covered by Link's purchase protections. [1]
  • REPORTED · WIRED said Muse rarely seems to get lost while browsing. [10]

Connectors

How Muse reaches your apps.

  • Meta and third-party connectors, including Gmail, calendar, Apple Health, and Android SMS. [6] REPORTED · Amazon. [9]
  • Facebook, Instagram, and Threads connect automatically if they are in the same Accounts Center. [6]
  • Muse can build a Custom Connector for any service with an API; Meta does not review these. [6] Payments through Link by Stripe. [2]

Approval and safety

Sentinel and in-app approval dialogs.

  • Checks with you before sensitive actions such as sending email or purchasing. [4]
  • Sentinel is the sole permission authority for connector actions and outbound network access; Muse cannot override it. [2]
  • Approval options: Allow once, Allow for this task, Allow for this site, Always allow, Deny. [7] Every purchase needs approval and uses a single-use card tied to one merchant, one amount, and a limited time. [2]

Proactive behaviour

Unprompted help Meta describes.

  • Proactively helps with people's goals and suggests ideas; keeps working after you close the app and comes back when something changes. [1]
  • Calendar connectors can push changes to Muse. [6]
  • REPORTED · Has an Ideas tab. [9] REPORTED · Muse nudged the tester the next day. [10]
  • Fixed brief or check-in cadence is not listed on Meta's pages. [1]

Memory

What Muse keeps about you.

  • Remembers what matters to you; you can tell it to forget things or ask what it knows. [4]
  • Memory may persist after you delete something. [4] Reset deletes everything. [7]
  • REPORTED · No toggle to turn memory off entirely. [10]

Limits

Safety standards and connector filters.

  • Blocked by safety standards: harmful or illegal content, fraud and scams, actions that harm you or others, and harm to minors. [4]
  • The email connector filters out one-time codes, password-reset links, and magic links. [2]
  • For the full list of what it isn't built to do, Meta points to the Muse Terms. [7]

Privacy

VM data, ads, and training defaults.

  • Your data and credentials live in your VM; credentials are surrogated so the model never sees them. [2]
  • Muse doesn't share your conversations or VM data with Meta ad systems; browsing can still indirectly influence the ads you see. [2]
  • Training on your Muse data is on by default; you can opt out under Data controls. [4] Meta can access VM data when necessary to support, secure, or operate the service until Confidential VM ships. [2]

Coming soon

Meta's published roadmap items.

  • Muse Confidential VM, encrypted with a key only you hold, later this year. [1]
  • AI glasses integration. [8]
  • Shop Pay and 1Password connectors. [1]

Sources

  1. Meta Newsroom, Introducing Muse
  2. Meta AI Research, How We Built Safety Into Muse
  3. Meta Help, How to get started with Muse
  4. Meta Help, How Muse handles your privacy, safety and security
  5. Meta Help, About Muse subscriptions
  6. Meta Help, How Muse works with Connectors
  7. Meta Help, How Muse works with your guidance and approval
  8. Meta, Your Personal Agent Coming to AI Glasses
  9. The Verge, Meta's Muse AI works and creeps me out
  10. WIRED, Meta's Muse Is Better at Surveilling Than Helping Me

Updates

  1. · Newsroom post updated.
  2. · Muse introduced; rolling out in the US.