DIRECT ANSWER
What is Meta Muse?
Muse is Meta’s personal AI agent, introduced in September 2026. According to Meta, it completes browser- and app-based tasks in a dedicated Muse Secure VM, while selected sensitive actions such as sending email or purchases require approval. The first rollout is concentrated in North America. A vendor-described security architecture is not proof that those controls have passed independent tests.
DISTINCTIONS
Product scope: agent, model or platform?
| Product / layer | Source-scoped distinction |
|---|---|
| Muse agent | The product that plans and executes goals across browser and connected apps. |
| Muse Spark | The underlying AI model named by Meta, not an interchangeable label for the agent. |
| Muse Secure VM | Vendor-described dedicated cloud workspace containing a browser and protected credential storage. |
| Muse for Small Business | A September expansion of connectors and business skills, not automatically a second separate product. |
ARCHITECTURE
How does the system work?
Goals and planning
Users state outcomes; Meta says Muse breaks work into steps and asks for intervention when decisions or approvals are needed.
Private virtual environment
The publisher describes a dedicated cloud VM with a browser and service connections. It is not the same as a local agent on the user device.
Sentinel enforcement
Meta describes a separate Sentinel agent mediating outbound actions and user confirmations. AgentenCode has not independently penetration-tested this design.
Ongoing context
Meta describes memory-based suggestions, continued background work and the ability to ask Muse to forget particular learned details.
USE CASES
What tasks does it target?
Travel and planning
The vendor describes coordinating travel tasks and service interactions, subject to permissions and supported travel connections.
Commerce and checkout
Meta describes Stripe Link checkout and commerce partner connections. Authorization and purchase-protection terms are workflow-specific.
Small businesses
The business expansion cites Asana, Canva, QuickBooks, Shopify, Slack, Stripe, Zoom and other connectors; rollout limitations still apply.
Personal projects
Muse aims to turn longer-term goals into follow-up actions, but this profile contains no independent measurements of success rates.
SECURITY
Security, permissions and auditability
VM separation
Meta describes a distinct Muse Secure VM per person rather than shared local desktop execution.
Human approval
Sensitive actions such as buying something or sending messages are described as requiring permission; this is not a universal all-actions approval guarantee.
Credentials and permissions
App access can reportedly be scoped and withdrawn. Meta says Muse is not shown passwords or payment credentials directly.
Activity history
Meta describes a full user-visible audit trail; independent completeness testing is not available for this profile.
Privacy and roadmap
Meta describes an AI training opt-out and separation from advertising systems. Confidential VM is announced for a later date, not already proven live.
AVAILABILITY
Availability, pricing and EU context
Meta’s 29 September 2026 announcement explicitly names the US and Canada as available regions. The initial introduction was US-focused. These statements do not verify broad access in Germany or the EU. Meta mentions free basic use and paid tiers but a definitive region-specific price table has not been verified here.
CHECKLIST
Limitations and due-diligence checklist
- Do not infer German or EU access from US/Canada availability.
- Confirm transaction consent and revocable app permissions before connecting high-impact accounts.
- Do not confuse the proposed Confidential VM with the existing described Secure VM.
- Treat security promises as vendor assertions until independently tested.