Meta spent years teasing “personal superintelligence.” On September 8, 2026, that pitch turned into a product. It’s called Muse, and unlike Meta AI or any other chatbot you’ve poked at inside WhatsApp, it doesn’t just talk back. It books your flight. It emails your landlord. It negotiates your cable bill while you’re asleep.
That’s the whole point of the Meta Muse AI agent, and it’s also exactly why the launch is getting picked apart by security researchers instead of just tech bloggers.
Key takeaways
- Muse is Meta’s first personal AI agent, launched September 8, 2026, in the US on iOS, Android, WhatsApp, and muse.ai.
- It runs on a dedicated Muse Secure VM per user and is powered by Muse Spark, Meta’s newest model built for agentic tasks.
- It’s free for most people, with $20/month and $100/month subscription tiers for heavier use.
- Reuters reported that Meta employees testing Muse before launch flagged data exposure and reliability issues.
- The launch lands two weeks after Meta’s roughly $17.1 billion multistate settlement over child safety claims, which is doing Muse no favors on the trust front.
What is Meta Muse?
Meta Muse is a personal AI agent that completes tasks on your behalf instead of just answering questions. You tell it a goal in plain language, over text, WhatsApp, or the Muse app, and it plans the steps, opens a browser, fills out forms, and acts, checking in with you only when something needs your approval.
That’s a real shift from Meta AI. Ask Meta AI to help plan a birthday dinner and it’ll suggest a menu. Ask Muse, and it can also send the invites, remember that one guest is vegetarian because you mentioned it three weeks ago, and order the ingredients before Friday.
How Muse actually works under the hood
Each Muse user gets their own Muse Secure VM, a dedicated virtual machine in Meta’s cloud that holds both the agent and the person’s connected data. Meta’s reasoning: an agent that can touch your email and your bank card needs more isolation than a chat window ever did.
A few pieces worth knowing:
Muse Spark is the model doing the reasoning. Meta describes it as its most capable model yet, built specifically for the kind of multi-step, real-world work Muse is supposed to handle, not general conversation.
Sentinel is a separate agent that runs on the same VM but stays walled off from Muse at the system level. Nothing Muse does reaches the open internet without Sentinel signing off, and Sentinel is also what asks you for permission before Muse sends an email or spends your money.
Payments run through Link, built by Stripe. Muse generates a one-time-use virtual card for each purchase, so your real card number never touches the sites it’s buying from, and purchases get Link’s damage, loss, and price-drop protections. Shop Pay and 1Password support are coming later.
Meta also says Muse never sees your actual passwords. Credentials go into secure storage that the agent can use without reading, including ones you type into its browser yourself. And you can tell it to forget something it’s learned about you, the same way you’d correct a person.
Pricing and where you can get it
Muse is live now in the US on iOS, Android, WhatsApp, and the web at muse.ai, with AI glasses support planned. Alexandr Wang, Meta’s chief AI officer, told Axios most people will get everything they need from the free tier. Beyond that, there are two paid plans, $20 and $100 a month, scaled to how much agentic work you actually run through it.
Why this launch matters more than a normal product drop
Here’s the tension nobody at Meta can spin away: Muse only works if you hand it real access, your inbox, your calendar, your payment methods. That’s a bigger ask than anything a social feed ever made of you, and Meta is making it two weeks after agreeing to a roughly $17.1 billion settlement with state attorneys general over claims that Instagram and Facebook were designed to hook kids.
It gets messier. Reuters reported that in the days before launch, some Meta employees testing Muse internally ran into exposed private data and inconsistent behavior. Meta’s public pitch leans hard on the Sentinel system and VM isolation to argue Muse is safer than it looks. Whether that holds up once millions of ordinary users start pointing it at their real accounts is the actual test, and it’s one no press release can settle in advance.
Zuckerberg has been framing this for months as the beginning of something bigger. In his recent essay on “personal superintelligence,” he described a future where everyone gets an agent that works around the clock on their relationships, health, career, and finances. Muse is the first real product built toward that pitch, not the finished version of it.
How Muse compares to other AI agents
Muse isn’t the only company betting that agents beat chatbots. OpenAI, Google, and Amazon are all pushing their own versions of “tell it what you want, it figures out the rest.” What sets Muse apart, at least on paper, is the dedicated-VM architecture and the Sentinel oversight layer, plus native WhatsApp integration, which instantly puts it in front of billions of existing users rather than asking them to download something new.
Whether that architecture actually reduces risk versus competitors, or just gives Meta a better answer for the security questions, is something independent researchers will be picking apart for months.
Should you actually use it?
If you’re curious, start small. Let Muse handle something low-stakes first, drafting an email, comparing flight prices, before you connect anything tied to money. Check exactly which apps it has access to and how much (read vs. send, for instance, on email). And keep an eye on coverage of how it performs once it’s out of Meta’s own testing environment and into everyone else’s inbox.
FAQ
What is Meta Muse?
Muse is Meta’s personal AI agent, launched September 8, 2026. It completes real tasks, like sending emails, booking travel, and making purchases, instead of only answering questions, and it works over WhatsApp, iOS, Android, and muse.ai.
How much does Meta Muse cost?
Muse is free for most everyday use. Meta also offers two paid subscription tiers, $20 per month and $100 per month, for people who need heavier or more frequent agentic tasks.
Is Meta Muse safe to use?
Meta built Muse to run on an isolated per-user virtual machine with a separate Sentinel system approving sensitive actions, and says it never sees your passwords. That said, Reuters reported internal testers found data exposure and reliability issues shortly before launch, so treat early use with some caution.
How is Muse different from Meta AI?
Meta AI answers questions and holds conversations. Muse takes action on your behalf, opening browsers, filling out forms, and completing multi-step tasks like booking a trip or negotiating a bill, then keeps working after you close the app.
Where can I get Meta Muse?
Muse is currently available in the US only, through the Muse app on iOS and Android, on WhatsApp, and at muse.ai. Support for Meta’s AI glasses is planned but not yet live.
