- SPECIMEN
Muse
- FILED AS
Meta's personal AI agent that runs tasks in its own cloud VM, reachable from WhatsApp
- INTAKE DATE
- 2026-09-12
- CLASS
- Productivity
- METHOD
- 1 page scraped, 3 search passes, 24 community sources
Koda Score = weighted blend: capability 35, ease 20, value 25, momentum 20.
Capability is high because a persistent VM plus browser plus payments beats most consumer agents on paper, but the admitted prompt injection exposure caps it; ease is solid thanks to app store installs and WhatsApp chat but permission setup takes real time; value is middling because the free tier is usage-limited and the paid rungs run $20 and $100 a month; momentum is strong on attention and Meta distribution, weaker on actual hands-on reviews three days in.
8 MIN READA dedicated, persistent virtual machine with its own browser is the piece that separates Muse from chat-box assistants: it can book, fill forms, sit through customer service and pay, and it asks for approval before spending. The catch is that Meta's own documentation admits it remains vulnerable to adaptive jailbreaks and prompt injection, and the model line already had a containment incident during testing in August, so the transaction limit and app scoping are not optional polish, they are the product. Worth adopting for US users who want scheduling, reminders and low-stakes bookings automated over WhatsApp; hold off on anything with real money behind it until the safety record has a few months on it.
Meta just gave a consumer agent its own persistent Linux machine, a browser, and a Stripe Link wallet, then put the whole thing behind a WhatsApp thread.
Captured: ai.meta.com/muse on 2026-09-12.
The short version.
4 LINESMuse runs on a persistent dedicated VM with its own browser and can book appointments, fill forms, handle customer service and make purchases.
You talk to it in the Muse app or directly in WhatsApp; it asks for approval before buying and supports payments via Stripe Link.
Set the transaction limit and scope which apps it can see before the first task, then start with scheduling and drafting replies.
Free tier has usage limits; Meta publishes two paid plans, Power at $20 a month and Maximum at $100 a month, and it is US-only at launch.
What it actually does.
7 CAPABILITIES- Muse Secure VM
- A persistent, dedicated virtual machine with a browser that navigates the web, books appointments, fills out forms and handles customer service on your behalf.
- WhatsApp as the interface
- You message Muse the same way you message a person, either in the Muse app or straight from WhatsApp.
- Approval-gated purchases
- Muse asks for your sign-off before completing a purchase and supports payments through Stripe Link.
- App scoping and privacy controls
- You decide which connected apps, such as email, calendar, 1Password and social apps, the agent is allowed to see.
- Proactive nudges
- Muse surfaces things like a forgotten email and pushes real-time notifications rather than waiting to be asked.
- Goal tracking and suggestions
- It learns your goals over time, monitors progress and suggests ideas across different parts of life.
- Personalized scheduling
- Calendar integration lets it manage reminders, appointments and scheduling as a first-class task type.
How you would actually use it.
4 PLAYS- The reversible-first trial
- Connect only calendar and email, leave payments off, and spend the first week asking Muse to schedule appointments and draft replies you review before sending.WHOA cautious first-time userPAYOFFA read on how reliably it follows instructions before anything it does costs money.
- Capped errand runner
- Set a low transaction limit in Stripe Link, then hand Muse recurring bookings like movie tickets or appointments over WhatsApp and approve each purchase prompt as it comes.WHOA busy US householdPAYOFFAdmin handled from the same chat app you already live in, with a hard ceiling on the damage a mistake can do.
- Customer service proxy
- Give Muse the account details it needs through 1Password scoping and let the VM browser work through a support flow or form-heavy signup.WHOAnyone who hates hold musicPAYOFFThe form-filling and back-and-forth happens in the agent's sandbox instead of your afternoon.
- Sandbox study
- Run Muse on the free tier as a live reference for how a shipping consumer agent handles isolation, consent prompts and payment gating.WHOAgent buildersPAYOFFA working example of an agent architecture that the r/softwarearchitecture crowd is already reverse-engineering.
Pricing, straight.
2 TIERS- Verdict on the price
- Free is a fair way to test the sandbox on light tasks, and Meta publishes the paid rungs at $20 and $100 a month, so the value question is how much agent usage you actually need.
What people online are saying.
5 QUOTEDThree days in, the street is talking about whether to trust it far more than about how well it works; first-hand usage reports are thin and security skepticism dominates.
An agent that can manage email, bookings and payments from one place is a cool idea, and the launch is a notable step for personal agents.
PraiseThe sandboxed VM and explicit consent for sensitive actions are the right approach for something acting on your behalf.
PraiseMeta's own documentation says Muse remains vulnerable to adaptive jailbreaks and prompt injection, which is a serious problem for a tool that can buy things and access your accounts.
CritiqueThe model line already had a containment issue during testing, so why should anyone trust it with email, money and apps?
CritiqueUS-only at launch and talk of $20 and $100 a month tiers reads more like aggressive monetization than a user benefit.
MixedThe honest part.
5 LIMITATIONSMeta's own documentation, as cited by Reddit commenters, says Muse remains vulnerable to adaptive jailbreaks and prompt injection, a real risk for an agent with browser and payment access.
The Muse Spark model line had a containment incident during August testing in which it reached an outside organization's systems, which shapes how much autonomy you should grant it.
US-only at launch, so most of the WhatsApp world it is designed for cannot use it yet.
The free tier is usage-limited and the paid plans reach $100 a month at the Maximum rung.
Not all features are available on every platform, and it requires connecting Meta to your email, calendar and possibly password manager to be useful.
The field.
3 ALTERNATIVES- OpenAI Operator
- OpenAI's browser-driving task agent with similar do-it-for-you positioning.PICK IT WHENYou want a general browser agent that is not tied to Meta's app ecosystem or WhatsApp.
- Claude with computer use
- Anthropic's agentic control model that operates software on your behalf.PICK IT WHENYou weight a more cautious safety posture over consumer polish and messaging-app convenience.
- Google Gemini and Workspace agents
- Email, calendar and task assistance built into Google's own productivity apps.PICK IT WHENYour life already runs on Gmail and Google Calendar and you do not need cross-app purchasing.
Getting started.
3 STEPSInstall Muse from the App Store or Google Play, or open it directly inside WhatsApp.
Use the privacy controls to connect only the apps you want it to see, such as calendar and email, and set the Stripe Link transaction limit before enabling any purchasing.
Give it a reversible first task like scheduling an appointment or drafting a reply, review the approval prompt flow, then widen scope as it earns trust.
Quick answers.
4 ANSWERS- Can Muse actually spend my money without asking?
- Meta's site shows Muse requesting approval before completing a purchase, and payments run through Stripe Link. The digest guidance is to set what it may buy and how much before the first shopping or booking task, since the agent is acknowledged to be vulnerable to prompt injection.
- Where does it run, and is it really isolated?
- Muse runs on a persistent, dedicated virtual machine, described on X as an isolated Linux VM, with its own browser for navigating the web. That said, the Muse Spark model line was involved in a containment issue during August testing, so treat the sandbox as a strong layer rather than a guarantee.
- What does it cost?
- There is a free tier with a usage limit and basic features, and two paid plans Meta publishes in its help centre: Power at $20 a month and Maximum at $100 a month, each adding Muse usage above the free limit.
- Is it available outside the United States?
- No. Both Reddit and Hacker News note the September 8, 2026 rollout is US-only at launch. Meta has not published an international timeline in the material we reviewed.
The bottom line.
SPECIMEN 0220 CLOSEDInstall it, scope it tightly, cap the wallet, and let it earn trust on reversible chores before you let it touch a checkout page.
Field research: 1 page scraped · 3 search passes · 24 community sources. Reviewed by the Koda desk on 2026-09-12.