Meta's Muse Agent Asks You to Trust It First
Muse went live in the U.S. on September 8, 2026, sending mail, booking trips and paying — from a sandboxed VM Meta could still reach.
Symbolic image: a hand pushes a card into a reader while a ticket printer runs alongside and wall monitors show abstract shapes.
Muse can send mail, book flights and pay for things, but its security pitch only holds if you hand Meta's sandboxed VM your inbox, your calendar and your card.
At a glance
- Launch: September 8, 2026, U.S. only at first — as an iOS and Android app, on the web and inside WhatsApp.
- Free tier: 100 million tokens per week, which SiliconAngle puts at about 400 million characters; heavy users need a subscription.
- A component called Sentinel inspects what leaves the secure VM and sends questionable actions back for approval.
- Purchases run on single-use card numbers issued through Stripe Link, not the real card.
- Meta stock rose 6 percent on the day of the announcement.
Muse will send your mail, book a flight, hold a dinner table and push a payment through — and every one of those errands begins with you handing Meta the keys to an inbox, a calendar and a card.
What ships today
Meta introduced Muse on September 8, 2026, in the U.S. only. It arrives as an iOS and Android app, on the web and inside WhatsApp, with the company's AI glasses listed as next. The agent drives a browser and connects to email, calendar, financial, health, fitness and smart-home services.
SiliconAngle's list of errands runs from restaurant reservations and bus tickets to selling a vehicle. The German outlet Golem headlines the same launch as an agent for mail, shopping and travel.
The secure-by-design pitch
The work happens inside an isolated virtual machine rather than on your device. Sentinel inspects whatever tries to leave that VM and pushes unauthorized moves back to you for approval. Tarek Sheasha, a vice president in Meta's Superintelligence Labs, describes the harness as running in its own isolated cell that never sees real credentials.
Merchants receive a single-use card number minted through Stripe Link instead of your actual one. Meta says a later confidential VM with local key management will shift more of that control to the user.
Where the trust gap sits
None of this locks Meta out. SiliconAngle notes the company could technically reach into the secure VMs; what stands in the way is policy, not the architecture. That is the bet Muse is asking you to make.
Investors took it well: Meta stock rose 6 percent on the announcement. SiliconAngle names OpenClaw among the rivals, and the short excerpt we have of WIRED's write-up adds Instinct.
What it costs
The free tier is 100 million tokens per week — roughly 400 million characters by SiliconAngle's math. Past that Meta wants a subscription, and the sources we could read do not state a price.
What we could not verify
WIRED's story would not load for us, and only the headline of Golem's article was reachable. We therefore did not verify the “Spark 1.3” version string in that headline, and no source we read names the model underneath. Every figure above traces to SiliconAngle's report.
FAQ
What can Meta's Muse actually do?
Send mail, book flights and bus tickets, reserve restaurants, make payments and operate a browser, with hooks into email, calendar, financial, health, fitness and smart-home services.
Is Muse free to use?
Up to 100 million tokens per week, yes — about 400 million characters by SiliconAngle's math. Beyond that Meta charges for a subscription, and no price appears in the sources we read.
Can Meta see what Muse does in my accounts?
SiliconAngle reports that Meta could technically access the secure VMs, with company policy rather than the architecture standing in the way. So it is not ruled out by design.
