What Is Muse AI? Meta's Personal Agent, How to Get It and What It Costs
- 🔑 Muse is Meta’s personal AI agent, launched in the US on Tuesday 8 September 2026. It does more than answer questions: it sends email, fills in forms, books travel and buys things, working in a separate cloud computer Meta runs for each user, on Meta’s Muse Spark model.
- It is free to start. Power costs $20 a month for 500 million Muse tokens a week, and Maximum costs $100 a month for 3 billion. Zuckerberg put the free allowance at 100 million tokens a week, but Meta’s own help page gives no number.
- You need a Meta account and must be 18 or older. Muse runs on iPhone, Android, the web at muse.ai and inside WhatsApp, and a Mac app arrived on 17 September. The glasses version has been announced but has not launched.
- 🔴 Amazon began blocking Muse from shopping on Amazon.com on the night of Sunday 20 September 2026. Reports on 22 September said the block was still in place, so do not expect Muse to buy anything there.
- Meta says your Muse conversations stay out of its ad systems. They are still used to train its models, with personal details removed, unless you opt out in settings. The version Meta itself cannot read, Muse Confidential VM, has not launched.
- A flaw in the Mac app, disclosed on 21 September, could only be used by malware already on the computer. Meta said on 22 September that a hotfix had been issued. If you use the Mac app, update it.
Muse is Meta’s personal AI agent, launched in the US on Tuesday 8 September 2026. It does more than chat: it sends email, fills in forms, books travel and buys things for you, working on a separate computer that Meta runs for you in the cloud. It is free to start, with paid plans at $20 and $100 a month, and you need a Meta account and must be 18 or older.
What is Muse AI?
Muse is an AI agent from Meta. You give it a task and it carries it out: it writes and sends email, books travel, fills in forms, negotiates and makes purchases, and it keeps working after you close the app. It runs on Muse Spark, which Meta calls its most capable model so far, and it launched in the US on 8 September 2026.
Muse can also create documents, PDFs, web pages and interactive pages Meta calls Artifacts. It has Goals and Ideas tabs, side chats, and an avatar and name you can change. Meta’s own example is turning a recipe reel you saved on Instagram into a grocery list.
Meta announced Muse Spark on 8 April 2026 as the first model from Meta Superintelligence Labs. Version 1.3 reached developers on 2 September, and Meta’s safety write-up for the agent refers to Muse Spark 1.3.
How does Muse actually get things done?
Each user gets a dedicated cloud virtual machine, which Meta calls the Muse Secure VM. It has its own Chromium-based browser, file system and terminal. A second agent, Sentinel, checks every action Muse takes and every request it sends out to the internet.
Meta says Muse never sees your real passwords or API keys, only stand-in tokens. It asks before sensitive steps such as sending an email or making a purchase, and it keeps a complete log of what it has done and what it plans to do.
Purchases go through Link by Stripe, which issues a one-time card number for each checkout. Meta says Muse is the first AI agent covered by Link’s purchase protections. Shop Pay and 1Password support were listed as coming soon at launch. On 21 September Shopify CEO Tobias Lütke announced Shop Pay checkout for Muse, CNBC reported. We found no sign that 1Password support is live.
For connecting your own accounts, Meta’s Help Center names Facebook, Instagram, Threads, Gmail and Google Workspace, Apple Health and Android SMS.
How do you get Muse in the US?
Download Muse from Meta on iPhone or Android, or go to muse.ai in a browser, and sign in with a Meta account. You must be 18 or older. You can also chat with Muse directly in WhatsApp, and there has been a Mac app since 17 September 2026.
| Where | Status |
|---|---|
| iPhone | Live in the US since 8 September; needs iOS 18.0 or later |
| Android | Live in the US since 8 September |
| muse.ai | Web version, live since 8 September |
| Chat with Muse inside the app | |
| Mac | Released 17 September, per TechCrunch |
| AI glasses | Announced as coming soon; not live |
| Canada | iPhone reportedly from 18 September; Android not yet |
The App Store listing, Muse from Meta by Meta Platforms, Inc., is free with in-app purchases and rated 18+. On 23 September 2026 it showed 4.9 stars from about 35,000 ratings and ranked No. 1 in Productivity; both change daily. The listing warns that Muse can be inaccurate or take actions you did not expect.
According to TechCrunch, the Mac app can work across Files, Mail, Messages, Calendar and Notes, with permissions you switch on. We could not find its system requirements on a Meta page.
Download figures are estimates: Bloomberg, citing Sensor Tower, reported on Monday 21 September more than 902,000 downloads in Muse’s first six days, and said it was the No. 1 free app on the US App Store and Google Play that day. Other trackers count differently.
How much does Muse cost?
Muse is free for basic use, with two paid plans. Power costs $20 a month and Maximum costs $100 a month. Both renew monthly, and you can buy them at muse.ai or in the mobile apps.
| Plan | Price | Weekly tokens |
|---|---|---|
| Free | $0 | 100 million, per Zuckerberg; no figure on Meta’s help page |
| Power | $20 a month | 500 million |
| Maximum | $100 a month | 3 billion |
The free allowance is the least settled number. Meta’s Help Center says only that free use is limited and refreshes. On launch day, Zuckerberg wrote on Threads that Meta is “providing Muse for free for up to 100 million tokens per week.”
The Help Center also says Muse and its subscriptions are still in limited testing and not available everywhere, so terms may change. Meta does not say how many tasks a week of Muse tokens buys, or how those tokens relate to its developer pricing. We have not tested how fast a free account runs out.
Meta One is a different product, a separate subscription bundle launched in mid-September. We could not confirm that any Meta One tier includes Muse usage, so do not assume it does.
Is Muse private?
Partly. Meta says Muse does not share your conversations or the data on its virtual machine with Meta’s ad systems. But Meta does use your conversations to train its models, with personal details removed, unless you opt out in settings. Meta also says its current design does not technically stop Meta from accessing your data when necessary.
There is a less obvious catch. Meta says websites see Muse’s browsing as your own activity. So a store Muse visits for you could later show you ads on Instagram, the same as if you had visited it yourself.
Meta says the stronger option, Muse Confidential VM, encrypts everything with a key only you hold, so Meta cannot read it. It is due later this year, but only a small group of trusted testers is using it now. Meta also opened a public bug bounty on 8 September, paying up to $300,000, including up to $130,000 for a working prompt injection attack that affects one user.
Why did Amazon block Muse?
Amazon began blocking Muse from shopping on Amazon.com on the night of Sunday 20 September 2026. Amazon says Meta did not notify it, that the agent does not identify itself, and that it appears to store customer credentials. It has asked Meta to remove Amazon from Muse.
Users trying to shop there with Muse see a popup saying that an unauthorized AI agent’s continued access breaks Amazon’s Conditions of Use. In the latest reports on 22 September, Amazon said it was in direct conversation with Meta and declined to comment on legal action. We found nothing later saying the block had ended.
The accounts clash: Meta’s safety post says Muse only handles stand-in tokens, never your real passwords. Either way, Muse cannot shop on Amazon for now.
What was the Muse Mac app security flaw?
On Monday 21 September 2026, security researcher Patrick Wardle of Objective-See disclosed a flaw in the Muse Mac app. It let malware that was already on a Mac redirect Muse’s dictation traffic and steal the user’s account token. It could not be used remotely. Meta’s David Singleton said a hotfix had been issued, according to The Register’s update at 8:56 AM ET on 22 September.
The weak point was a hidden setting controlling where dictation traffic went. We could not confirm the version number of the fixed app.
Which Muse is this?
If you searched Muse AI in September 2026, you almost certainly mean Meta’s agent. At least four other things share the name, including two more from Meta.
| Name | What it is |
|---|---|
| Muse | Meta’s personal AI agent, launched in the US on 8 September 2026 |
| Muse Spark | The Meta model underneath; version 1.3 went to developers on 2 September 2026 |
| Muse Image | A Meta image model; its Instagram photo-remix feature was pulled on 10 July 2026 |
| Microsoft Muse | A gameplay-generation model from Microsoft Research and Ninja Theory, February 2025 |
| Old muse.ai | A video-hosting service, now renamed Skiv at skiv.com |
Developers pay for Muse Spark per million tokens: $1.25 in and $4.25 out, with a 1-million-token context window. A cheaper contributor tier, $0.10 and $0.20, lets Meta use that data to improve its products.
Muse Image launched on 7 July 2026, and Meta pulled the Instagram remix feature three days later after CAA and SAG-AFTRA objected to users being opted in automatically. Microsoft’s Muse, published on 19 February 2025, was trained on gameplay from Bleeding Edge.
The muse.ai domain is now registered to Meta Platforms, Inc. The video company that used to run it renamed itself Skiv. Nothing we found says whether Meta bought the company or only the domain.
What should you do?
Start on the free tier and see whether you hit the weekly limit before paying for anything.
- Before connecting Gmail or a card, decide on the training opt-out in Muse’s settings, and remember its browsing counts as yours for ad targeting.
- Do not plan on Amazon. As of 22 September Amazon was blocking Muse, so shop elsewhere.
- On a Mac, update the app to get Meta’s hotfix, and grant access to Mail, Messages, Calendar and Notes only if you need to.
- If privacy is the blocker, wait for Muse Confidential VM, promised for later this year and not out yet.
- Check every purchase and outgoing email. Muse asks before sensitive actions, and its own App Store listing warns it can get things wrong.
For what can go wrong when an AI agent gets access it should not have, see our guide to how an AI agent got into Hugging Face, and how to defend against it .
How we verified this
The plan prices, token allowances and eligibility rules were read from Meta’s own Help Center page, “About Muse subscriptions”, on 23 September 2026, not taken from news coverage. That page gives Power at $20 a month with 500 million Muse tokens a week and Maximum at $100 a month with 3 billion, both renewing monthly and sold at muse.ai or in the mobile apps. It also requires a Meta account, an age of 18 or the local age of majority, and a supported region. ⚠️ The page loaded in Traditional Chinese (zh-TW) because our session was located outside the US, and the figures were read from that version. The numbers do not depend on the language, but we did not read the exact US English wording.
The 100 million free-token figure was traced to Mark Zuckerberg’s own Threads post, and our adversarial re-check corrected where it came from. The research pass had credited it to secondary outlets, one of which said it came from Meta’s official launch announcement. It did not: the 8 September newsroom post has no token figure at all. The re-check read Zuckerberg’s post directly, and a Bloomberg report on 8 September, as summarized by Techmeme, carries the same figure. So it is a first-party statement from Meta’s CEO. ⚠️ It still does not appear on the Help Center page, which says only that free use is limited and refreshes. That is why the plans table marks it as Zuckerberg’s figure.
Availability was checked against Meta’s 8 September launch post and then brought up to date by the re-check. The launch post says Muse is rolling out in the US. The re-check found a secondary report that Meta posted on X around 3:12 PM PT (6:12 PM ET) on Friday 18 September 2026 that Muse had reached Canada, on iPhone first, with Android still to come. ⚠️ We did not open the X post itself. TechCrunch’s line that Muse launched in the US and Canada is wrong: Canada came ten days later.
Each part of the how-it-works section is credited to the Meta post that actually says it, because the re-check found the research had mixed them up. Meta’s safety post, by Tarek Sheasha, Software Engineer and VP at Meta Superintelligence Labs, dated 8 September 2026, covers Sentinel, network egress, stand-in credentials, the Chromium-based browser, the root filesystem and Confidential VM. The file system and terminal line comes from Meta’s design post, which is dated only September 2026. The audit-trail point is in the newsroom post, and so is the Instagram recipe example. The version number Muse Spark 1.3 appears in the safety post, not in the launch post.
⚠️ The Mac app and the Mac flaw rest on press reports, not on a Meta page we could read. Meta’s 8 September post does not list a Mac app. The release date and the app’s reach into Files, Mail, Messages, Calendar and Notes come from TechCrunch on 18 September. The flaw comes from The Register and Malwarebytes, reporting Patrick Wardle’s disclosure. The hotfix is Meta’s David Singleton as quoted in The Register’s update at 12:56 UTC (8:56 AM ET) on 22 September. We could not find the Mac app’s system requirements or the version number of the fix on any primary page. The skeptic also flagged a separate ynet write-up of a Mac zero-day as unverified, and we do not rely on it.
⚠️ Download and ranking figures are third-party estimates, so this page uses one tracker, one outlet and one date. The body cites Sensor Tower via Bloomberg, published 1:44 PM ET on Monday 21 September 2026. The trackers disagree beyond that. Apptopia, via TechCrunch, counts 2.8 million global installs in 12 days, against Sensor Tower’s roughly 2.5 million in 13 days as reported by CNBC. The popular line that Muse beat ChatGPT depends on which count you use: in that same Sensor Tower window, CNBC reports ChatGPT at 3.1 million. CNBC’s page refused our requests, so those CNBC figures were read from a word-for-word mirror. The re-check also found that two Sensor Tower numbers first logged as a conflict, about 730,000 and 902,000, are back-to-back windows and do not disagree.
⚠️ The connector list stops where Meta’s Help Center stops. Longer lists naming ticketing, restaurant, fitness and banking services circulate on secondary and aggregator sites, and we could not confirm them on a Meta page, so they are left out. A report that PayPal has joined Muse checkout is also unconfirmed and left out. The Shopify tie-up is reported by CNBC and others, not confirmed on a Meta page.
⚠️ On Amazon, both companies’ claims are reported as claims. Amazon’s account, including that Muse appears to store customer credentials, comes from its statements quoted by GeekWire, and CBS confirmed the block with Amazon. Meta’s safety post says Muse never sees users’ real passwords, only stand-in tokens. We cannot settle that from the outside, and the latest reports we found, from 22 September, do not say the block has been lifted.
🔴 This page deliberately carries no stock-market material. Much of the coverage of Muse’s downloads was written as coverage of Meta’s share price, and none of it is used here. The page also carries no forecast of Muse’s future downloads or rankings, no promotional token codes, and no prediction-market material from the App Store charts it shared space with.