Muse is Meta's personal AI agent, launched September 8, 2026 for adults in the United States on iOS, Android, muse.ai and inside WhatsApp. Unlike a chatbot, it carries out multi-step tasks: sending emails, booking travel, filling out web forms, negotiating prices, tracking goals and completing purchases, and it keeps working after you close the app, returning for approval before sensitive actions. It is powered by Meta's Muse Spark 1.3 model and runs on Muse Secure VM, a dedicated cloud virtual machine per user that also holds the person's data and connected-service credentials.

How much does Meta Muse cost?

Muse is free for most use, with a reported cap of 100 million tokens per week per user cited by Mark Zuckerberg, plus two subscriptions: Power at $20 per month and Maximum at $100 per month for heavier usage. Meta has not published the exact task or token ceilings of the paid tiers as of September 22, 2026. Reports at launch said a payment card is required at signup even for the free tier. Purchases go through Link by Stripe, which issues a one-time-use card so your real card details are never exposed to merchants.

How does Meta Muse protect my data?

Each user gets a dedicated Muse Secure VM in Meta's cloud that contains the agent, its memory and stored credentials. A separate Sentinel agent on the same machine approves or blocks every outbound internet action and asks the user when needed. Muse cannot see passwords or payment methods — they sit in secure storage it can use but not read. It asks before sending email or paying, shows a full audit trail, lets users revoke any connection, opt out of training and tell it to forget things, and Meta says VM data is not shared with its ad systems. A Confidential VM encrypted with a user-held key is promised for later in 2026 — as of today, Meta can technically still access data under operational policy.

Why did Amazon block Meta Muse?

On the night of September 20, 2026 Amazon began showing Muse users the message 'Continued access by an unauthorized AI agent violates Amazon's Conditions of Use.' Amazon says Meta never told it Muse would shop on Amazon.com, that the agent does not identify itself when browsing, that it bypasses Amazon's personalization, and that it appears to capture and store customer credentials and scrape account data. Amazon had asked Meta to remove Amazon from Muse voluntarily; Meta declined. Shopify, by contrast, announced on September 21 that it is partnering with Meta to allow Muse agentic checkout in its stores.

Quick Answer

What Is Meta Muse? The Personal AI Agent Explained (2026)

Published: September 22, 2026

The short answer

Meta Muse is a personal AI agent — not a chatbot — that Meta launched on September 8, 2026, for US adults, and it became the most-downloaded free iPhone app in America within ten days. You message it like a person, in its own app or inside WhatsApp, and it does the work: drafts and sends email, books travel, fills forms, negotiates a bill, sells your car, buys the stroller. It runs on Meta’s Muse Spark 1.3 model inside a dedicated cloud VM per user, is free for most people with $20 and $100 tiers, and on September 20 became the first Meta product Amazon has actively blocked.

What Muse does

Meta’s positioning is “the world’s first personal AI agent built for everyone” — no learning curve, no technical setup. Documented capabilities as of September 22, 2026:

Tasks: send email, book travel and restaurants, buy tickets, fill out web forms, compare products, negotiate on your behalf (Meta’s examples: selling a car for more, lowering a bill).
Goals: share a long-term goal and Muse builds a plan, coordinates your time and resources, and advances the work on its own, adjusting as life changes (a training plan, a dinner party with dietary restrictions remembered from one mention).
Background work: keeps running after you close the app and comes back when something changes or it needs approval.
Tools: its own computer, filesystem, terminal and a Chromium browser through a restricted interface; outputs documents, PDFs, webpages and interactive artifacts.
Memory: persistent across conversations, editable, with a “forget” command.
Connections: email, calendar, Instagram and Facebook (it can turn a saved recipe reel into a grocery list), plus user-selected financial and wellness data. 1Password support and Shop Pay are “coming soon.”
Payments: checkout via Link by Stripe — the first AI agent covered by Link’s purchase protections (lost/damaged coverage, price drops, no-fee returns) — using a one-time-use card number.

Pricing and availability

	Details (September 22, 2026)
Free tier	Most everyday use; Zuckerberg cited ~100M tokens per week per user
Power	$20/month
Maximum	$100/month
Signup	Reported to require a payment card even on free
Where	United States only, adults 18+
Surfaces	iOS, Android, muse.ai (web), WhatsApp; AI glasses “coming soon”
Model	Muse Spark 1.3 (released September 2, 2026)

Meta has not published the exact usage ceilings of the paid tiers.

The security architecture: Muse Secure VM

Meta’s argument is that personal agents “need a new kind of secure computer,” so it built one:

A dedicated VM per user in Meta’s cloud holds the agent, its data and stored credentials; no other user’s agent can reach it.
A Sentinel agent, isolated at the system level on the same machine, must approve anything Muse sends to the internet and escalates to the user when needed.
Credentials are blind to Muse. Passwords and payment methods go into secure storage it can use but never see — including passwords you type into the browser yourself.
Approval gates before sensitive actions (send email, purchase), a complete audit trail of done and planned actions.
User control: choose which apps connect and how much access (read vs send), disconnect anytime, opt out of training, VM data excluded from Meta’s ad systems.
Coming later in 2026: Muse Confidential VM, encrypted with a key only the user holds, so “not even Meta” can access it.

Two honest caveats from Meta’s own technical post: launch-day protections limit employee access by policy, not cryptography, and sanitized interaction trajectories may be used for training unless you opt out. Activity Muse performs on external sites can also indirectly influence ads.

Traction in the first two weeks

Sensor Tower data reported by CNBC on September 21, 2026:

730,000 downloads in the first ~5 days; 2.5 million by September 21 (≈1.5M iOS, 1.1M Android).
Overtook ChatGPT as the #1 free iOS app in the US on Friday, September 18, and was ahead of ChatGPT, Claude, Grok and Meta AI on Monday.
Over the same 13-day window Claude logged 400,000 downloads and Grok 200,000; ChatGPT 3.1 million.
Meta stock rose more than 11% on Monday, September 21; Wells Fargo lifted its target to $796.

The Amazon fight

Twelve days after launch, Amazon cut Muse off. Users trying to shop on Amazon.com through Muse now see: “Continued access by an unauthorized AI agent violates Amazon’s Conditions of Use, to which our customers have agreed.” Amazon’s stated reasons: no advance notice from Meta, an agent that does not identify itself, bypassing of Amazon’s personalization, and apparent capture and storage of credentials and account data. Amazon had already sued Perplexity over Comet and blocked Google’s and OpenAI’s shopping agents; it lost its Perplexity injunction at the Ninth Circuit on August 4, 2026, which is why this block leans on contract terms rather than hacking law. Shopify went the other way, announcing a Muse checkout partnership on September 21. Full breakdown: Why Amazon blocked Meta Muse.

The Muse name covers several products

Name	What it is
Muse	The personal agent launched September 8, 2026 (this page)
Muse Spark 1.3	The reasoning model powering it, released September 2, 2026 — details
Muse Code	Meta’s separate terminal coding agent
Muse Glimmer	30B open-weight agent model for local use — details
Muse Image / Video	Media generation models

How it compares

Muse’s closest rivals are Gemini Spark (Google AI Pro/Ultra), ChatGPT agent mode inside ChatGPT Work, and the unified Claude that absorbed Cowork on September 16, 2026. Muse’s edges are WhatsApp distribution, the per-user VM plus Sentinel design, Link purchase protection and a genuinely free tier; its weaknesses are US-only availability, no published paid-tier limits, and being locked out of the largest US retailer. Comparison: Meta Muse vs ChatGPT agent mode vs Gemini Spark vs Claude.