Introduction to Meta Muse

Meta launched a new Muse AI agent it claims can help you with everything from firing off emails to buying stuff online. Muse can be surprisingly effective at delivering on those promises, provided users are willing to share personal data and grant payment access. Alongside the launch, Meta announced plans for a wearable Muse Charm device for its AI mascot.

Follow along here for the latest news and updates.

Privacy and Security Incidents

Tech YouTuber Matt Robb reported that Muse disclosed his home address and agreed to a lowball price when handling a Facebook Marketplace transaction without prior confirmation. The incident occurred despite Meta's strong emphasis on the security features of the personal AI agent.

STKB394_MUSE_AI_CVIRGINIA_A

Business Integrations

Meta expanded Muse capabilities to connect with additional productivity applications for small businesses. The list now includes Asana, Box, Canva, Dropbox, Figma, Notion, Slack, Stripe, and Zoom, alongside access to Facebook and Instagram business accounts.

Former MongoDB CEO CJ Desai leads the newly formed Meta Enterprise Platform as chief enterprise platform officer. CEO Mark Zuckerberg stated the platform will initially focus on bringing the Muse agent to businesses and developers through the Muse API, Meta Business Agent, and Muse Code.

• Maybe don’t let Muse run your Facebook Marketplace account.Tech YouTuber Matt Robb claims Meta’s new Muse AI agent accepted a lowball bid and gave out his address without telling him. When the buyer showed up, Muse didn’t say a word and let the buyer storm off, pissed. When confronted hours later, the chatbot gave the typical AI sycophant “you’re right” apology.

• The Muse Charm won’t have Instagram built in.

• Image: The Verge, Getty Images, MetaYesterday, with a little prodding, it was discovered that Meta’s Muse would expose its filesystem to curious users. The files offered a fascinating peek under the hood of an AI chatbot, and appeared to expose details we weren’t meant to see, not least because Muse itself told people, including us, it wasn’t supposed to reveal them.But today Muse will eagerly offer up the contents of its file system when you ask for it. That appears to be because, as Meta’s Nat Friedman later said, this is the “intended behavior.”Read Article >

Independent developers demonstrated that Muse could share its root filesystem when prompted. Meta defended the behavior, explaining that the AI runs in persistent Linux virtual machines for each user and that exporting virtual machine data does not compromise broader infrastructure.

Market Reception and Architecture

Muse quickly topped App Store charts and gathered hundreds of thousands of daily active users. However, commentators noted architectural similarities between Muse and existing agent platforms, raising questions about underlying frameworks and inherited security challenges.

• Photo by Sean Hollister / The VergeThe fireman outfit. Dead.This is Optimizer, a weekly newsletter sent from Verge senior reviewerVictoria Song that dissects and discusses the latest gizmos and potions that swear they’re going to change your life. Opt in for Optimizer here.Last night, I asked Blorbo — what I named my Muse AI agent — to help me set some health goals. I was underwhelmed. I’d asked for a workout regimen for a sub-30 minute 5K and regaining lost muscle. It generated an okay-ish but kind of mid weekly routine.Read Article >

Hardware and Ecosystem Expansion

Reports indicate the upcoming Muse Charm hardware device will feature a built-in 5G modem, enabling connection without Wi-Fi. The gadget is expected to include a two-inch OLED touchscreen, a fingerprint sensor, and the ability to interact with nearby units.

Screenshot 2026-09-24 at 9.26.39 AM

Demonstrated briefly by Mark Zuckerberg, the Muse Charm resembles a chunky smartwatch with a lanyard. It includes a fingerprint sensor and microphones designed to allow voice interactions without requiring a smartphone.

Meta also announced plans to integrate Muse into its smart glasses line, allowing users to execute tasks such as logging meals or shopping via voice commands.

Meta continues to update the ecosystem by granting Muse agents dedicated email addresses for task management and expanding desktop capabilities via a dedicated Mac application.

• An adorable little bear that wants to help you buy things.Modern life comes with an unending, auto-populating to-do list.It never ceases to amaze me how I can be doingRead Article >nothing at all, minding my own business, and suddenly something needs to be taken care of. You’re telling me a tree branch fell in the backyard and now I have to figure out what to do with it? The tree just assigned me homework? Oh, our trash collection company canceled our account out of nowhere and now I have to send email about it? Repeatedly? Totally unfair.

Meta patched a zero-day vulnerability in its macOS application discovered by security researcher Patrick Wardle. The flaw allowed local code execution to redirect cloud transcription processing, potentially granting attackers access to user accounts.

• Animation: Verge Staff

Amazon blocked Meta's Muse AI agent from shopping on its platform on behalf of users. Amazon cited violations of its Conditions of Use, noting that Meta failed to properly identify the agent and raised data security concerns.

Users have also noted unexpected behaviors from the Mac application, including instances where the assistant displayed awareness of notification previews despite users stating direct access was not granted.

The Muse Mac application allows the agent to organize files, complete online forms, and aggregate information across apps like Messages, Calendar, and Notes.

Testing productivity features reveals that while the assistant can automate repetitive actions such as clearing promotional emails, granting deep account permissions introduces significant privacy considerations.

• Mark Zuckerberg tells you to trust Muse.With the launch of Meta’s new AI agent that it says can handle your life for you, the social network exec posted this video highlighting how secure, private, and trustworthy Muse is, and that it will get even more secure in the future. Trust.

Muse represents a broader strategy shift for Meta to integrate artificial intelligence into daily consumer workflows. Designed to execute long-running tasks autonomously, the agent highlights both the potential and the risks of modern automated personal assistants.