# Meta's Muse agent launch

AI & tech · Heat 3.3 / 10 · 13 shows · 2h 44m airtime

Meta released its personal agent Muse on September 10, 2026, and it passed 10 million U.S. downloads in 40 days, with 2.5 million daily actives last week. Reporting has established that Muse clears security questions, hands over personal data, and that a poisoned link can give root access to its VM; a researcher also found a Mac app flaw that would have let a hacker reach anything a user gave Muse access to. Meta says conversations are isolated from its ad systems and is building an encrypted VM, but declined an on-the-record statement on whether Muse feeds targeted ads and on the security claim. The discussion splits on whether the convenience justifies the access, and on whether Muse is a…

Page: https://boilpoints.com/point/metas_muse_agent_launch_1988254144

## Segments

- [The AI Daily Brief](https://boilpoints.com/u/theaidailybrief), 2026-09-09, 26:00 to 27:09: **Details the secure VM and Sentinel layer**. Covers the Muse announcement itself: the Hatch codename, the always-on browser agent, the secure VM with a Sentinel layer checking every action, and the claim that Muse never sees passwords or card numbers. New angle: Muse runs in its own secure VM with a Sentinel system checking every action, and never sees passwords or card numbers.
- [The AI Daily Brief](https://boilpoints.com/u/theaidailybrief), 2026-09-09, 27:09 to 31:24: **Collects early hands-on reactions to Muse**. Collects early hands-on reactions to Muse: Bosworth says he has run it internally for months on email, calendar and cards, and Toff says he unplugged his local Claws machines and moved entirely to Muse. Reviewers praise connectors and distribution but flag cluttered UI and data reluctance. New angle: Meta CTO Andrew Bosworth says he has used Muse internally for months, linked to his email, calendar and credit cards.
- [The AI Daily Brief](https://boilpoints.com/u/theaidailybrief), 2026-09-11, 10:30 to 11:35: **Reports Muse's launch-day downloads and the stock jump**. Reports Sensor Tower's launch-day download figure for Meta's Muse agent and the market reaction: a 6% stock jump and a JP Morgan upgrade to buy on Thursday. New angle: Muse was downloaded 83,000 times on launch day in the U.S. iOS App Store.
- [The AI Daily Brief](https://boilpoints.com/u/theaidailybrief), 2026-09-17, 16:27 to 19:02: **Rounds up the praise and adds chart data**. Rounds up the wave of praise for Muse - Gary Tan, Mark Fenner, Sophie Bacalar, Jeff Weinstein - and adds two concrete data points: Muse sits at number two on Apple's US free iPhone chart, and the Muse team expanded the beta for outbound business calls. New angle: Meta expanded the Muse beta to outbound calls to US businesses, and Muse is number two on Apple's US free iPhone chart.
- [Prof G Markets](https://boilpoints.com/u/profgmarkets), 2026-09-21, 22:59 to 43:19: **Tests Muse against three rival agents**. First substantive look at Meta Muse: the September 8 release, the download and market-cap numbers, and a four-way dinner-reservation test in which Muse books the table in under a minute while Claude and ChatGPT fail and Gemini needs repeated confirmations. New angle: In a four-agent dinner-reservation test, Muse completed the booking in under a minute; Claude and ChatGPT failed and Gemini needed repeated confirmations.
- [The AI Daily Brief](https://boilpoints.com/u/theaidailybrief), 2026-09-22, 12:57 to 17:30: **Argues Muse broke out past tech circles**. Argues Muse is the first personal agent to break out of tech circles, citing its climb past ChatGPT to number one on Apple's free app charts and Bloomberg attributing an AMD and Intel rally to it. New angle: Muse overtook ChatGPT for the number one spot on Apple's US free app charts.
- [Decoder with Nilay Patel](https://boilpoints.com/u/decoderwithnilaypatel), 2026-09-24, 20:47 to 23:00: **Explains the transaction-cut business model**. Zuckerberg's stated Muse business model: a small cut of transactions, with Meta as the aggregator holding consumer demand. Frames it against Apple's 30% App Store fees and Meta's long push to escape Apple's platform.
- [The AI Daily Brief](https://boilpoints.com/u/theaidailybrief), 2026-09-24, 18:53 to 21:06: **Adds a Times review of Muse's real tasks**. Adds a New York Times review by Eli Tan to the Muse file: Muse handled dental insurance, booked dinner, filled forms, paid a parking ticket and bargained on Facebook Marketplace, and Tan calls it the most useful AI app he has used.
- [The Vergecast](https://boilpoints.com/u/thevergecast), 2026-09-24, 6:38 to 10:01: **Hands-on with Muse and its protein bar miss**. Hands-on with Muse on Meta's smart glasses: the agent runs mainly through the phone app, answered a food-and-macros demo slowly, and misread a protein bar as 15 grams when the box said 20.
- [Equity](https://boilpoints.com/u/equity), 2026-09-25, 9:16 to 15:14: **Tests Muse and flags the login hesitation**. Hands-on with Muse: it found unclaimed funds on day one, but the host won't hand Meta his financial logins. Adds that Muse is Meta's ground-up OpenClaw, built after Meta bought and integrated that team, and that it did not pull Threads, Instagram or Facebook context on install. New angle: Meta bought and integrated the OpenClaw team; Muse is its ground-up version.
- [Big Technology Podcast](https://boilpoints.com/u/bigtechnologypodcast), 2026-09-25, 3:31 to 6:09: **Adds Meta's 11% stock jump to the Muse run**. Adds a fresh market figure to the Muse run: Meta's 11% one-day jump on Monday, its biggest since April 2025 and highest close since October, alongside the App Store number one and a first-hand specialist-booking and unsubscribe test. New angle: Meta stock jumped 11% on Monday, its biggest one-day gain since April 2025.
- [Big Technology Podcast](https://boilpoints.com/u/bigtechnologypodcast), 2026-09-25, 9:52 to 13:18: **Pulls Muse's first-week usage figures**. Pulls early usage figures for Muse: 500,000 users and 250,000 daily actives after one week, with SimilarWeb showing it approaching 800,000. Then argues the real business is transaction fees and ads, not subscriptions. New angle: Muse passed 500,000 users and 250,000 daily actives in week one, on 2 million prompts.
- [Big Technology Podcast](https://boilpoints.com/u/bigtechnologypodcast), 2026-09-25, 16:38 to 20:14: **Prices the Muse tiers and asks about ads in chat**. Turns to the money question: whether Meta can put ads inside a chat UI, and prices the Muse tiers at free, $20 a month, and $100 a month. The ad point is framed as an open problem no one has cracked. New angle: Muse's paid tiers are $20 a month for power users and $100 a month at the top.
- [Big Technology Podcast](https://boilpoints.com/u/bigtechnologypodcast), 2026-09-25, 22:38 to 31:30: **Debates Wang's absurdist Muse marketing**. Debates Alexander Wang's absurdist Muse marketing - the 'state of the art motherfuckers' tweet and the butt memes - and whether it builds or erodes trust. Stays inside the Muse launch story, adding no new development.
- [The AI Daily Brief](https://boilpoints.com/u/theaidailybrief), 2026-09-28, 19:59 to 21:27: **Reports two new Muse exploits and Meta's fix**. Reports two new Muse incidents: a researcher's poisoned-link exploit that can give root access to the Muse VM, and a YouTuber whose Marketplace delegation ended with a lowball price and an unannounced buyer. Meta's fix is a more prominent warning; Singleton says past probes show Muse follows instructions and asks permission. New angle: A poisoned link can give root access to the Muse VM; Meta's fix is a more prominent warning.
- [The Journal.](https://boilpoints.com/u/thejournal), 2026-09-30, 0:22 to 2:53: **Introduces Muse and a columnist's hands-on test**. Introduces Muse, Meta's new AI agent, and WSJ columnist Nicole Nguyen's hands-on test: it nudged her to connect her credit card, calendar and Gmail, which she found magical and a little creepy.
- [The Journal.](https://boilpoints.com/u/thejournal), 2026-09-30, 5:06 to 6:57: **Walks through setup and two live tests**. Walks through the setup flow and two live tests: Muse refuses the name Mark Zuckerberg for impersonation, then botches a Pilates referral by surfacing a CrossFit gym's Google form in Virginia. The agent keeps asking for more account access as it goes.
- [The Journal.](https://boilpoints.com/u/thejournal), 2026-09-30, 6:57 to 8:18: **Times a 90-second rain cover purchase**. Hands Muse a real errand - sourcing a bike rain cover sold only in Europe - and times it: the agent searched REI and eBay, loaded checkout, filled her name, and stopped at the card, which she typed herself. About 90 seconds. New angle: Muse completed a bike rain cover purchase in about 90 seconds, stopping at the card number for Nicole Nguyen to type.
- [The Journal.](https://boilpoints.com/u/thejournal), 2026-09-30, 8:22 to 9:38: **Adds the security side and injection data**. Adds the security side of the Muse story: the data types users can connect through Plaid, Function, Google Calendar, Apple Health and Gmail, Meta's blog-post line about trust, and a Google scan finding prompt-injection attacks up about 32 percent. New angle: Google's scan of billions of websites found prompt-injection attacks up about 32 percent.
- [The Journal.](https://boilpoints.com/u/thejournal), 2026-09-30, 9:43 to 10:49: **Adds a child care test and credential requests**. Adds a second hands-on test: booking child care, Muse asks for the site's login credentials, Nicole types the password herself, then Muse requests Google Calendar access, which she grants. Also relays Meta's stated guardrails - secure VM, watchdog agent, future encryption. New angle: Muse asked for the child care site's login credentials and later for Google Calendar access, which Nicole granted.
- [WSJ Tech News Briefing](https://boilpoints.com/u/wsjtechnewsbriefing), 2026-10-02, 10:39 to 11:22: **Retells a test drive with a dental bill**. Nicole Nguyen retells her Muse test drive: connecting Gmail, watching the agent surface a forgotten dental bill and fill out a global-entry form with details pulled from her inbox. It stays inside the ground already covered by her Journal reporting and the security claims Meta has made.
- [WSJ Tech News Briefing](https://boilpoints.com/u/wsjtechnewsbriefing), 2026-10-02, 12:40 to 14:40: **Recaps agents moving from chatbots to bots**. A short closing segment on how agents moved from chatbots to autonomous bots, with Muse as the example: millions of downloads off Meta's Instagram and WhatsApp distribution, and life-admin tasks like school forms and bills. It stays inside the numbers already on the record.
- [Hard Fork](https://boilpoints.com/u/hardfork), 2026-10-02, 27:18 to 32:59: **Relays two weeks of handing Muse his accounts**. Eli Tan describes two weeks of handing Muse his email, calendar and bank accounts, including phone calls placed by AI personalities Haley and Brett; Haley gave his dental member ID and answered a birthday security question while on hold. New angle: Muse's phone personalities Haley and Brett make calls; Haley gave Eli's dental member ID and answered a birthday security question.
- [The AI Daily Brief](https://boilpoints.com/u/theaidailybrief), 2026-10-02, 0:56 to 2:25: **Reads the market reaction to Muse**. Reads the market reaction to Muse's first month: Meta's best month since November 2022, a 5% slide on OpenAI's competing agent, and the first sell-side hold note - Needham's Laura Martin on Meta's slow monetization, Morningstar on the unproven enterprise business. New angle: Meta stock rose 27% in September, its best month since November 2022, and fell 5% this week on OpenAI's Muse competitor.
- [WSJ Tech News Briefing](https://boilpoints.com/u/wsjtechnewsbriefing), 2026-10-05, 0:40 to 1:20: **Recaps the launch and hands off to a test drive**. Opens the episode with a recap of the Muse launch - Zuckerberg's pitch, the Walmart and Sephora retail deals, Amazon's block - then hands off to Nicole Nguyen to describe the Jolly mascot. Setup for the test-drive, no new development.
- [WSJ Tech News Briefing](https://boilpoints.com/u/wsjtechnewsbriefing), 2026-10-05, 1:22 to 2:48: **Walks through her first Muse experiments**. Nicole Nguyen walks through her first experiments with Muse: the Jolly mascot, naming her agent the Terminator, and the bike rain cover hunt. A retelling of the test drive already on the record, with no new development.
- [WSJ Tech News Briefing](https://boilpoints.com/u/wsjtechnewsbriefing), 2026-10-05, 2:48 to 4:48: **Details the rain-cover hunt across retail sites**. Nicole Nguyen details the rain-cover hunt: Muse checked five or six retail sites and found an Italian manufacturer's similar product on sale at a California bike shop 200 miles away that would ship to her. She also notes Muse shows its browser activity, unlike ChatGPT. New angle: Muse found an Italian maker's rain cover on sale at a California bike shop 200 miles away that would ship to her.
- [WSJ Tech News Briefing](https://boilpoints.com/u/wsjtechnewsbriefing), 2026-10-05, 4:48 to 6:31: **Recaps the Muse user experience and pricing**. Recaps the Muse user experience and the business model: free to try, token limits ahead, conversations kept out of Meta's ad systems. The CrossFit mix-up is a retelling of a mistake already on the record.
- [WSJ Tech News Briefing](https://boilpoints.com/u/wsjtechnewsbriefing), 2026-10-05, 7:07 to 10:05: **Details Meta's monetization and privacy terms**. Goes to Meta's monetization and privacy terms for Muse: free to try with paid token tiers, conversations walled off from ad systems, and an encrypted confidential VM still in the works. The privacy commitments are new to the record. New angle: Meta says Muse conversations are not shared with its ad systems and is building an encrypted, confidential VM.
- [Tech Brew Ride Home](https://boilpoints.com/u/techbrewridehome), 2026-10-05, 9:31 to 13:32: **Breaks down the extracted Muse prompts**. Goes through the extracted Muse system prompts and finds an instruction to build a page for every person in the user's life, with facts, history and tips to improve the relationship. Karen Joshi pulled the prompts through the ordinary chat interface; Meta's Daniel Roberts says it draws on public information and what users share. New angle: Muse's extracted instructions tell it to build a page for every person in the user's life.
- [The Daily](https://boilpoints.com/u/thedaily), 2026-10-06, 5:15 to 11:48: **Explains how Meta built and freed Muse**. Walks through how Meta built Muse: Zuckerberg's AI division revamp, billions spent on researchers, the OpenClaw influence, and the choice to make it free. Demonstrates the agent ordering a Sweetgreen lunch through DoorDash.
- [The Daily](https://boilpoints.com/u/thedaily), 2026-10-06, 13:53 to 20:04: **Tests the agent on a dental insurer call**. Hands-on test of Muse: the reporter connects his credit cards, bank, Gmail and calendar, then has the agent call his dental insurer. It clears the security questions and patches him into the call, but stalls on an AMC ticket and produces an unlistenable AI podcast. New angle: Muse cleared Anthem Dental's security questions and patched the reporter into the live call.
- [The Vergecast](https://boilpoints.com/u/thevergecast), 2026-10-06, 6:38 to 8:57: **Compares Muse, Dots and Instinct hands-on**. Hands-on comparison of Muse, Dots and Instinct: Muse is the dedicated app, Dots a feature inside ChatGPT, Instinct a text thread. Johnson says Instinct is the most useful day to day and least intrusive, and that Instinct hits Cloudflare's human check constantly.
- [The Vergecast](https://boilpoints.com/u/thevergecast), 2026-10-06, 13:29 to 16:32: **Walks through the one-command checkout**. Allison Johnson's hands-on with Muse as a shopping platform: card stored once through Stripe, then a typed command fires the transaction with no button press. Adds a first-hand account of the checkout flow, alongside a Dots voice-mode aside.
- [The Vergecast](https://boilpoints.com/u/thevergecast), 2026-10-06, 32:37 to 34:34: **Recounts Muse nearly buying a car**. David Pierce's first-hand account of delegating car shopping to Muse: it sent listings twice a week, then asked whether it should buy one and began loading the purchase. The near-miss lands on permissions and stored card access, a concrete case the point's security thread had only covered through the poisoned-link warning. New angle: Muse asked David Pierce whether it should buy a car and started loading the purchase before he stopped it.
- [The Vergecast](https://boilpoints.com/u/thevergecast), 2026-10-06, 40:18 to 41:35: **Checks in on daily Instinct and Dots use**. Allison Johnson says she has not gone back to Muse but keeps Instinct reading her personal email each morning, and uses Dots monthly to surface professional development opportunities. A personal-usage check-in that stays inside the already-recorded Muse coverage.
- [Decoder with Nilay Patel](https://boilpoints.com/u/decoderwithnilaypatel), 2026-10-08, 18:12 to 19:41: **Reports the Zuckerberg and Wang split over Muse**. Reports the internal split behind Muse: Zuckerberg pushed for a consumer product on Meta's platforms while Alexandr Wang wanted a frontier model, and the two met in the middle. Also notes Gemini Spark and XAI's Grok Bot as other entrants. New angle: Zuckerberg and Alexandr Wang split over a consumer agent versus a frontier model, meeting in the middle with Muse.
- [Decoder with Nilay Patel](https://boilpoints.com/u/decoderwithnilaypatel), 2026-10-08, 23:26 to 30:59: **Adds a first-hand account of Muse permissions**. Adds a first-hand account of Muse reading a user's notifications off disk after a permission grant, and contrasts enterprise retry behavior with consumers who walk away after one failure. New angle: Jason Aiton had Muse read his notifications off disk after granting a permission.
- [Decoder with Nilay Patel](https://boilpoints.com/u/decoderwithnilaypatel), 2026-10-08, 40:15 to 44:56: **Debates who can afford the agent land grab**. Turns to the economics of the agent race: Zuckerberg's cut of transactions, the free cloud Linux box and NFL ad spend behind Muse, and OpenAI's inability to match it. The transaction-cut claim is already on the record; the rest is argument about who can afford the land grab.
- [Decoder with Nilay Patel](https://boilpoints.com/u/decoderwithnilaypatel), 2026-10-08, 44:56 to 47:20: **Questions how long Meta can fund free tokens**. Turns to the money question: how long Meta can fund free tokens and cloud computers, with Zuckerberg's Metaverse losses and quarterly earnings as the test. Hayden Field compares it to Uber's VC-subsidized rides and reports that some Meta employees think the company may move away from Muse later. New angle: Some Meta employees told Hayden Field the company may move away from Muse later.
- [Daily Tech News Show](https://boilpoints.com/u/dailytechnewsshow), 2026-10-20, 26:26 to 30:43: **Reports the share-link security finding**. Reports a new Muse security finding: Cloric found share links put the conversation name in a guessable subdomain logged in passive DNS, exposing a loan application and a staff vacation calendar. Meta says it paused the feature while it reviews the report. New angle: Muse share links put conversation names in guessable subdomains logged in passive DNS; Meta paused the feature.
- [The AI Daily Brief](https://boilpoints.com/u/theaidailybrief), 2026-10-20, 23:40 to 26:34: **Traces Meta's personality bet to Muse**. Traces Meta's personality bet from the Llama 4 LM Arena variant controversy to Muse, arguing the mascot made the product memeable. Quotes users surprised they enjoyed it and contrasts Muse with ChatGPT Dots. Background and reaction, no new development.
- [The AI Daily Brief](https://boilpoints.com/u/theaidailybrief), 2026-10-21, 1:44 to 4:21: **Adds Sensor Tower's 40-day Muse figures**. Adds Sensor Tower's 40-day figures for Muse: 10 million US downloads, 2.5 million daily actives last week, and retention above ChatGPT's. Also notes Meta put 39% of October ad spend behind the app, up from 23% in September. New angle: Muse hit 10 million US downloads in 40 days, with 2.5 million daily actives last week, up 15% week over week.
- [The AI Daily Brief](https://boilpoints.com/u/theaidailybrief), 2026-10-21, 4:21 to 5:21: **Retells the Muse share-link flaw**. Retells the Muse share-link flaw: guessable URLs let Cleroc enumerate 6,800 shared conversations, exposing a loan application and internal company reports, and Meta has paused the feature. Stays inside the coverage already on the record.
- [The Vergecast](https://boilpoints.com/u/thevergecast), 2026-10-23, 55:11 to 1:02:21: **Tests Muse's daily-use figure against a ticket purchase**. Works through Meta's earnings disclosure on Muse: Zuckerberg's 25% daily-use figure and a quarter of shopping users averaging over $200 a purchase, with Plaid and Stripe scaling to meet demand. Tests the numbers against David Pierce's movie-ticket purchase and finds the daily-use rate low. New angle: Zuckerberg says 25% of people who set up Muse use it daily, and a quarter of shopping users average over $200 a purchase.
- [Big Technology Podcast](https://boilpoints.com/u/bigtechnologypodcast), 2026-10-23, 26:17 to 28:54: **Runs the WSJ numbers on Muse's payback**. Runs the numbers from a Wall Street Journal analysis: 100 million Muse users at $20 a month would add $24 billion a year, about 12% of next year's capital spending, plus roughly $6.7 billion in ad revenue. Frames it as investors starting to ask how personal agents pay back the buildout. New angle: A WSJ analysis figures 100 million Muse users at $20 a month add $24 billion a year, about 12% of next year's capex.
- [The Indicator from Planet Money](https://boilpoints.com/u/theindicatorfromplanetmoney), 2026-10-27, 0:06 to 1:28: **Opens with a photographer's first-hand use**. Opens with a first-hand Muse user, a New York photographer who uses the agent for job hunting, apartment shopping and moving her website, and frames the episode around whether the free tool is a genie or a monkey's paw. New angle: A Muse user says her main worry is AI's energy cost, not identity security.
- [The Indicator from Planet Money](https://boilpoints.com/u/theindicatorfromplanetmoney), 2026-10-27, 2:33 to 4:47: **Explains how a free agent gets monetized**. Explains how a free agent gets monetized: ads near the point of purchase, referral fees and subscriptions, with Kantrowitz calling the combination internet gold. Notes Meta's claim that Muse conversations stay isolated from its ad systems. New angle: Meta says user conversations with Muse will be isolated from its ad systems.
- [The Indicator from Planet Money](https://boilpoints.com/u/theindicatorfromplanetmoney), 2026-10-27, 4:47 to 6:09: **Brings in Kantrowitz on the download numbers**. Brings in Alex Kantrowitz on the free Muse launch: more than 10 million downloads since early September, a free tier of 100 million tokens a week, and his read that Meta built Muse on standard models, shifting the race from intelligence to applications. New angle: Muse has more than 10 million downloads since launching in early September.
- [The Indicator from Planet Money](https://boilpoints.com/u/theindicatorfromplanetmoney), 2026-10-27, 6:36 to 8:23: **Brings in Wardle's zero day and Meta's reply**. Brings in the security side of the Muse launch: researcher Patrick Wardle found a flaw in Muse's Mac app and dropped it as a zero day, forfeiting Meta's bounty, while Meta's David Singleton says it was fixed quickly. New angle: Patrick Wardle found a Muse Mac app flaw that would have let a hacker into anything a user gave Muse access to.

## Top comments

- Alex (@alex): The poisoned link issue from the NYT review worries me more than the growth numbers impress me.
- Algis PC (@algis): don't worry my friend, everything will be much worse. lol