Meta launches Muse, a personal AI agent, in the US

8 Sep 2026: Meta introduced Muse — a personal AI agent on iOS, Android, and muse.ai, plus WhatsApp chat, with AI glasses later. It runs in Muse Secure VM with a separate Sentinel. Safety, privacy, and “does the work” claims are Meta’s.

8 Sep 2026: Meta published “Introducing Muse: The World’s First Personal AI Agent Built for Everyone” on about.fb.com. That is the filing event. Meta: Muse is a personal agent that “doesn’t just answer questions, it actually does the work,” powered by Muse Spark.

Meta: people talk to Muse in the Muse app or in WhatsApp. It can send email, book travel, open a browser, fill forms, and negotiate. For longer jobs it keeps working after the app is closed and comes back when something changes or it needs approval — Meta names sending an email or making a purchase. Checkout uses Link by Stripe; Shop Pay and 1Password are “coming soon.” Those workflows are Meta’s product claims.

Meta says Muse runs on Muse Secure VM, a dedicated virtual machine that holds the agent and the person’s data. A separate Sentinel agent on the same machine, kept apart at the system level, must approve anything that reaches the internet. Meta: Muse has no visibility into passwords or payment methods; people pick which apps connect and how much access each gets; conversations and VM data are not shared with Meta’s ad systems; people can opt out of training use and tell Muse to “forget” specifics. Later this year Meta says it will ship Muse Confidential VM, encrypted with a key only the person holds, “so not even Meta can access it.” Those are Meta’s security claims, not a third-party audit.

Rollout on the same page: US only, on iOS, Android, and muse.ai, “coming soon” to AI glasses. Meta: free “for most of what people need,” with subscription plans “for people who want to do more.” The newsroom post does not list prices. TechCrunch and CNBC, same day, report two paid tiers — Power at $20/month and Maximum at $100/month — and TechCrunch says a payment card is required to start. Treat the dollar figures as those reporters’ accounts of Meta’s launch briefing.

A dated Meta newsroom launch for a consumer agent with a named secure VM. File the announcement. Sentinel, ad-system isolation, Confidential VM, and the “does the work” list stay Meta’s. Pricing is the reporters’.