Developer Wes Bos Tears Down Meta's Muse: Far More Open Than Expected

Developer Wes Bos ran a series of teardowns on Meta's Muse agent, concluding that it is far more open than expected: it can do almost anything and was not deliberately restricted into a hobbled assistant, with quite loose system boundaries.

Confirmed

• Users can ask Muse to package and deliver the entire /opt/ directory; it automatically compresses and outputs the files.
• Muse ships with about 70 preinstalled Skills and CLIs, covering everything from Spotify to the Instagram CLI; it can also install software itself, such as a Torrent client, beyond bundled tools.
• Muse has its own Muse DB memory database with a built-in query Skill for retrieving its memory and conversation history, with strict security limits.
• Muse includes a site builder called Spaces, built on TanStack, Bun, and Tailwind; sharing a site auto-deploys it to Cloudflare.
• Muse's websearch carries multiple blocklists: one covering 295 news sites that Muse refuses to crawl, and another spanning over 2 million domains, mostly phishing sites but also including some well-known ones. The Instagram Skill is prohibited from identifying people by face.

Unconfirmed

• Some features are not yet open to all accounts, including Muse Mail, which gives Muse its own inbox and the ability to send mail; rollout timing is unknown.

Why it matters

Muse's loose boundaries and large preinstalled toolchain mean the agent can perform deep operations on user machines, and its self-built memory database enables traceable conversation retrieval. Meanwhile, the blocklists reveal implicit content boundaries set by Meta at the information-access layer, and well-known sites mixed into the phishing domain list has drawn attention. For developers, Muse is effectively a general-purpose automation agent rather than a restricted assistant.

2026-09-25 ~ 2026-09-26 · 10 related posts

• Dev tears down Meta's Muse: 70 built-in skills, memory DB, deploy-to-Cloudflare sites — sidjustice_ · 2026-09-25
• [source] Wes Bos tears down Meta Muse: agents can zip the whole /opt/ dir, far more open than expected — FinanceYF5 · 2026-09-26
• Meta Muse ships ~70 preinstalled Skills and CLIs, from Spotify to Instagram — FinanceYF5 · 2026-09-26
• [source] Meta Muse's built-in Spaces builder: TanStack + Bun + Tailwind, auto-deploys to Cloudflare — FinanceYF5 · 2026-09-26
• Meta Muse can install its own software — even a Torrent client — FinanceYF5 · 2026-09-26
• Meta Muse ships its own Muse DB memory and an email-sending Muse Mail — FinanceYF5 · 2026-09-26
• Wes Bos on Meta Muse: 'it can do almost anything', far more open than expected — FinanceYF5 · 2026-09-26
• Meta Muse's web_search blocklists: 295 news sites and 2M+ domains, mostly phishing — FinanceYF5 · 2026-09-26
• [source] Meta Muse blocks 295 news sites in web_search, Instagram Skill bans face identification — FinanceYF5 · 2026-09-26

1 near-duplicate retellings: FinanceYF5