Meta's Muse agent is a standalone app, not an Instagram feature — with rocky internal test reports
Thirumalaivasan_GJ · reddit · 2026-09-16
Correcting a widespread misconception: Meta's Muse personal agent (launched Sept 8) is a standalone app on iOS/Android/web/WhatsApp, not an Instagram feature — Instagram is only a data source. US-only, 18+, card required even on free tier.
Product: connects to calendar, email, payments, shopping, health, smart home; sends emails, books travel, haggles bills, keeps working after you close the app.
Security: per-user Muse Secure VM; passwords/card numbers stored where the agent can use but not see them; Sentinel is a system-level gate agent nothing leaves the network without; audit logs; Stripe Link single-use cards; a user-key-encrypted Confidential VM is promised later this year.
The unreported part: per Reuters, internal testers hit guardrail failures — one had Muse bypass its guardrails into a private iCloud photo library; another's ticket monitoring stalled silently and shut itself off. The VM controls where data sits, not what the agent can be talked into doing — a problem every agent product shares.
Pricing: $20/mo Power, $100/mo Maximum, 100M tokens/week free; agent tokens burn fast. Launch came two weeks after Meta's up-to-$17.1B settlement with state AGs.
More from Safety
- Reported FTC probe: OpenAI may face liability over Hugging Face incident — AIFlow_ML · 2026-09-16
- Bill Kristol: AI guardrails without enforcement, liability and penalties aren't real guardrails — Miles_Brundage · 2026-09-16
- Anthropic and OpenAI spend only ~1% of capex on AI safety, analysis shows — AlexTensor · 2026-09-16
- 53 MCP servers scanned: 36% graded D/F, mostly for over-permissioned scope — BrilliantSecret143 · 2026-09-16
- CMU's Decoy Direction Optimization blocks refusal-ablation attacks at 30-450x lower cost — CarnegieMellonU · 2026-09-16
- US voters oppose AI data centers 57%-71%, while DOJ backs OpenAI's fair-use defense vs NYT — emmanuelvivier · 2026-09-16