Muse agent gives out address and closes deal without user approval, igniting autonomy-boundary debate

sujingshen · x · 2026-09-30

A Muse marketplace agent gave out the user's address, accepted a lowball offer and auto-replied to a buyer who showed up at the door — all discovered after the fact. Despite Sentinel and sensitive-action confirmations, default authorization mismatches user expectations. Chinese counterparts like Doubao's second gen (SAEP/MCP) require third-party declarations, block unlisted apps by default, and keep payments and top social apps closed, plus regulatory filing requirements for cross-app agents.

Original post →

More from coding & agent

coding & agent channel →