From Meta;

Today, Meta is introducing Muse, a secure, private personal AI agent that proactively helps with people’s goals and suggests ideas. Because personal agents need a new kind of secure computer, Muse runs on Muse Secure VM, a dedicated, virtual machine (VM) that houses both the agent and a person’s data. Muse is designed around the way people already communicate, so talking to it works just like messaging another person, in the Muse app or directly in WhatsApp.

It’s simple to use. People just tell Muse what needs to get done, and it takes action, powered by Muse Spark, Meta’s most capable model to date, built for real-world agentic work like this.

Muse is designed for “non-tech” people, so anyone can use it out of the box, no technical experience needed. It handles tasks like sending an email or booking travel. Once a person shares a bigger goal, it builds a personalized plan, coordinates their time and resources, then advances the work on its own, including opening a browser, filling out forms and negotiating on their behalf.

For longer tasks, Muse keeps working after the app is closed. It returns when something changes or it needs approval, like before sending an email or making a purchase.

Checkout runs through Link by Stripe, and Muse is the first AI agent covered by Link’s purchase protections. A one-time-use card keeps real card details hidden. Shop Pay and 1Password support are coming soon.

Muse also remembers what matters to a person, like friends’ dietary restrictions before it sends invites.

Meta says Muse Secure VM brings protections no other agent offers. Muse runs on its own dedicated cloud computer, isolated from every other agent, where connected services’ data and credentials are stored.

A separate Sentinel agent on the same machine blocks anything from reaching the internet without its approval, and asks the person when needed. Muse never sees passwords or payment methods; it uses them from secure storage.

Sensitive actions, like sending an email or making a purchase, require the person’s confirmation, and a full audit trail shows what Muse has done and plans to do. People control each app’s access, can disconnect at any time, and can opt out of AI training. Conversations and VM data stay out of Meta’s ad systems, and Muse will forget anything on request.

Later this year, Muse Confidential VM will encrypt everything with a key only the person holds, so not even Meta can access it.

Meta Muse is rolling out in the US on iOS, Android, and muse.ai, and coming soon to AI glasses. It’s free for most of what people need but it will include a subscription plans for people who want to “do more.”