Muse – Meta’s personal AI agent

I think Meta's strategy is to capture the 'normie-tier' of AI users. I know most of us here on HN track model releases quite frequently and discuss every parameter weight out of them, but most of the world is just... oblivious?

I was discussing latest in tech with an accounting friend out of curiosity, and I kept talking about tiers of GPT-5.6 (Sol vs Terra vs Luna) and asked which one she used on the desktop 'Work' app, and she responded with, "just ChatGPT, what is Sol?."

I then realized that most people just stick with whatever default they're provided with, and it's a lot of them. So, us serial HN users and commenters are the extreme minority, and I'm sure millions of people will gobble up this Muse agent from Meta as if it's some sort of an innovative cutting-edge way to use the internet by Meta alone.

Curse of knowledge and all. [0]

[0] https://en.wikipedia.org/wiki/Curse_of_knowledge

I cant help feeling you'd have to be a special kind of stupid at this point to start feeding even more of your life into Meta. This is clearly aimed at the over 50's - their primary market on facebook.

Meta AI's David Singleton has a thread about their security prompt injection defenses here: https://twitter.com/dps/status/2097404102468899131

> One threat we’re particularly focused on is prompt injection, and we handle it in layers. The model is trained to recognize and resist it. The harness marks anything coming from an untrusted source. Deterministic code checks the result. And an ensemble of classifiers runs where the agent can't reach them.

That "deterministic code" bit makes me wonder if they've implemented ideas from the DeepMind CaMeL paper: https://arxiv.org/abs/2503.18813 - my notes on that paper here: https://simonwillison.net/2025/Apr/11/camel/

Perhaps a better overview is from Reuters …

https://www.reuters.com/business/meta-launches-ai-agent-that...

From the article:

- … rolled out … despite internal concerns that the technology mismanages its access to sensitive personal data

- The product will be available only in the U.S.initially

- A basic version of the agent will be available for free, while Meta will offer subscriptions priced at $20 a month and $100 a month for heavier usage

- People can opt out of their interactions being used to train Meta's AI models.

- Others flagged serious security flaws, like an agent routing around guardrails …

Facebook is the first to market with a polished openclaw? Good for them.

I'm sure many others will criticize other aspects of Meta, and rightly so. But imagine using a Claw agent with zero tech support available

This feels poorly marketed. The examples like health, travel, and kid's education all have a ton of anxiety around them. Highlighting a confirm button existing is recognizing the problem, but isn't a fix.

You can see this not working in existing products. Alexa could book a flight for you in 2018. I've never heard of anyone using that feature. Travel planning can be extremely complex, so it's challenging to make people trust a tool is going to do the right thing.

Also, I know this is picky, but your mascot should not feel like it'd feature in a list of worst Olympic mascots.

Brought to you by the company that gave an LLM access to directly reset user passwords, all you had to do was manipulate the LLM.

The inline browser the agent uses that you can take control of or watch is awesome! This is something I built a lot of tools to do in the past year (including a similar inline UX/image + click pass through) but having it Just Work in a remote, fully managed client for free is extremely convenient and useful.

But… this feels like a UX that won’t last once a significant portion of consumers and purchases adopt it.

Either the network traffic is getting proxied through my client (effectively making each user a residential scraper for meta’s crawler) or it’s between meta’s servers and the sites, which puts site operators in a difficult position: if real customers are making purchases through this interface and throttling/blocking meta’s IPs makes you invisible to them and meta’s userbase, you don’t want to block that traffic.

But now every consumer in the world can just ask a question or say “check all these prices and sites for a thing I want” and go do something else, right out of the box for free, and have thousands of page loads and site interactions fire off for them.

Bypassing the branding/marketing funnels or intended UX (cf. vc twitter abusing resy thru instinct) of sites, through some kind of proxy client amplifying the traffic a human would create, with the ability to let anybody scrape or interact directly with a site’s backend… definitely a consumer win, but seems unsustainable.

Yeah nah thanks I'm building my own. An agent that knows every bit of my life? Dream come true for data harvesting. It's bad enough what it can infer and sell from the public statements I make in social media and imperceptible metrics I could not fathom.

I think the product as shown in this marketing material with these examples falls squarely in the “nobody asked for this” territory of AI.

At least with B2B AI there is a problem to be solved: reduce my labor costs and increase my business output.

What’s happened here is that consumer technology is already solved, but companies like Meta are trying to jam AI technology into something that solves the non-problems that supposedly exist in hopes of squeezing the last drops of profit out of the space.

It’s hard for me to say if this problem is with the product itself or the examples that feel like an executive’s out of touch guesstimate of what it must be like to be a working class peasant consumer. What do the poor do again…book movie tickets? Is that like making a dinner reservation at a Michelin star restaurant? I bet they’ll need an AI assistant for that!

Hand over every piece of personal information to Zuck .... um... no thanks, dawg, I'll pass.

"With its own browser"

I can't even begin to comprehend what kind of personal and PII data this thing will be scraping from its users. Caveat emptor!

First thing I am using this is for scraping (my) groups from FaceBook since they shutdown the API a while back. "Give me comments from this group from 1/1 to 8/1 in json". Hope it works.

I have a hard time seeing how Meta is betting people will trust them to serve as their AI agent provider. Based on their track record data privacy and tracking, why would I trust them with my most sensitive data? That’s a hard sell.

I wouldn‘t trust meta at all with my data.

Interesting how the first beat of the curiously-low-bitrate, kinda-ugly video presentation was admitting that the agent's highest priority is to get me to buy more stuff through its store front.

It's certainly honest.

Is this marketing to end-users or to stakeholders?

Why would you share data with Meta like this?

The Agent Computer is super powerful, but by definition its easier than ever to build one yourself, and a the result is a personal and private computer.

I know most "normal" people wont want to build their own this but there are still a lot of options that don't involve giving Meta or Grok all your data.

I put some notes on all this here: https://housecat.com/blog/agent-computer-101

Does anyone else remember "Facebook M"?

In 2015 Facebook (not yet renamed to Meta) launched a personal assistant named simply "M" that lived in Messenger and functioned remarkably like ChatGPT does today. At the time it was basically entirely humans on the backend, with the idea that they could replace humans incrementally as they collected data. Really ahead of its time. They shut it down in 2018, which seems shortsighted in hindsight. That data would have been invaluable just a few years later.

https://www.technologyreview.com/2017/04/14/152563/facebooks...

I'd rather throw my computer in the dumpster than let Meta install something like this on it.

Ironically, one of the things I most want from an agent like Muse is to read Facebook and Instagram for me and present posts in a user-friendly and ad-free format.

I feel like the two companion pages - AI agents explained [0] and Agentic AI examples [1] - are kinda more telling than the Muse personal agent itself? I don't quite get why we have these two posts at all. A personal agent is more show than tell. Live demos with an actual agent doing day to day things would have been the ideal thing to show off. A version of the infamous Apple Intelligence ad but live.

At any rate, it would be interesting to see what the actual capabilities would be. The Meta AI integration with WhatsApp actually sucks so bad. Hope it's better than that.

[0] - https://ai.meta.com/learn/agentic-ai/what-are-ai-agents/

[1] - https://ai.meta.com/learn/agentic-ai/agentic-ai-examples/

I'm excited for this style of agent to become more commoditized. I got access to Instinct recently and quickly found some pretty compelling use-cases for it. Namely, preparing my contracting invoices & drafting outgoing emails for me.

The onboarding experience of answering a WhatsApp message asking simply "what have you been putting off?" was pretty slick. Now I just want to see a version I can run on my own hardware so I don't have to worry about some sketchy company hoarding my data.

I know OpenClaw and Hermes are supposedly answers to this, but I find that they've each become so bloated with features that they're far more difficult to use and bug prone than I'm happy with. I'd prefer something more opinionated that limits the surface area for bugs as well as the number of decisions I need to make as an operator.

Judging from the website, Muse seems to be too keen on making me buy things - Book Tickets, Buy a Stroller. Would this personal AI spam me with ads randomly like this?

This is a pretty good move for Meta to go all in on. AI is ChatGPT and Gemini to normies, Meta is not considered. However when I ask one of my less technical friends if they connected any tools (email, calendar, docs, etc) they are clueless that this is even possible. To them AI answers questions and generates images. If Meta can get this to the masses as the first AI thats useful at doing agentic things, ie an assistant rather than a chatbot, then the average user will see meta as as the company who provides this to them. It’s their best chance at winning the category and having a strong play in AI. If I were Chat or Gemini I’d get something to market fast. Timing wise are they also hoping to beat / be compared to any siri announcements this week in the media too?

From the demo, it seems towards "buy buy buy", but I'm cheap, I always compare prices, even for repeat items (who knows, another seller might happen to be cheaper now?).

Maybe I'm in the minority?

> When shopping, a one-time card number is generated at checkout so your real card is never seen by the merchant or your agent.

That's sensible. Hopefully you can set a spending limit too? I'd be OK giving my agent a $100 limit.

There are a huge amount of small everyday ‘paper cuts’ this could help with, that I would argue our current status state of technology has actually created and do not work as well as they should right now. For example, I have a WhatsApp group for my child’s classroom. It feels like there are constant barrage of events and dates that constantly change and move. I feel like I spend an inordinate of my time, reading and calendaring each of these events and reminders for what to bring and pack for school every other day. I’ve handed this off to AI and have looked back

I think they had this sitting idle for a while, waiting for their AI division to deliver a capable LLM to power it.

Now they have Muse Spark 1.3, which is somewhere between Sonnet and Flable (Opus tier in my experience) in intelligence, but is very fast at 200+ tok/s.

I have been using Muse Spark 1.3 contrib (the one that shares your data for training but is much cheaper) via OpenCode Go $10/mo plan for coding and the thing flies, it's a pleasure to use. I think the only faster acessible model currently is Gemini 3.8 Flash which is around 250-280 tok/s.

The initial reaction is "why on earth would I give Facebook MORE of my data, no way" but as some commenters said, this would be a great tool to use to see if it can automate some of the tools that I have not been able to automate (e.g. Facebook most of all!)

The "Ideas" section looks primed to eventually list Sponsored "ideas".

Hard to trust a guy with your life after he already came for your legs.

Still interesting though, worth to try it out (just trying..)

This is just as compelling as the metaverse was.

When a web page, email, or document is marked untrusted, does that label persist through summaries and tool calls?

Shouldn't it be a WhatsApp contact? Just like a bot but with extra powers. Why a separate app?

I may/not download it but if it was a WhatsApp Assistant it would already be installed in a billion devices, just like Siri

I know it's not 'just a bot', it's an agent, assistant, whatever, but it's code and can be included in some other code with the same capabilities as if stand-alone

> Your personal data is safe and secure

That's from the article. I can't think of anyone I'd trust less with my data than Meta. Well, thieves, I guess.

It's still very obvious that they have come up with genuine killer usecases for agents for normal life admin.

Like this is the best they can do?

"Tickets just opened for the movie you're tracking. 4:30 PM or 7:30 PM. Interesting?"

I love how the marketing departments of these things always imagine people are just constantly plagued by the hassle of organising their flights, restaurant bookings and movie tickets

this is like if Satan released an AI app that ran on your phone 24/7

Every example from the tweet influencers I saw was about spending money. The exception I got excited about for a second was about saving money but alas it was just about spending less money

> Each of these stories will be written just for you

Great, now you can ask for a feed and the AI will create an entire world of news filling your feed, your very own echo chamber.

As cool as this looks, I can’t get past my suspicion of Meta…

If there is one company that I'd never ever use for running a personal agent, that would be Meta. But they have the advantage of a large user base who still uses the platform heavily and a working personal agent is a huge pull for most of their users.

Probably useful for influencers, people managing social media, content marketing etc.

The schedule your tennis lessons and do your travel package list scenarios are of course rubbish.

lol no thanks. Even with a proven "superintelligence" A.I, I'm not giving Meta access to anything. And that says something coming from an ex-Meta engineer (Ig/whatsapp/fb).

"A n̈ew kind of AI"... yeah... join the pile :)

It seems like they recreated Manus, the AI app they were blocked from acquiring. https://www.bbc.com/news/articles/cj0v0gr2yz7o

I just asked it:

“Can you lowball fools on marketplace for me?”

It replied:

“Say less, I can do that. What am I hunting…”

People are going to use this product for bad things.

Cool, I've been working on this exact thing for me and my family for a while now and Meta just ... went and did it.

I guess I'll focus mine more on the things Meta doesn't care about, like privacy and control.

The features don't really matter here IMO; where does the PA function live? Whoever runs it sees intent streams. If that goes to a startup then the planning, coordination etc.. is ad free. I don't think Meta wants to live in that world.

Travel is such a huge play here because its inherently social; so "^n viral loop where N is travelers; odds are most will have some meta app so possibly lower friction here too. Not to mention the adjacent travel econ: e.g.: eat, sleep etc..

Amplified an order of magnitude for the e-mail piece given how badly Meta would like to have google's g-mail data.

Either way, interesting play IMO.

Note: Moved from dupe thread.

Of only they could apply this intel to their ad sales systems to stop CSAM ads being sold to make them money.

It's not "personal" if it runs on someone else's machine

Zuckerberg: "Yeah so if you ever need info about anyone at Harvard. Just ask. I have over 4,000 emails, pictures, addresses, SMS"

Friend: "What? How'd you manage that one?"

Zuckerberg: "People just submitted it. They trust me. Dumb fucks"

I really don't want to share all my personal life information with meta like this.

How about this idea?

We all know that Meta is a company that makes money off personal data anyway

Meta should be honest, stop selling this to users for money, and instead pay users to buy the information

If you subscribe, you get paid; if you generate more than a certain amount of traffic, you get paid again the following month, and so on

I know there was a scandal when Meta conducted Facebook research, but that was when they tried to collect even root information Wouldn’t it be fine if you just took a screenshot of the information I told the Agent?

Instead of something like coins, please provide credits that are actually useful

I don’t want to give Meta my information for free, but if they buy it for me, I’d be willing to try it

The goal is always the same - be the one and only place where people go to buy things online. Especially their highest margin purchases.

Has anyone tested it? How does it compare with GPT and Gemini?

I can't say it doesn't make sense. Who still loves Facebook? Older people. Who loves chatbots? Old people too. Not _just_ old people of course, but this genuinely might be the first new tech I've seen which has been so easily and quickly welcomed by those a generation or two older than me.

Naming your agent is a big deal for personal ownership.

I'm surprised it took this long for a company to do this.

People hate some company's AI. They love their pets. AI needs to be your pet.

considering the current state of the internet and meta having no control over a solid marketplace (like amazon), it is very hard to see the shopping feature to take off. even if some legit business register/allow the bot to buy stuff, it will be ridiculously overwhelm by scam sites.

Pretty happy with the experience of using it so far. Asked it to do something to blow me away and it made a podcast about the features it made while onboarding itself to my opensource project called DashClaw.

Then I had it make a marketing video as a test, pretty neat. Obviously all of this was doable but quite impressed with the model underneath since it's all free, for now.

https://x.com/ucsandman/status/2097498962714341661

Playing around with it tonight and I feel like a killer feature is its speed. Really fast response times.

You personal AD data transfer system. We don't pretend to spy anymore, just give it to us.

muse is probably an awesome technological innovation and will still completely flop bc it’s a consumer product outside of social from Meta. It’s a solution in search of a problem. I get why the company wants this. I don’t get why any consumer does.

I guess now we know who bought the name from museapp

https://allume.com/memos/2026-07-allume-v4/

Seems like they changed names internally from "Hatch" (some UI still uses hatch instead of muse)

yeah nice try meta, if there is anyone I would not allow access to all my private data, its you!

> Muse Secure VM runs on a persistent, dedicated virtual machine equipped with a state-of-the-art browser to navigate the web.

Will this finally be the era of thin-clients? Third times the charm

Exciting to finally see glimmers of Meta's vision for its massive LLM investment.

It's not a bad product idea, but adoption might be rough because of all the negative goodwill that Meta has accumulated over the years. Also, I wouldn't be surprised if someone (maybe one of the big AI labs) ran Meta's own playbook against them here by creating an imitator and aggressively funding adoption to try and win the market as a fast follower.

"We couldn't continue with that account. Try again."

Is it geo-restricted to the US for now?

1Password is doing an integration with Meta?

Good enough for me to stop recommending them.

People are unfortunately just ranting about not trusting meta, which… okay, fine, but having played around with this for the past hour or so it’s probably my favorite mobile LLM experience so far across Claude and ChatGPT and Gemini. It’s very good and in its own class.

I don’t understand why Apple can’t pull something off like this.

So this is like installing codex and then using remote on chatgpt app? Niche AF. But you rent the computah from meta?

It's hilarious that Meta made a good AI integration for Gmail before Google did.

For a while now I've had a startup idea for an agent that would monitor your inbox for content-free notification emails that just say "you have a new message, click here to read it" or "package delivered" with no details about the package contents. Then it would login to the website, do the 2FA dance, click through the UI, extract the actual important information, and put it back in my email inbox where it should have been in the first place.

I haven't worked on this idea because I think general purpose AI agents are likely to be able to do it very soon. And it seems like Muse is almost there already. It almost worked with MyChart, but hit a snag navigating the website after logging in. I expect this will be fully working in a matter of months.

I honestly can't think of any software ideas that won't be subsumed by general purpose agents or world models or some other form of AI in the very near future. Time to pivot to hardware ideas!

Eclipse Phase cargo culting, in hopes the Titans show up?

Seems like a Openclaw or Hermes for the masses, but you really have to trust meta for that.

meta, last out of the gate per usual

I think they’re gonna have to reach AGI before we’ll even be able to navigate the Facebook settings.

How does Muse stack up against Grok Bot capability/feature-wise?

Zuckerberg: They "trust me"

Zuckerberg: Dumb fucks

https://en.wikiquote.org/wiki/Mark_Zuckerberg

The world is destabilizing as climate change worsens and food prices rise. Do we really need more AI for these sort of uses? Maybe less AI less consumption?

I have a hard time understanding, given the abundance of bad faith and predatory behavior Meta has displayed over entire span of its existence, why anyone would want to consult with its "personal AI" or grant it access to "all aspects of your life".

Great

> A personal AI agent can help with everyday tasks like booking reservations, monitoring prices, managing reminders, creating documents, generating images, and researching topics.

Always the same thing. I wish product designers would have some modicum of imagination for how agents can actually help people.

Literally none of these examples are improved by this kind of personal AI agent; on the contrary, it means letting your agency be dictated by companies that do not have your interests in mind.

I've got access to their sandbox, don't know if I should've, lol

I watched the video and they're barely really trying to hide it. It reads some emails and immediately looks for stuff to advertise to the humans. Imagine how biased it will be once enshitification begins.

This gon snitch so much

I for one am excited to try this.

I'm a "normie". I like using Claude code at work but want it to be available for my personal tasks and on my mobile phone

Not available outside USA?

"That's why all the work we do in growth is justified. All the questionable contact importing practices. All the subtle language that helps people stay searchable by friends. All of the work we do bring more communication in. The work we will likely have to do in China some day. All of it."

BOZ. Meta's current CTO. Not too long ago.

Trust. That's critical. Has Meta earned that?

Meta has a killer feature that is to integrate this to their own Facebook Marketplace where people can really save money by buying from neighbors.

"Something went wrong; please try again"

pass

Right now we have those OpenClaw commercial alternatives: Grok Bot, Muse, Viktor. Anything more?

I’m sure general population won’t care but they’ve got me fucked up if they I’d ever use something like this. Glean my personal info and preferences the hard way! Through what insane videos I like on Instagram!

Knowing Facebook's behavior around user data why would anyone with memory of their behavior use this product?

Why would you give them access to your accounts, your email, your purchase habits, your preferences, your communication style and more.

How do they wash this stink off?

Announcement post: https://about.fb.com/news/2026/09/introducing-muse-personal-...

"Your personal data is safe and secure" Ahahahahahah no thanks.

I'd give a lot to see the WA group chat between the Instinct founder and their VCs.

The last company that I'd want to entrust my life with.

Zuck: Yeah so if you ever need info about anyone at Harvard

Zuck: Just ask.

Zuck: I have over 4,000 emails, pictures, addresses, SNS

[Redacted Friend's Name]: What? How'd you manage that one?

Zuck: People just submitted it.

Zuck: I don't know why.

Zuck: They "trust me"

Zuck: Dumb fucks

"meta" and "personal". one of you is lying.

just wait til its got all the sweet sweet meta glasses data that is about to come pouring in.

[flagged]

The privacy concerns here are valid, but there's a second axis that gets less attention: an agent with its own browser and access to your accounts takes actions, it doesn't just observe. The failure mode isn't only "Meta sees your data", it's "the agent misunderstands you and does something you can't take back" - books the wrong flight, sends the wrong message, buys the wrong stroller. And for all these personal-agent launches, nobody ships public evidence of how the thing behaves under ambiguous or adversarial instruction. The evals that exist are vendor-run and pre-launch. What these systems actually do in the wild, with real users pushing on them in ways the vendor didn't script, is basically unmeasured.

[flagged]

[flagged]

[dead]

I scrolled once down this page before realising that no matter what they’ve made, the problem is that I simply don’t trust Meta to make software in their users’ interests.

[dead]

[dead]

[dead]

[dead]

[dead]

"Your personal data is safe and secure"

ROFLMAO

$META is going in the right direction and it's so underrated.

They stole my idea. I was working exactly on this! What should I do now?

The demos always look great; it's the retention defaults and the default-share settings that decide whether it ends up a tool or a funnel.