How it scores
What we love (and don't)
// PROS
- Free to start
- Per-user Muse Secure VM keeps your data and credentials isolated from every other user
- A separate Sentinel agent must approve anything Muse sends to the internet
- One-time-use cards hide your real payment details at checkout
- Accessible via iOS, Android, muse.ai, and WhatsApp
- More than 10 million users by October 2026 earnings; TechCrunch reported early reviews praised the design
// CONS
- Muse Wonder consumer rollout at muse.ai has no published date — no announcement of a live launch as of November 2026
- Training on your interactions is on by default; you have to turn off 'Help improve our AI models' in Data Controls
- Amazon blocked Muse from completing purchases on Amazon.com in September 2026
- No annual billing option — monthly only
- Wonder Full requires Muse Code Power ($50/mo) or Maximum ($200/mo), not a Muse personal subscription
Meta launched Muse on September 8, 2026. It is a personal AI agent that keeps working after you close the app. It has its own cloud computer per user, connects to email, calendar, and apps, and can send emails, book travel, fill forms, and shop on your behalf. The free tier is real. Power costs $20/month. Maximum costs $100/month. Meta said during its Q3 2026 earnings call that Muse passed 10 million users. Amazon blocked it in September. Muse Wonder, one of two frontier models Meta announced October 12, will “soon power more of Muse, rolling out first to subscribers.” For more on the launch numbers and the Amazon conflict, see our launch post.
What Meta Muse actually does
Each user gets a Muse Secure VM: a persistent, isolated Linux computer in the cloud with a full browser and its own storage, CPU, and memory. No other user’s agent can reach it. That machine is where Muse lives and where the credentials and data for connected services are stored.
You reach Muse through the app on iOS, Android, or muse.ai. You can also talk to it directly in WhatsApp.
Muse can send emails, book travel, fill out forms, shop, build its own tools when a task needs one, and work with connected apps including email, calendar, and Instagram. It keeps working after you close the app. It comes back when something changes or when it needs your approval before making a purchase or sending an email.
The audit trail shows everything Muse has done and plans to do. You can tell it to forget specific things it has learned.
Plans and pricing
The free tier is real. Meta’s help center describes it as a free version with a usage limit. When you exhaust the free limit, you can upgrade or wait for the next refresh.
Personal plans are monthly only, no annual discount.
| Plan | Monthly price | Weekly token allowance |
|---|---|---|
| Free | $0 | Usage limit applies |
| Power | $20 | 500 million tokens |
| Maximum | $100 | 3 billion tokens |
This is a different access model from every other always-on agent in the category. ChatGPT Dots starts at $100/month on Pro. Grok Bot requires the $30/month Premium tier of The X Subscription. Claude Duet is on a waitlist for Claude Pro, Max, and Ultra subscribers (Pro is $17/month billed annually, $20 monthly) and not yet broadly available. Instinct is also free, but invite-only. Muse costs nothing to try, and Power at $20/month is the most accessible paid persistent agent not behind a waitlist.
Muse Wonder and Muse Wonder Full
Meta announced two frontier models on October 12, 2026: Muse Wonder and Muse Wonder Full. Both are Meta’s “most capable models to date, built to deliver state-of-the-art performance on personal and professional agentic tasks.”
Two capabilities define the Wonder series:
Active Memory carries relevant context across conversations and brings back the details that matter to the current task.
Active Focus keeps the model working toward a goal when things get hard, tries alternate approaches, recovers from errors, and checks in before following through on anything important.
Wonder Full is the more advanced of the two. As of October 12, Wonder Full is available through Muse Code, Meta’s developer platform, on the Power Usage ($50/month) and Maximum Usage ($200/month) tiers. Wonder is available via the Meta Model API and Muse Code. For consumer muse.ai users, the rollout is coming: Meta said at the October 12 announcement that Wonder will “soon power more of Muse, rolling out first to subscribers.” No date has been published.
Meta has not announced Wonder or Wonder Full in the Muse app itself. Its November 6 post on spaces says only that Meta is “rolling out specialized versions of our models to Muse, trained with learnings from Muse Wonder.” That is not the same thing as Wonder.
Security
A few of the specific security decisions in Muse are worth noting.
Sentinel is a separate agent that runs on the same machine, kept apart from Muse at the system level. Nothing Muse does reaches the internet unless Sentinel approves it, and Sentinel asks you for permission when needed.
Credentials stay out of Muse’s sight. Muse has no visibility into your passwords or payment methods. Credentials you share go into secure storage, so Muse can use them without seeing them, and it cannot see passwords you type into the browser yourself.
Payment goes through Link built by Stripe. Link’s wallet for agents generates a one-time-use card, so your real card details stay hidden. Link’s purchase protections cover damaged or lost items, price drops, no-fee returns, and a return guarantee on eligible purchases.
Email access is your call. You choose whether Muse only reads your mail or can also send on your behalf.
Meta’s public bug bounty lists Muse in scope and pays up to $300,000 for a Muse VM escape.
Muse Confidential VM is coming. Meta said at launch it would arrive “later this year.” The whole VM, including data and conversations, will be encrypted with a key only the user holds, so not even Meta can access it.
Privacy: one thing to know
Muse does not share your conversations or VM data with Meta’s ad systems. Meta states this directly in the launch post.
The training setting is different. Meta calls it “Help improve our AI models” and it is on by default. It lives in Data Controls in Settings. Turning it off prevents both future and previous interactions from being used in model training. Turn this off when you first set up the account if that is your preference. The opt-out is real.
Who it’s for
The clearest case for Muse is someone who wants to try a persistent personal agent without paying for one. It is the only free option in the category that does not require an invite. Download it, connect one or two apps, and find out whether persistent delegation fits how you work.
The paid case is at $20/month. Power puts you at 500 million tokens per week, which is a substantial allowance for personal use. At $20/month, Power is the most accessible paid persistent agent not behind a waitlist.
The case against Muse in its current state is the Amazon block. TechCrunch reported on September 21, 2026 that, starting Sunday night, Muse users got an error when they tried to buy on Amazon: continued access by an unauthorized AI agent violates Amazon’s Conditions of Use. Walmart and Shopify have announced integrations. If a meaningful part of what you’d delegate involves Amazon orders, Muse cannot complete them.
The Wonder model situation is a timing question. When Wonder rolls out to consumer muse.ai subscribers, the capability picture changes. No timeline has been published.
Alternatives
These are the paid always-on agents this site has reviewed.
ChatGPT Dots is the most feature-complete. It runs on GPT-6 Astra, connects to over 4,000 apps through plugins, and works in Slack and Teams. It requires ChatGPT Pro from $100/month or Business Premium at $100/month annual. No free tier, no lower plan.
Grok Bot from SpaceX Super Intelligence comes with The X Subscription at $30/month Premium, which brings together Grok, Grok Bot, Cursor, and X Premium. All of a user’s Bots share one persistent cloud computer; isolation is per user, not per Bot.
Claude Duet from Anthropic is on a waitlist for Claude Pro, Max, and Ultra subscribers in the US. Claude Pro is $17/month billed annually or $20 monthly. Duet is a research preview with limited access.
Muse’s advantages over all three: free tier, WhatsApp access, and the most accessible paid entry among agents without a waitlist.
The honest read
Muse is a real product with a real free tier and a security architecture that is better-considered than most. The 10 million user figure from Q3 2026 earnings and TechCrunch’s reporting of strong early design reviews suggest the core experience holds up.
Two honest caveats. Amazon’s block limits shopping utility for anyone who shops there regularly. And Muse Wonder, announced in October, has not been given a date for its consumer rollout. No announcement has said when that happens.
If you are in the US or Singapore, download Muse and connect one app. The free tier costs nothing, which makes it the cheapest way to find out if persistent delegation fits your work. The upgrade decision can wait until Wonder arrives for consumers.