Muse
LiveMeta's personal agent, reachable inside WhatsApp, running on a cloud computer of its own
Muse is an AI agent you reach on WhatsApp and Web. To start, create an account. It messages you first rather than waiting to be asked.
How it works
Muse is the first personal agent from a company that already owns the thread. Everything else in this directory reaches a messaging app from the outside, through a business API, a review process and a provider that carries the messages. Meta reaches WhatsApp because Meta is WhatsApp, and Muse launched on 8 September 2026 already inside it, alongside its own app on iOS, Android and the web.
What it does is the same job the rest of this set describes: email, calendar, bookings, travel, research and long-running plans, with a memory that persists across conversations and files you can edit. Two things about how it does it are unusual. It runs in a dedicated virtual machine with its own browser, so the browsing and the credentials sit in a computer allocated to you rather than in a shared pool. And a separate agent, Sentinel, holds the permission to approve anything leaving that machine, which Meta describes as the sole authority for connector actions and all network egress.
It is also the only listing here that has published a threat model. Meta's security write-up states that credentials stay in the user's VM rather than in central infrastructure, describes layered defences against prompt injection including a set of detection classifiers running independently of the model, and pays up to $300,000 through its bug bounty, of which up to $130,000 is for a successful prompt injection affecting one user. The same document says plainly that Muse is not immune to attack and that prompt injection remains an open problem. Every other product in this directory reads your messages and says nothing at all about that class of attack.
Read against the document rather than the launch copy, the privacy picture is more specific and more interesting than the announcement. Meta states that Muse does not share your conversations or the data in your virtual machine with its ad systems, and then gives the exception itself: if you ask Muse to buy a shirt from a designer's website, that designer might use your visit to show you an ad on Instagram. The agent browsing on your behalf is still a visit, and the retargeting that follows is somebody else's.
On access, the write-up is unusually direct: the VM restricts access to your data by Meta personnel through operational policies, and it does not prevent Meta from accessing data when necessary to support, secure or operate the service. A Confidential VM intended to cryptographically prevent that is promised for later in 2026, with an external audit that Meta says will be inspectable by anyone. Training defaults to on with sanitised trajectories and a stated opt-out switch in settings.
Two things are still unrecorded here. Nothing we found says what happens to the VM and its contents when you stop using Muse, and nothing addresses the people on the other end of a WhatsApp thread who never agreed to any of this. Muse links Meta's general privacy policy for everything the security write-up does not cover, which is why the rows above cite the write-up by name.
At a glance
| Channels | |
|---|---|
| How you start | Create an account |
| Who starts it | Messages you first |
| Is there an app | Optional app An app exists but is not how you start |
| Categories | Personal assistants |
| Can do | Email,Calendar and scheduling,Bookings and reservations,Travel,Payments,Web research,Task management,Persistent memory |
| Connects to | Stripe Link |
| Pricing | Meta's own page says free for most of what people need, with subscription plans for people who want to do more, and names no figure. Its chief executive said free up to 100 million tokens a week. CNBC reported paid tiers at $20 and $100 a month. |
| Number type | Not stated on its own pages |
| Contact number | None published |
| First message, pre-written | None published |
| Runs on | Meta (source) |
| Browses with | Runs its own States it built this itself |
| Number carrier | No number to look up |
| Status | Live |
Every row is read off Muse’s own public pages, checked 2026-09-08. A row reading not stated means it is not there, which is a fact about the product rather than about our research.
Data and policy
| Trains on your conversations | Yes, with opt-out“If you do not want your data to be used in model training at all, you can opt-out via a simple switch in Muse settings.” |
|---|---|
| Data of people who never signed up | Not stated in the policy |
| If you cancel | Not stated in the policy |
| Model providers named | Meta |
| Jurisdiction | Not stated in the policy |
| Availability | Rolling out in the US. AP reported at launch that it is for people 18 and over. |
Muse publishes 7 of the 9 things we check for on every listing, which puts it 2nd of 24 in personal assistants. They are listed there, and none of them is a judgement about quality.
Read from Meta's published security write-up for Muse on 2026-09-08. Quotes are verbatim. We report what the document says and link it; we do not interpret its legal effect, and policies change.
Who is behind it
| Company | Meta |
|---|---|
| Founders | Not published |
| Based in | Menlo Park, California |
| Funding | Publicly listed company, no venture round |
| Investors | Not published |
| Traction | Not published |
Company details checked 2026-09-09. A row reading not published means the company does not say, not that we did not look.
Source: muse.ai, checked 2026-09-08.
Seen in the wild
- ResearchWhatsApp
A user asked Muse what it could actually do on Facebook Marketplace. It offered to watch a specific listing or a saved search on a schedule, to search by query, price, location and condition, and to negotiate with sellers over Messenger once that connector is turned on. No purchase was made: this is the agent describing its own reach when asked.
Why it is notable
Two limits arrived unprompted, which is what makes it worth recording. The watch runs on scheduled checks rather than instant detection, so it is not a bidding war tool, and it cannot message a seller at all until Messenger is connected. Both are the sort of qualification a marketing page states as a capability without the caveat, and both come from the agent itself rather than from us.
Worth reading against Muse's own listing, which names Stripe Link as its one integration. What the product says it connects to and what it will offer to do when asked are not the same list, in either direction. His verdict on the same post, about a third-party agent being one enforcement decision from losing that access, is filed under what people say.
Posted by a user by Loktar (@loktar00): x.com, 2026-09-08. Added 2026-09-09.
What people say
Public posts, quoted one line at a time with a link to each. Anything the company said about itself is labelled as that.
“A few things I like about Muse vs. single-threaded agents on iMessage or WhatsApp”
An investor's read on what an app buys you that a thread does not: a library of connectors set up in the app, which she expects to be more reliable than driving a browser, and goals that hang off that data with progress attached to them. The screenshots show a connector list running from Bluetooth and Calendly through the Google suite, and a goals screen tracking a vehicle registration renewal and a step count.
Why it is notable
It is the clearest statement of the case against this entire directory. Everything catalogued here reaches you in a thread, and a thread has no room for a settings screen, a connector library or a progress view. If those turn out to be what makes an agent useful, the channel that makes these products distinctive is also what limits them.
“I still feel like the UI is a bit cluttered + there's a few too many things to do + places to click”
The same investor, on the other side of the ledger: too much to do and too many places to click, and no appetite for a feed inside a personal agent. She still expects it to be one of the first consumer agents to reach mainstream adoption.
Why it is notable
The criticism is a channel argument in disguise. A messaging agent cannot have a cluttered interface because it has no interface, which is the strongest thing this category has going for it and the reason the surface area an app buys comes at a cost.
“it has all of the functionality of the imessage agents in flight today but also has all of the ingredients that will expose it to hundreds of millions”
An early user of Meta's Muse says it does what the current crop of texting agents does, with distribution none of them can reach: Instagram's friend graph and the install base of Meta's apps. Posted hours after Muse launched.
Why it is notable
Every listing in this directory competes for the same job, and this is the first public account of the largest possible entrant doing that job with a distribution advantage measured in hundreds of millions of people. Nothing on any product page in the set addresses it.
“Sure Hermes can also do this, but if Muse is doing it it's got integrated access and no risk of being banned.”
A user probing what Muse will actually do on Facebook Marketplace: watch a listing or a saved search for price drops on a schedule rather than instantly, search by query, price, location and condition, and message sellers to negotiate once the Messenger connector is turned on. His conclusion is not about the features. It is that a third-party agent doing the same work is one enforcement decision away from losing access.
Why it is notable
This directory records what an agent can do and says nothing about whether it is allowed to do it, and this is the first plain statement that the second question decides the first. Every agent here that operates a service it does not own carries that risk. The one built by the company that owns the service does not, which is a durable advantage no feature list will show.
If Muse is not the one
Building one instead? The infrastructure side is a separate half of this site: every provider that carries these messages, what they charge, and what the headline price leaves out. Start with Can you put an AI agent on WhatsApp?.