Meta launches Muse, a personal AI agent that books, buys, and browses for you
Muse: Meta's personal AI agent, features and capabilities
Meta has unveiled Muse, a personal AI agent available on iOS and Android that goes beyond answering questions to take real actions on your behalf. Running on a secure virtual machine with its own browser, Muse can book appointments, fill out forms, handle customer service, and even make purchases—with your approval. It integrates with apps like WhatsApp, email, and Instagram, and can build its own tools if needed. Privacy is a focus: logins are stored in an unreadable credential store, one-time card numbers protect purchases, and conversations aren't shared with Meta's ad systems. Muse is free with usage limits, with a paid subscription option.
If a task needs a tool that doesn't exist, Muse builds it for you.
- abixb
I think Meta's strategy is to capture the 'normie-tier' of AI users. I know most of us here on HN track model releases quite frequently and discuss every parameter weight out of them, but most of the world is just... oblivious?
I was discussing latest in tech with an accounting friend out of curiosity, and I kept talking about tiers of GPT-5.6 (Sol vs Terra vs Luna) and asked which one she used on the desktop 'Work' app, and she responded with, "just ChatGPT, what is Sol?."
I then realized that most people just stick with whatever default they're provided with, and it's a lot of them. So, us serial HN users and commenters are the extreme minority, and I'm sure millions of people will gobble up this Muse agent from Meta as if it's some sort of an innovative cutting-edge way to use the internet by Meta alone.
Curse of knowledge and all. [0]
- simonw
Meta AI's David Singleton has a thread about their security prompt injection defenses here: https://twitter.com/dps/status/2097404102468899131
> One threat we’re particularly focused on is prompt injection, and we handle it in layers. The model is trained to recognize and resist it. The harness marks anything coming from an untrusted source. Deterministic code checks the result. And an ensemble of classifiers runs where the agent can't reach them.
That "deterministic code" bit makes me wonder if they've implemented ideas from the DeepMind CaMeL paper: https://arxiv.org/abs/2503.18813 - my notes on that paper here: https://simonwillison.net/2025/Apr/11/camel/
- jmathai
> Your personal data is safe and secure
That's from the article. I can't think of anyone I'd trust less with my data than Meta. Well, thieves, I guess.
- Grombobulous
I think the product as shown in this marketing material with these examples falls squarely in the “nobody asked for this” territory of AI.
At least with B2B AI there is a problem to be solved: reduce my labor costs and increase my business output.
What’s happened here is that consumer technology is already solved, but companies like Meta are trying to jam AI technology into something that solves the non-problems that supposedly exist in hopes of squeezing the last drops of profit out of the space.
It’s hard for me to say if this problem is with the product itself or the examples that feel like an executive’s out of touch guesstimate of what it must be like to be a working class peasant consumer. What do the poor do again…book movie tickets? Is that like making a dinner reservation at a Michelin star restaurant? I bet they’ll need an AI assistant for that!
- enahs-sf
I just asked it:
“Can you lowball fools on marketplace for me?”
It replied:
“Say less, I can do that. What am I hunting…”
People are going to use this product for bad things.
- sroerick
Facebook is the first to market with a polished openclaw? Good for them.
I'm sure many others will criticize other aspects of Meta, and rightly so. But imagine using a Claw agent with zero tech support available
- weitendorf
The inline browser the agent uses that you can take control of or watch is awesome! This is something I built a lot of tools to do in the past year (including a similar inline UX/image + click pass through) but having it Just Work in a remote, fully managed client for free is extremely convenient and useful.
But… this feels like a UX that won’t last once a significant portion of consumers and purchases adopt it.
Either the network traffic is getting proxied through my client (effectively making each user a residential scraper for meta’s crawler) or it’s between meta’s servers and the sites, which puts site operators in a difficult position: if real customers are making purchases through this interface and throttling/blocking meta’s IPs makes you invisible to them and meta’s userbase, you don’t want to block that traffic.
But now every consumer in the world can just ask a question or say “check all these prices and sites for a thing I want” and go do something else, right out of the box for free, and have thousands of page loads and site interactions fire off for them.
Bypassing the branding/marketing funnels or intended UX (cf. vc twitter abusing resy thru instinct) of sites, through some kind of proxy client amplifying the traffic a human would create, with the ability to let anybody scrape or interact directly with a site’s backend… definitely a consumer win, but seems unsustainable.
- nickysielicki
People are unfortunately just ranting about not trusting meta, which… okay, fine, but having played around with this for the past hour or so it’s probably my favorite mobile LLM experience so far across Claude and ChatGPT and Gemini. It’s very good and in its own class.
- anabis
First thing I am using this is for scraping (my) groups from FaceBook since they shutdown the API a while back. "Give me comments from this group from 1/1 to 8/1 in json". Hope it works.
- cebert
I have a hard time seeing how Meta is betting people will trust them to serve as their AI agent provider. Based on their track record data privacy and tracking, why would I trust them with my most sensitive data? That’s a hard sell.