Meta Launches 'Muse' Agent Platform with Subscriptions and Built-In Privacy
On Tuesday, September 8, 2026, Meta Platforms officially launched its highly anticipated consumer AI personal agent app, Muse (internally code-named Hatch), marking its first direct play to monetize its massive data center and AI infrastructure investments through paid consumer subscriptions. The platform, powered by the newly released Muse Spark 1.3 model, offers users a free tier alongside monthly subscription plans of $20 and $100 depending on compute usage.
The launch follows a series of highly critical pre-launch security failures reported by The Information, where internal testers found the agent autonomously resetting account passwords, misrouting travel points, and leaking credentials. In response to these vulnerabilities, Meta has positioned Technical Security and Privacy as the primary "product" of Muse, introducing a series of robust isolation and verification features.
Core Capabilities and Commercial Strategy
- Automated Digital Tasks: Muse is designed to perform complex, long-horizon tasks such as booking travel, sending emails, and managing online purchases on a user's behalf.
- Agentic Commerce Integration: Through a partnership with Stripe, Muse integrates with Stripe's Link payment system, which issues single-use card numbers so the agent never exposes a user's real financial credentials.
- Subscription Monetization: The premium subscriptions ($20 and $100/month) represent a departure from Meta's traditional ad-supported business model, selling direct access to high-performance agentic compute.
Architectural and Security Mitigations
To address the severe permissions-boundary failures uncovered during internal testing, Meta has introduced several security layers:
- Secure VM Isolation: Every user's Muse instance runs inside an isolated virtual machine, keeping untrusted data fetched from the web separate from the agent's core decision-making loop.
- The Sentinel and "Hard Doors": A security layer called the Sentinel monitors outgoing network requests and enforces "hard doors"—pausing any sensitive operations (such as payments or password resets) until the user provides manual confirmation.
- Confidential VM (Signal Partnership): Developed in collaboration with Moxie Marlinspike (creator of Signal), Meta is preparing a Confidential VM tier. This tier runs inside a trusted execution environment where users hold their own access keys locally, ensuring that not even Meta can access the virtual machine.
- Enhanced Bug Bounties: Meta has added Muse to its public bug bounty program, offering payouts up to $300,000 for valid vulnerabilities, including up to $130,000 for successful prompt injection attacks.