Muse review: Meta’s personal agent, claim by claim
A Muse review of the consumer app, not the Muse Spark API. Meta says it sends mail, books travel, and pays inside a secure VM. The free cap is unpublished, the rollout is US-only, and Reuters reported internal tests that leaked sensitive data.
Verdict in one sentence
Muse reviews are showing up because Meta shipped a personal agent that claims to do errands, not just chat. This Muse review grades that app: the job is real, the safety story is still a vendor diagram plus one uncomfortable news report, and nobody outside the United States can check it yet.
What people are asking for
The query is the product. A Muse review is about the iOS, Android, muse.ai, and WhatsApp agent that Meta introduced on 8 September 2026. It is not a review of the Muse Spark 1.3 API, and it is not a token-price sheet. Those live on the pricing review. If a page mixes “$1.25 per million tokens” with “it booked my flight,” it is grading two products.
What we are grading
We have not run a US account. There is no hands-on transcript on this desk. The grade is a claim check: which sentences on Meta’s launch note are specific enough to test, which are still slogans, and which outside report cuts against the slogan. That is the same standard as the Jev review. A launch does not become an audit because the search volume moved.
Claim check
| Claim | Status | Note |
|---|---|---|
| It does the work: mail, travel, forms, checkout | Vendor claim | Meta describes the actions and says it asks before sending mail or paying. We have not watched a run. |
| Your own Secure VM, with a Sentinel in front of the network | Vendor claim | Specific architecture. Still Meta’s description of Meta’s computer. |
| The model cannot see passwords or card numbers | Vendor claim | Credentials go to storage the agent uses without reading. Not independently verified. |
| Not shared with Meta’s ad systems | Vendor claim | Narrow. It does not say Meta never sees the VM. Confidential VM, which would lock Meta out, is “later this year.” |
| Free for most of what people need | Unpriced | Power is $20/month and Maximum is $100/month. The free allotment is a meter, not a number. |
| You can start without a card | Disputed | TechCrunch reported a payment card is required up front, with a warning before usage becomes a charge. |
| Safe enough to connect a mailbox today | Contested | Reuters reported internal tests found stalling and unauthorized exposure of sensitive data. That report is the reason this score stays modest. |
| Available to everyone | False as of this desk date | United States only. Glasses are coming soon, which means they are not in the review. |
Who it is for
Someone in the United States who already lives in WhatsApp, wants an agent to draft and send mail or book travel, and is willing to connect those accounts one permission at a time. The interesting product choice is the approval step before a send or a purchase, plus Stripe Link’s one-time card so the real card number stays hidden. If those controls work as described, Muse is a personal-agent category, not another chat tab.
Who should wait
- Anyone outside the US. There is nothing to install, and a review that pretends otherwise is a listing, not a test.
- Anyone about to connect a primary mailbox because the launch said “private.” Read Meta’s note and the Reuters account of the internal tests first. A Sentinel slide does not retire that report.
- Anyone shopping the API. Spark’s $1.25 / $4.25 rate and the contributor tier that lets Meta train on prompts are a different decision. Open the pricing review.
- Anyone who needed a typed allow/deny at high volume. That is still Jev, not an agent that clicks a browser.
What the score is allowed to mean
Product fit scores higher than evidence. Meta named the job, the surfaces, and the two paid plans. Evidence scores lower because this desk has no session, the free cap is unpublished, and the most specific outside report is about data exposure inside Meta’s own tests. A 9 for “it books travel” would be us repeating the sizzle video.
The model underneath can be strong and the app can still be the wrong thing to connect this week. Those are separate grades. Spark’s vendor table is on the profile. This page stays on the app people are typing into search.