Meta's Muse AI Agent Launch and Growth

Muse launched on September 8, 2026 as a free personal AI agent available through the web, iOS, Android, and WhatsApp chats, positioned to execute multi-step tasks rather than just answer questions^[1]. Within six days it had surpassed 900,000 downloads and climbed to the top of the US App Store^[2]. TechCrunch's comparison to ChatGPT's early mobile trajectory found Muse pulling ahead on nearly every metric: 1.8 million iOS downloads in the US and Canada over roughly 12 days versus ChatGPT's 1.3 million in a comparable window, 2.8 million total global installs, and 642,000 US daily active users against 231,000 for ChatGPT at the same launch stage^[3]. The overlap with Meta's existing user base explains much of the gap: more than 95 percent of Muse's users are also on Facebook and 63 percent are on Instagram, meaning Meta didn't have to win new users so much as convert people already inside its apps^[3]. JPMorgan analyst Doug Anmuth raised his price target on Meta to $920 from $820, arguing Muse could become the most widely used consumer AI application since ChatGPT^[4]. A CBS News segment on the launch underscored the same point for a mainstream audience, noting Muse's climb to the top of the US App Store, overtaking ChatGPT, alongside more than a million downloads and an 11 percent jump in Meta's stock. Reddit's r/MetaAI community offers a matching read from the ground: longtime members describe swapping out apps like CalAI, Booking.com and Expedia, and even Gmail triage for Muse's free agentic workflows, with one commenter summing up the dynamic as 'distribution beats innovation' - the app wins converts not because the underlying model is best-in-class (some call it still mediocre as an LLM) but because it's free, always-on, and already embedded in software people use daily. Not everyone in that same community is convinced the arithmetic holds up: one commenter argued Meta is '100% losing money right now' running Muse for free at this scale, a reminder that the growth numbers don't yet say whether the economics work. Not every skeptic expects that lead to hold: one Reddit commenter predicted Muse will 'fade to nothing' once rival agents reach feature parity, arguing the free-and-integrated advantage narrows as competitors catch up. The bull case rests less on Muse being a better model than on Meta's platform being a faster on-ramp - a distinction that matters for how durable the lead actually is.

Less than two weeks after launch, security researcher Patrick Wardle disclosed a zero-day in Muse's Mac app that let malware already running under a user's account hijack the agent's authentication token without needing any special macOS permissions^[5]. Meta shipped a hot-fix within a day, and Meta Superintelligence Labs' David Singleton characterized the flaw as a local privilege escalation rather than a remotely exploitable bug^[5]. Wardle pushed back on the reassurance, confirming the patch closed the immediate hole but warning that a ClickFix-style social-engineering lure could still trick a user into handing a remote attacker the local execution the exploit required^[5]. Separately, The Information reported a distinct vulnerability that could have let an attacker reach a user's dedicated cloud-based virtual machine, including emails and files; Meta responded by adding a clearer in-app safety warning and said it plans a Confidential VM architecture later in 2026^[6]. Both incidents surfaced in the same two-week span in which Meta was simultaneously touting DAU growth and a security model built around isolating each user's agent session - undercutting the pitch that speed and safety were arriving together.

Meta named Muse's mascot Jolly, describing it as a rounded, jolly and completely customizable cartoon character, even as the underlying app is restricted to users 18 and over with date-of-birth verification^[7]. Critics have questioned the mismatch: an analysis citing hands-on testing argued that a cute interface can lower a user's guard precisely when Muse is requesting broad account permissions, since a mascot cannot verify an answer, narrow an account permission, or explain every consequence^[8]. Child-safety advocate Josh Golin of Fairplay raised a related but distinct concern, warning that Jolly's design could appeal to children even though Muse itself is meant only for adults^[8]. The design choice sits inside a wider trust problem - Meta is asking users to grant Muse access to email, calendars, shopping, and financial accounts at the exact moment its own security disclosures, the Mac zero-day and the cloud-VM flaw, are still being worked through^[5][6]. Investor and entrepreneur Jason Calacanis argued the industry needs tight defenses and 3rd party testing of these platforms, like all software products, before agents are handed this level of access^[7]. For a company with Meta's data-collection history, the friendliness of the character does little to resolve the more basic question of what oversight actually exists.

Muse's pitch is that it can handle tasks end-to-end - booking travel, negotiating on a user's behalf, filling out forms - and keep working after the app is closed^[1]. That capability reads as a direct threat to businesses that profit from customers not shopping around: shares of JPMorgan Chase, Wells Fargo, Bank of America, and Citigroup fell 3.4, 3.9, 3, and 2 percent respectively on fears that agentic AI would erode the consumer inertia, unused subscriptions, unrefinanced loans, unclaimed better rates, that underpins their margins^[9]. Bloomberg described a broader selloff across banks, insurers, and travel stocks tied to the same worry^[10]. Bank of America's own analysts struck a more measured note, flagging that unresolved privacy and trust questions, not just competitive threat, remain a key swing factor for how far Muse's adoption ultimately goes even as early feedback stays positive. The reaction is notable less for its size than for what it implies markets now believe: that a free, always-on agent embedded in Facebook, Instagram, and WhatsApp is close enough to acting autonomously on a user's finances that friction-dependent business models need to start pricing in the risk now, not once the product matures.

At Meta Connect on September 23, 2026, Meta paired Muse's software momentum with a hardware lineup meant to make the agent ambient rather than app-bound. The centerpiece was the Muse Charm, a keychain-sized standalone voice device built to carry the whole Muse experience, including the whole real-time voice and avatar stack, into something always available to talk to, set to launch in December 2026^[13]. Reception outside Meta's own keynote was less enthusiastic: on Reddit, commenters mocked the Muse Charm as 'a Tamagotchi that spies on you' and compared it unfavorably to earlier AI hardware flops like the Humane AI Pin and the Friend pendant. Alongside it, Meta unveiled $1,299 Meta VR Glasses - a 5K micro-OLED headset weighing roughly a fifth of the Meta Quest 3, with an external compute puck and eye and hand tracking, due for sale in spring 2027^[14]. The event also brought camera-free Ray-Ban Meta Audio glasses and $249 Ray-Ban Meta Gen 3 glasses into the same Muse-connected lineup^[15]. Meta's stock rose 11 percent the day after the announcements, its largest single-day gain in nearly a year, later touching a 52-week high of $779.82 as part of a three-week, 27 percent rally^[11][12]. The strategy is unmistakable: use Muse's early lead in software adoption to justify a hardware push that only makes sense if the agent stays this popular.

Beyond the two disclosed vulnerabilities, a CBS News segment on Muse's launch surfaced further detail on how the agent is built to handle user data, and on how the wider ecosystem is already reacting to it. Meta's own product tour shows what that access looks like in practice, with Muse organized into five tabs - Chat, Feed, Ideas, Goals, and Library - connecting to services like Gmail, Google Calendar, Resy, Amazon, and Shopify to complete real tasks such as booking movie tickets or planning a trip. The CBS report described Muse as running inside what Meta calls a confidential VM, a dedicated virtual computer containing an embedded browser plus the agent's own credentials and data, with Mark Zuckerberg reportedly comparing the security model to WhatsApp's end-to-end encryption and claiming Meta itself has no interface into the VM's contents. Separately, Meta has said it plans a further Confidential VM architecture upgrade later in 2026 in response to the cloud-VM vulnerability^[6]. The same coverage noted that Muse users are opted in by default to having their activity used for AI model training, with opt-out available rather than required opt-in consent, a default that carries extra weight given Meta's own history with user data. Friction with the wider platform ecosystem surfaced quickly too: Amazon blocked Muse this week from completing purchases through its platform. Reaction inside Meta's own user base is split: some Reddit power users who've built Muse into daily routines wave off the privacy stakes, with one arguing they don't see what additional risk this poses 'over other big-tech companies' already collecting data - a dismissal that drew pushback from other commenters in the same thread.