Meta has released a Mac app for Muse, its personal AI agent, extending the product to macOS after its US debut on iOS, Android and the muse. ai website on September 8, 2026. The desktop build arrives as a direct download — a Muse-1.0 disk image on the company's Muse download page — rather than through the Mac App Store, and it sits alongside the free iPhone and Android apps. For businesses already testing consumer-grade agents, the move matters because Muse is now positioned as a tool that follows a task across phone, laptop and WhatsApp instead of living on a single device.
What the Mac app actually does
According to Meta, the Mac version organizes files, fills out forms and pulls information from Messages, Calendar and Notes, all with the user's permission. The Muse product page describes the desktop edition as working with files, apps and browser tabs, which places it closer to an operating-system-level assistant than to a chat window. The download page stresses continuity: Meta describes starting a task on a phone, checking in from a laptop and nudging it along from WhatsApp, with the agent keeping the thread across every device. Muse can also be used directly inside WhatsApp, in the same way a user messages other people, and the company has said the agent is coming soon to AI glasses. The iPhone app, listed by developer Meta Platforms, Inc., is free with in-app purchases, requires iOS 18.0 or later, carries an 18+ age rating and is a 116.3 MB download, with version history reaching back to early September 2026.
The agent runs on what Meta calls Muse Secure VM — a dedicated virtual machine that houses both the agent and the user's data, contained so that no one else's agent can reach it. The muse. ai site describes it as a persistent, isolated Linux virtual machine with a full browser and enough storage, CPU and memory to do the kinds of things a user would do on their own computer. A separate Sentinel agent runs on the same machine, kept apart from Muse at the system level, and nothing Muse does reaches the internet unless Sentinel approves it; Sentinel asks the person for permission when needed. Meta says Muse has no visibility into passwords or payment methods: credentials go into secure storage the agent can use without seeing, including passwords typed into the browser by the user, with 1Password support planned. At checkout, Muse uses Link built by Stripe, whose wallet for agents generates a one-time-use card so real card details stay hidden. Meta says Muse is the first AI agent covered by Link's purchase protections, which include free coverage for damaged or lost items, price drops, no-fee returns and a return guarantee on eligible purchases; Shop Pay is coming soon as another payment route.
Muse was introduced in a September 8, 2026 announcement as a secure, private personal AI agent that takes action rather than only answering questions, powered by Muse Spark, which Meta calls its most capable model to date and built for real-world agentic work. The launch list included sending email and booking travel, plus longer-term goals where the agent develops a personalized plan and advances the work on its own — opening a browser, filling out forms, negotiating on a person's behalf. For tasks that take more time, the agent keeps working after the app is closed and returns when something changes or when it needs approval, such as before sending an email or making a purchase. Pricing follows a freemium pattern: Muse is free for most of what people need, with subscription plans for heavier use, and the product page's FAQ states that after the free usage limit users can upgrade or wait for the limit to refresh. That places Muse in the same commercial bracket as other consumer agents, where the free tier is the acquisition channel and the paid tier is the margin.
What this means for business adoption
For companies evaluating agents, the practical shift is that a consumer-grade assistant now reaches desktop files, calendar and messaging without a separate enterprise contract. A small team can let Muse handle form filling, scheduling lookups and file organization on a Mac at no cost until the usage limit bites, which removes the procurement step that usually slows pilot projects. A larger organization faces a different calculation: the same access that makes the agent useful — Messages, Calendar, Notes, browser tabs — is exactly the data that security review will want to scope, and the free tier offers no administrative controls described in the source. The device continuity Meta advertises also cuts both ways, since a task started on a phone and finished on a laptop crosses personal and work contexts.
Several conditions still need verification before Muse goes into a work environment. Meta says users choose which apps Muse connects to and how much access it gets, and can change access or disconnect a service at any time; they can also opt out of having interactions used to train Meta's AI models, and Meta says Muse does not share conversations or VM data with its ads systems. The agent shows a complete audit trail of everything it has done and plans to do. Against that, the App Store listing's developer-stated privacy disclosures say the app may collect and link to data categories including health and fitness, financial information, location, contacts and browsing history — information Apple notes it has not verified. The news does not mean Muse is an enterprise-ready system: there is no mention of SSO, admin consoles or compliance certifications, and the 18+ rating signals a consumer product. Buyers should ask the vendor how the audit trail is exported, what happens to VM data when access is revoked, and whether the planned Muse Confidential VM, announced for later in 2026 to encrypt the entire virtual machine with a key only the user holds, will be available on the paid tier or separately.
The marker to watch is the Muse Confidential VM rollout later in 2026: if Meta ships full-VM encryption with a user-held key on schedule, the agent becomes defensible in regulated environments and the desktop app turns from a productivity experiment into an infrastructure decision. If the feature slips or stays limited to consumer accounts, Muse remains a personal tool, and business adoption will keep waiting for the administrative and compliance layer that the launch materials do not describe.
