Meta Brings Muse to Mac, Giving Its AI Agent Access to Native Apps
The desktop release puts Meta’s personal agent beside everyday communications and work files, making the boundaries on its access central to the product.
Loading page…
The desktop release puts Meta’s personal agent beside everyday communications and work files, making the boundaries on its access central to the product.
Listen to this story
Meta has extended Muse from mobile and web to macOS, where the agent can operate across files, email, calendars, notes, messages, and connected services. The product’s value now depends on desktop permissions: users choose which apps to connect, while confirmations and an action audit trail are intended to limit risky behavior. Sentinel separately governs internet access and external actions.
Alexandr Wang announced the Mac release on September 17, after Muse launched on mobile and web earlier this month.
Users can select connected apps, adjust access, or disconnect services, including third-party systems and Meta properties.
Muse asks before sensitive actions such as sending email or making a purchase, and maintains an action audit trail.
Meta’s personal AI agent can now work inside a Mac user’s files, messages, calendar, notes and mail. The company has released Muse as a Mac app, extending an agent built to take actions beyond a chat window into native desktop applications.
Muse launched on mobile and the web earlier this month and quickly reached the top of the U.S. App Store charts, according to TechCrunch. Alexandr Wang announced the Mac version on September 17.
This is more than a larger interface. Muse can work within applications holding personal information and communications, so the access choices determine what parts of a person’s Mac the agent may reach. Meta says Mac access is opt-in and that Muse asks before sensitive actions.
Meta’s earlier launch materials say Muse runs in a dedicated cloud virtual machine with its own browser. The company says users select connected apps and can change access or disconnect a service, while Sentinel operates separately from Muse as the permission authority for outside actions.
Meta says its safety work focuses on prompt injection, long-horizon instruction following and coordination among multiple agents. Those are the company’s descriptions of its safeguards, not independent evidence that Muse will prevent every error or attack.
Muse’s desktop appeal depends on the same access that creates its risk. Working across files, mail and calendars could remove steps a chat-only assistant cannot, but useful access requires people to understand what they are granting. Meta says Muse has connectors for third-party systems as well as Meta apps including Instagram and Facebook, broadening the set of services those choices can cover.
Loading discussion...
Join the conversation
Explain which limits would make that acceptable.
Be the first to share a perspective or an experience.
Reader comments
Newest comments first. Replies stay oldest first.