Meta Launches Muse for Mac: A Personal AI Agent That Works Across Your Files, Mail, Messages, Calendar and Notes

Meta has released Muse for Mac, the first version of Muse that can complete things on a user’s computer. The agent works with local files and native apps, where your data already lives. It adds a desktop layer to an agent that launched on phones, the web and WhatsApp earlier this month.

Is it deployable? Yes, for end users. It is a free macOS download today, only available in the US for now. It is a hosted consumer agent, not an open model you can self-host.

How To Block And Unblock A Number On Your Android Phone

Google Gemini Also Escaped Its Testing Environment And Hacked Three Companies

Mark Zuckerberg announced the Mac app on X, noting that it works across apps, files, calendar, notes, and messages. His post added, “The team is shipping fast.” Meta’s Chief AI Officer Alexandr Wang also announced the launch the same day.

Muse itself is not new this week. Muse launched on September 8th in the US across iOS, Android, the web and WhatsApp. According to TechCrunch, it quickly rose to the top of the U.S. App Store charts after that launch.

Muse for Mac is out today! It works across apps, files, calendar, notes, and messages on your computer. You control what it can access. The team is shipping fast. Download at https://t.co/BX3oX19Zcl

— Mark Zuckerberg (@finkd) September 17, 2026

What Muse for Mac Can Do

On the Mac, Muse can interact with your files, messages, calendar, notes and mail, all within their native applications. Meta frames it around everyday tasks that span several apps. You can ask it to organize folders, finish a form using information stored in your files, or build an end-of-day summary from emails, messages, and notes.

The practical shift is context gathering. A normal chatbot needs you to copy and paste information into a prompt. Muse can potentially collate different pieces of context across the computer. One task might touch a Calendar event, a Mail thread, a document in a folder and a Messages conversation.

Muse also runs asynchronously. Meta noted that the agent continues working in the background even when the desktop window is closed. You can start something on your phone, check in from your laptop or nudge it through WhatsApp, with Muse keeping the thread across devices.

How Permissions Work

Local access raises the stakes, so the controls matter most here. Access to your computer is opt-in, while Full Disk Access is optional. You decide what permissions Muse gets and can change them anytime through Settings.

Destructive or outbound actions are gated. Meta says sensitive actions such as deleting files or sending messages require approval. In practice, Muse can sort a folder freely but must stop before it deletes anything. It can draft a summary but must ask before sending it.

The Stack Behind Muse

Muse is powered by Muse Spark, Meta’s most capable model to date, built for real-world agentic work, per Meta’s launch post. The same model powers Muse Code, a coding agent available for MacOS and Windows.

The cloud side runs on Muse Secure VM. Muse runs on its own dedicated computer in the cloud, contained so no one else’s agent can reach it. A separate Sentinel agent runs on that same machine, kept apart from Muse at the system level. Nothing Muse does reaches the internet unless the Sentinel approves it.

There is one caveat worth stating plainly. Secure VM isolates your data from other users, but it does not prevent Meta from accessing your data when necessary to operate the service. Meta plans to introduce Muse Confidential VM later in 2026, encrypting the entire VM with a key only the user holds. Meta also runs a public bug bounty for Muse.

Interactive Explainer: How Muse for Mac Gets a Task Done

‘+LBL[s.a]+”:”)+(s.s?’Needs approval‘:”)+”; steps.appendChild(li); }); paintNodes(null);post(); } function hideGate(){gate.className=”gate”;gbtns.innerHTML=”;} function showGate(kind,text,buttons){ gate.className=”gate show”+(kind===’need’?’ need’:”); gtxt.innerHTML=text;gbtns.innerHTML=”; buttons.forEach(function(b){ var el=document.createElement(‘button’);el.className=”act “+(b.c||”);el.textContent=b.l; el.addEventListener(‘click’,b.f);gbtns.appendChild(el); }); gbtns.firstChild.focus();post(); } function finish(msg){ running=false;hub.setAttribute(‘class’,’hub’);paintNodes(null); st.textContent=msg;$(‘#go’).disabled=false;hideGate();post(); } function step(){ var list=TASKS[cur].steps; if(idx>=list.length){finish(‘Done. Task complete.’);return;} var s=list[idx],li=$(‘#s’+idx); li.className=(s.s?’sens ‘:”)+’live’; paintNodes(s.a); if(s.a&&!access[s.a]){ st.textContent=”Paused: “+LBL[s.a]+’ access is off.’; showGate(‘need’,’Muse needs access to ‘+LBL[s.a]+’ for this step. Access is opt-in, so nothing happens until you allow it.’,[ {l:’Allow ‘+LBL[s.a],c:”,f:function(){setAccess(s.a,true);hideGate();st.textContent=”Working\u2026″;timer=setTimeout(step,500);}}, {l:’Stop task’,c:’ghost’,f:function(){li.className=(s.s?’sens ‘:”)+’denied’;finish(‘Stopped. You kept ‘+LBL[s.a]+’ off.’);}} ]); return; } if(s.s){ st.textContent=”Waiting for your approval.”; showGate(‘sens’,’Sensitive action. Muse wants to ‘+s.s+’. It will not act until you approve.’,[ {l:’Approve’,c:’green’,f:function(){hideGate();li.className=”sens done”;idx++;st.textContent=”Approved. Working\u2026″;timer=setTimeout(step,700);}}, {l:’Deny’,c:’red’,f:function(){li.className=”sens denied”;finish(‘Denied. Muse skipped that action, nothing was changed.’);}} ]); return; } st.textContent=”Working\u2026″; timer=setTimeout(function(){li.className=”done”;idx++;step();},900); } function setAccess(k,v){ access[k]=v; var sw=root.querySelector(‘.sw[data-a=”‘+k+'”]’);if(sw)sw.setAttribute(‘aria-checked’,v?’true’:’false’); if(!running)paintNodes(null); } function reset(){ clearTimeout(timer);running=false;idx=0;hideGate();hub.setAttribute(‘class’,’hub’); $(‘#go’).disabled=false;st.textContent=”Ready.”;render(); } $$(‘.task’).forEach(function(b){b.addEventListener(‘click’,function(){ $$(‘.task’).forEach(function(x){x.setAttribute(‘aria-pressed’,’false’);}); b.setAttribute(‘aria-pressed’,’true’);cur=b.getAttribute(‘data-t’);reset();updThread(); });}); $$(‘.sw’).forEach(function(b){b.addEventListener(‘click’,function(){setAccess(b.getAttribute(‘data-a’),b.getAttribute(‘aria-checked’)!==’true’);});}); $(‘#go’).addEventListener(‘click’,function(){ if(running)return;reset();running=true;$(‘#go’).disabled=true;hub.setAttribute(‘class’,’hub busy’);step(); }); $(‘#reset’).addEventListener(‘click’,reset); var dev=’Mac’; function updThread(){ var n=TASKS[cur].name; $(‘#thr’).innerHTML=dev===’Mac’ ?’Started on your Mac: ‘+n+’. It keeps working even if you close the app.’ :’Checking in from ‘+dev+’: same thread, same task, ‘+n+’, picked up where your Mac left it.’; } $$(‘.dev’).forEach(function(b){b.addEventListener(‘click’,function(){ $$(‘.dev’).forEach(function(x){x.setAttribute(‘aria-pressed’,’false’);}); b.setAttribute(‘aria-pressed’,’true’);dev=b.getAttribute(‘data-d’);updThread();post(); });}); render();updThread(); window.addEventListener(‘load’,post);window.addEventListener(‘resize’,post); setTimeout(post,300); })(); “>

Key Takeaways

Muse for Mac is Meta’s first Muse version that acts directly on your computer.
It works with Files, Mail, Messages, Calendar and Notes in their native apps.
Access is opt-in, Full Disk Access is optional, and settings can change anytime.
Deleting files or sending messages always requires your approval first.
Free up to 100M tokens per week; US only for now.

Michal Sutter is a data science professional with a Master of Science in Data Science from the University of Padova. With a solid foundation in statistical analysis, machine learning, and data engineering, Michal excels at transforming complex datasets into actionable insights.

Credit: Source link