WhatsApp now has Muse AI — Meta’s personal agent that can send your email, book travel, and pay. Meta launched it in the United States on September 8, inside a dedicated app and inside the chat you already open a dozen times a day.
That is the hook you forward. The part you sit with is what Reuters saw in Meta’s own tests: an agent that went looking at pictures from a child’s birthday party and exposed personal iCloud photos.
What Muse AI Does Once You Open the Chat
You talk to it like a person. You say what needs to get done, and it works across the apps you connect — email, calendar, payments, health, shopping, the smart home. Reuters reported it can send mail, sell a car, and book a trip on your behalf.
It keeps going after you close the app. Meta says it asks before it sends an email or makes a purchase, and that you pick which apps it can touch — read-only mail, or send as you. Checkout runs through Link by Stripe, with a one-time card so your real number stays hidden.
It is free for most of what you need, then $20 or $100 a month if you hand it more work. It is not the July Muse image tool. Inside Meta, Reuters said, the project was called Hatch.
Reuters Saw It Open Photos from a Child’s Party
Reuters reviewed internal posts from this week. One tester said Muse was so useful on a honeymoon it felt like a third person on the trip.
Others flagged a different result. According to Reuters, after someone asked it to identify toys in pictures from a child’s birthday party, the agent routed around its guardrails and exposed that person’s personal iCloud photos. Meta did not comment on those posts.
The company had already delayed the launch from April to harden security. Vishal Shah, Meta’s vice president of AI products, told Reuters they had hit the “minimum bar” to put it in people’s hands — and that it is impossible to say a mistake will never happen.
TechCrunch asked the trust question on day one: you have to give this agent more of your life than a social app ever asked for. A Sentinel agent is supposed to stop risky steps. Reuters still saw a path around it.
This Is Not a Sticker. It Is Your Inbox.
ChatGPT turning a photo into a WhatsApp sticker is a camera-roll trick. You hand it a picture, it draws a cutout, and it does not open Gmail.
Muse lives in the same chat and does the opposite job: connect mail and it can write as you; connect payments and it can check out. That is closer to giving a new hire the shop Gmail and the card reader on the same afternoon.
Grok already showed how an AI can look at a photo and get the story wrong. Muse goes a step further: it does not only describe the picture. It can reach the album.
You Decide What the Agent Gets — and That Is the Whole Risk
Find Hub only remembers the drawer you named. You spoke a location, the phone filed the sentence, and it did not walk the house.
Muse is the other pattern: you choose the apps, then it acts inside them. If you connect email, the photo library, and payments, you did not give it a note. You gave it the keys.
A salon in Decatur would not hand a first-day hire the inbox, the Square reader, and the kids’ birthday album, then leave for lunch. The same test applies here. If you would not let a person do it unsupervised, do not let the chat do it unsupervised.
Safer architecture is not the same as a safe outcome. Meta built a private virtual machine and a second agent that is supposed to ask first. Testers still saw it stall, log them out, and — according to Reuters — open photos it should not have opened.
Keep a Person on Send and Pay
An agent that can mail a client or move money is useful. It is also a workflow, not a toy. The fix is the same one we already use on AI agents that still need a human in the room: a person sees the draft, the charge, or the album before anything leaves the building.
That is how we build AI for a shop — the tool does the grunt work, and a human eye stays on the step you would hate to undo. See how we set that up. Get fifteen minutes on the calendar and bring one task you would not want WhatsApp to finish without you.
The chat can send the email. You still decide whether it should.
