How Muse works

Muse’s browser: how it works, and how to take control

When Muse books, buys or fills in a form, it uses a real web browser on its own cloud computer. You can watch it work, take over, or stop it. Here’s how that browser works, what it does with your logins and cookies, and what the websites it visits can see.

By Published Facts checked 2026-10-08

Quick answer

Muse uses a real web browser on its own private cloud computer to book, buy and fill in forms for you. In the chat, tap Open browser to watch it, Take control of the browser to pause it and do a step yourself, or Stop the task to end it. Your logins go into a Secure Credentials Store that the AI can’t read, and Muse asks before important actions like purchases. To most websites, Muse looks like an ordinary visitor. Some sites, like Amazon, block it anyway.

How we checked

Not testedThis page uses Meta’s Help Center, Meta’s own Muse page and a security firm’s report, checked October 8, 2026. Our own approval test is on how Muse works. See how we label evidence.

What Muse’s browser is

Per MetaMeta calls it “a web browser inside your chat.” It “works similarly to browsers you’re familiar with like Chrome and Safari.”1 It runs on Muse Secure VM, which Meta describes as “a persistent, isolated Linux computer with a full browser that you and your agent can use to complete tasks, allowing you to intervene at any point.”2 Meta’s examples of what it’s for: booking appointments, making purchases, filling out online forms, and “keeping an eye on things, like looking for price drops.”1

How to watch, take over or stop it

  1. Open browserPer MetaOpens a viewing window in the chat so you can watch what Muse is doing.1
  2. Take control of the browserPauses Muse so you can do a step yourself (for example, entering a code sent to your phone).1
  3. Stop the taskEnds what Muse is doing.1

You can also ask Muse about its browsing in chat. Meta’s example: “Show all URLs you have visited in the last week.”1 If Muse is stuck on a page, see Muse not working.

Logins, cookies and approvals

  • Per MetaLogins: stored in a “Secure Credentials Store,” so Muse can sign in to complete tasks without the AI model getting your password.1 Meta says 1Password integration is “coming soon.”2
  • Per MetaCookies: Muse may “accept essential cookies on third-party websites,” and you can ask which ones it accepted.1
  • Per MetaApprovals: Muse “is designed to ask you to confirm before it takes certain important actions in the browser, like making a purchase.” You can change what needs approval under Settings → Permissions.1
  • Per MetaPayments: at checkout Muse uses a one-time card number, so the site never sees your real card.2 How Muse shopping works.
  • Per MetaAI training: Meta uses your Muse interactions to develop its AI models unless you turn that off under Settings → Data controls.1 How to turn it off.

What websites see when Muse visits

ReportedSecurity firm Cequence said Muse traffic showed up at more than half of the customers it studied within two weeks of launch. That covered financial services, retail, travel and software. It added that “Muse does not sign its requests or identify itself as an agent, so to most security tools it looks like a person browsing.”3 Cequence also saw a browser update reach more than 90% of Muse traffic within days. It took that as a sign Meta runs and updates these browsers centrally.3

  • Some sites block it. Amazon blocks Muse from shopping there. Why Muse can’t shop on Amazon.
  • Meta hasn’t published a user-agent string or IP ranges that site owners could use to recognize Muse. We found none in Meta’s Help Center or developer docs on October 8, 2026.
  • For site owners: Cequence’s advice is to “block the action, not the agent”: limit or challenge specific actions rather than all visits.3 Meta, Sierra and partners are working on an open standard so agents can identify themselves and connect properly. The Personal Agent Protocol.

Sources

  1. How your Muse agent browses the web Meta Help Center · checked Oct 8, 2026
  2. Muse home page Meta · checked Oct 8, 2026
  3. Meta’s Muse reached more than half of customers Cequence studied without identifying itself as an AI agent Cequence Security press release · Oct 7, 2026

Last checked: 2026-10-08. Run a site and seen Muse traffic? Tell us.

Frequently asked questions

Does Muse have its own browser?

Yes. Meta calls it “a web browser inside your chat” that works like Chrome or Safari. It runs on Muse’s private cloud computer, not on your phone.12

How do I take control of Muse’s browser?

Tap Open browser in the chat to watch. Choose Take control of the browser to pause Muse and do a step yourself, or Stop the task to end it.1

Can Muse see my passwords?

Meta says logins are kept in a Secure Credentials Store, so Muse can sign in for you without the AI model reading your passwords.1

Can websites tell that Muse is a bot?

Often not. Security firm Cequence reported that Muse “does not sign its requests or identify itself as an agent,” so to most security tools it looks like a person browsing. Meta hasn’t published a way for sites to identify it.3