AI News
官方更新 Meta Newsroom Tue, 08 Sep 2026 正文 ok 808 words

Meta 推出 Muse：面向所有人的首个个人 AI Agent

英文标题：Introducing Muse: The World’s First Personal AI Agent Built for Everyone

Meta 推出个人 AI Agent Muse，定位为一款安全、私密且可主动协助用户完成目标、提出建议的产品。Muse 运行在专属的 Muse Secure VM 上，可执行发送邮件、预订旅行、填写表单、协商议价和购物结账等任务，并由 Meta 的 Muse Spark 模型驱动。该产品通过 Sentinel Agent 审批联网操作、敏感操作确认、凭据隔离和完整审计记录等机制强化安全与隐私。Muse 已在美国面向 iOS、Android 和 muse.ai 推出，多数基础功能免费，并计划支持 AI 眼镜、Shop Pay、1Password 及端到端加密的 Confidential VM。
打开原文相关 3 · 机会 2
media13.9 KB media14.0 KB media13.3 KB media29.0 KB media9.6 KB media24.2 KB media8.0 KB media980 B media980 B media1.9 KB media1.7 KB media1.8 KB media1.8 KB media1.5 KB media1.8 KB media1.7 KB media6.3 KB media35.4 KB

中文

今天，Meta 推出 Muse——一款安全、私密的个人 AI Agent，能够主动协助人们实现目标并提出建议。由于个人 Agent 需要一种新型安全计算机，Muse 运行在 Muse Secure VM 上：这是一个专属虚拟机（VM），同时承载 Agent 本身及用户的数据。Muse 的设计遵循人们现有的沟通方式，因此无论是在 Muse 应用中，还是直接通过 WhatsApp，与它交流都如同给另一个人发消息一样。

使用方式很简单。用户只需告诉 Muse 要完成什么，它就会采取行动；其能力由 Muse Spark 驱动，这是 Meta 迄今能力最强的模型，专为这类现实世界中的 Agent 任务打造。

工作方式

与其他 Agent 不同，Muse 从一开始就为服务全球数十亿人而打造，因此没有学习门槛。任何人都可以开箱即用，无需技术经验。它能够处理发送电子邮件、预订旅行等任务，也可以承担宏大而富有挑战性的目标。用户向 Muse 分享目标后，它会帮助制定个性化计划、协调时间和资源，随后自行推进工作。它可以打开浏览器、填写表单，并代表用户进行协商。

对于耗时更长的任务，即使用户关闭应用，Muse 也会继续工作；当情况发生变化，或在其需要获得批准时——例如发送邮件或进行购买前——它会再次联系用户。它以更少的投入带来更好的结果：以更高价格卖出汽车、降低账单，或随着用户生活其他安排的变化而调整训练计划。

需要付款时，Muse 可以使用 Stripe 打造的 Link 完成结账，并且它是首个获得 Link 购买保障 覆盖的 AI Agent：对于符合条件的购买，用户可免费获得商品损坏或丢失、降价保障、免手续费退货以及退货保证。Link 面向 Agent 的钱包会生成一次性使用的卡片，使用户真实的银行卡详情保持隐藏，从而能够在互联网上安全购物。Shop Pay 将很快作为另一种支付方式推出；同时还将支持 1Password，使 Muse 能够使用用户已有的登录凭据。

Muse 还会记住对用户重要的事项，因此无需提示即可提出建议，并能依据用户只提过一次的细节采取行动。它可以将用户保存在 Instagram 上的食谱短视频转换为购物清单，为其晚宴建议菜单，并在发送邀请前记住朋友的饮食限制。

为隐私、安全与安保而生

个人 Agent 需要一种新型安全计算机，因此 Meta 为每个人打造了这样的产品。Muse Secure VM 内置了首创的隐私、安全和安保防护机制，是其他 Agent 所不具备的：

  • Muse 在云端运行于专属计算机上，并被隔离封装，其他人的 Agent 无法访问它。Muse 就驻留在这里，用户所连接任何服务的数据和凭据也都会在这里安全存储。
  • 独立的 Sentinel Agent 在同一台机器上运行，并在系统层面与 Muse 隔离。除非 Sentinel 批准，否则 Muse 所做的任何操作都不会触及互联网；在需要时，Sentinel 会征求用户许可。
  • Muse 无法查看用户的密码或支付方式。用户分享的任何凭据都会进入安全存储，使 Muse 能够在看不到凭据的情况下使用它们，其中也包括用户亲自在浏览器中输入的密码。
  • 在发送电子邮件或购买商品等敏感操作前，Muse 会向用户确认。Muse 会向用户展示其已完成及计划完成的全部操作审计记录。
  • 用户可以选择 Muse 连接哪些应用，以及它获得多少访问权限。对于电子邮件等服务，用户可以选择 Muse 能做什么，例如仅读取邮件，还是也可以代表用户发送邮件。
  • 用户可随时更改访问权限或断开某项服务的连接。用户也可以选择不让其交互内容用于训练 Meta 的 AI 模型。
  • Muse 不会与 Meta 的广告系统共享用户的对话内容或其 VM 中的数据。
  • Muse 会记住对用户重要的事项，而用户始终可以要求它“忘记”已学习的特定内容。

今年晚些时候，Meta 将推出 Muse Confidential VM。届时，整个 VM——包括用户的数据以及与 Muse 的对话——都将使用仅由用户持有的密钥进行加密，因此连 Meta 也无法访问。

展望未来

Meta 认为，个人超级智能将是这一代人一生中最具变革性的技术之一。Muse 是迈出的第一步：一个承担更多工作、让人们能够专注于自身重要事务的 Agent。

Muse 正在美国通过 iOS、Android 和 muse.ai 推出，并将很快登陆 AI 眼镜。它可免费满足用户的大多数需求；对于希望完成更多任务的用户，则提供订阅方案。

English / 原文

Today, Meta is introducing Muse, a secure, private personal AI agent that proactively helps with people’s goals and suggests ideas. Because personal agents need a new kind of secure computer, Muse runs on Muse Secure VM, a dedicated, virtual machine (VM) that houses both the agent and a person’s data. Muse is designed around the way people already communicate, so talking to it works just like messaging another person, in the Muse app or directly in WhatsApp.

It’s simple to use. People just tell Muse what needs to get done, and it takes action, powered by Muse Spark, Meta’s most capable model to date, built for real-world agentic work like this.

How It Works

Unlike other agents, Muse was built to work for billions of people worldwide, so there’s no learning curve. Anyone can use it out of the box, no technical experience required. It can handle tasks, like sending an email or booking travel, and it can take on big audacious goals. Once a person shares a goal with Muse, it helps them develop a personalized plan and coordinate their time and resources, then advances the work on its own. It can open a browser, fill out forms, and negotiate on their behalf.

For tasks that take more time, Muse keeps working after people close the app, and comes back when something changes or when it needs approval, like before it sends an email or makes a purchase. It gets better results with less effort: selling a car for more, lowering a bill, adjusting a training plan as the rest of someone’s life shifts.

When it comes time to pay, Muse can checkout with Link built by Stripe, and it is the first AI agent covered by Link’s purchase protections: free coverage for damaged or lost items, price drops, no-fee returns, and a return guarantee on eligible purchases. Link’s wallet for agents generates a one-time-use card so your real card details stay hidden, allowing you to purchase safely across the internet. Shop Pay is coming soon as another way to pay, along with 1Password support so Muse can use logins a person already has.

Muse also remembers what matters to a person, so it can make suggestions unprompted and act on details that person only mentioned once. It can turn a recipe reel the person saved on Instagram into a grocery list, suggest a menu for their dinner party, and remember their friends’ dietary restrictions before it sends the invites.

Built to be Private, Safe, and Secure

Personal agents need a new kind of secure computer, so Meta built one for everyone. Muse Secure VM has first-of-its-kind privacy, safety, and security protections engineered into it that no other agent provides:

  • Muse runs on its own dedicated computer in the cloud, contained so no one else’s agent can reach it. That is where Muse lives and where the data and credentials for any service a person connects are securely stored.
  • A separate Sentinel agent runs on that same machine, kept apart from Muse at the system level. Nothing Muse does reaches the internet unless the Sentinel approves it, and it asks the person for permission when needed.
  • Muse has no visibility into people’s passwords or payment methods. Any credentials a person shares go into secure storage, so Muse can use them without seeing them, including passwords a person types into the browser themselves.
  • Muse checks with the person before sensitive actions like sending an email or making a purchase. Muse shows people a complete audit trail of everything it has done and plans to do.
  • People choose which apps Muse connects to and exactly how much access it gets. For things like email, people choose what Muse can do, whether it reads their mail or can also send on their behalf.
  • People can change access or disconnect a service whenever they want. People can also opt out of their interactions being used to train Meta’s AI models.
  • Muse doesn’t share a person’s conversations or the data in their VM with Meta’s ad systems.
  • Muse remembers what matters to a person, and they can always tell it to “forget” specific things it’s learned.

Later this year, Meta will introduce Muse Confidential VM, where the whole VM, including a person’s data and conversations with Muse, is encrypted with a key only they hold, so not even Meta can access it.

Looking Ahead

Meta thinks personal superintelligence will be one of the most transformative technologies of a lifetime. Muse is a first step: an agent that takes on more of the work so people can focus on what matters to them.

Muse is rolling out in the US on iOS, Android, and muse.ai, and coming soon to AI glasses. It’s free for most of what people need, with subscription plans for people who want to do more.