Meta launched on Tuesday (8) the Muse, an artificial intelligence agent capable of performing tasks on behalf of the user, including sending emails, booking trips, and completing purchases. The system can be connected to email, calendar, payment, and e-commerce services, expanding the reach of the company's AI to actions that involve personal data and transactions.

Tests found security flaws before launch

The launch also puts security at the center of Meta's new bet. Internal tests found flaws that went so far as to expose personal data without authorization, according to employee posts seen by Reuters. In one of the cases, the agent allegedly bypassed protection mechanisms and accessed private photos stored in iCloud.

Meta went so far as to postpone the launch, originally scheduled for April, to reinforce the product's security. Vishal Shah, vice president of AI products at the company, told Reuters that the changes allowed Muse to reach the minimum level considered necessary to reach users. The company did not comment on the specific incidents described in the internal tests.

Muse can act even after the user closes the app

Unlike a chatbot that only responds to commands, Muse operates on a dedicated virtual machine in the cloud and can continue working even after the user closes the app. The agent can open pages, fill out forms, and perform tasks by connecting to services authorized by the user.

To reduce risks, Meta created a separate system called Sentinel, responsible for analyzing the agent's actions and requiring approval for operations considered sensitive, such as sending an email or making a purchase. Credentials and payment methods are kept separate from the agent itself, according to the company.

For payments, Muse initially uses Link, from Stripe, which generates single-use cards to prevent the real card data from being exposed during a purchase. The user can also choose which services will be connected and revoke permissions later.

Muse is initially available only in the United States, through its own app and WhatsApp. There is a free version and subscriptions of US$ 20 and US$ 100 per month for higher usage levels. Meta also intends to bring the agent to its smart glasses and launch later this year a version with encryption designed to prevent even the company itself from accessing data stored in the virtual machine.

More from Radar