One reported test completed a restaurant reservation through Meta Muse after the user entered a phone number and confirmation code. Separately, reports said Amazon had blocked Muse from Amazon.com. Together, the developments show why an AI agent’s ability to act online depends on access to the services it needs.
Muse can act online—but not everywhere
Meta introduced Muse on September 8, 2026, describing it as a personal AI agent that can use a browser, fill out forms, book travel, send email and make purchases. Meta says Muse asks for approval before sensitive actions, such as sending an email or making a purchase. The company announced an initial rollout in the United States on iOS, Android and muse.ai.
The reported Amazon restriction concerned Muse’s access to Amazon.com. Amazon said third-party purchasing applications should operate openly and respect a service provider’s decision about whether to participate. It also raised concerns about notice and choice, account data and credentials, and the absence of Amazon’s personalized recommendations in an agent-mediated shopping experience.
Meta describes its safeguards differently: the company says Muse runs in a dedicated virtual machine, called Muse Secure VM, and that a separate agent named Sentinel approves internet access. Meta also says Muse cannot see users’ passwords or payment methods. These are descriptions of Meta’s own system.
A reported Resy test completed a reservation
In the reported test, Muse completed a reservation through Resy after the user provided a phone number and confirmation code. Resy said it did not permit unapproved third-party bots or agents, citing risks to its platform and the reservation experience. The test is one example of Muse completing an online task; it does not establish general access across reservation services.
Why services handle agent access differently
A shopping agent can carry out steps on a customer’s behalf, but a retailer’s own site may also surface personalized recommendations and other products. Amazon cited the absence of those recommendations in an agent-mediated experience among its concerns about Muse’s access.
Meta has announced commerce connectors with retailers including Walmart and Wayfair, as well as payment options through Shop Pay and PayPal. It described Expedia as coming soon and named Instacart for grocery shopping. The announcement listed integrations; it did not mean every connector was already live.
The contrast is practical: Muse’s ability to complete a task does not by itself determine whether a particular service will allow the agent to interact with its platform.
