Meta Muse for Windows Confirmed With MXC Security, but No Release Date — Megathread

Two weeks ago, in our coverage of Meta's Connect announcements, we wrote a sentence that seemed safe at the time: there is no documented Muse app for Windows, and nothing Meta had announced would bring its computer-use capabilities to Windows PCs. On a Windows machine, Muse meant the web client.
That sentence expired today. On stage at the Microsoft x NVIDIA event in San Francisco, Windows and Surface chief Pavan Davuluri announced that Meta's Muse personal AI agent is coming to Windows as a native app. No release date yet. No deep technical details. But the direction is unmistakable, and it raises the most interesting question in Windows AI right now: who owns the agent on your PC?

What was announced, and what was not​

The facts are thin, so let us be precise about them. Davuluri announced that Muse is coming to Windows as a native app. Microsoft framed it as part of a broader push toward an ecosystem where different AI agents work alongside Copilot on Windows. That is the whole of the official announcement. There is no release date, no word on which Windows versions will be supported, no detail on how deeply the app will integrate with the OS, and no mention of regions. Muse launched as US-only on phones, and neither company has said whether Windows changes that.
Thin as it is, the announcement matters for what it signals. Microsoft spent the last two years putting Copilot into everything: the taskbar, the keyboard key, Edge, Notepad, Settings. Inviting a rival's personal agent onto Windows as a first-class native app is a remarkable reversal of that instinct. It suggests Microsoft has decided something important: that Windows wins by being the platform where agents live, not by insisting its own agent is the only one allowed.

How fast this story has moved​

Muse is barely a month old, and the pace has been genuinely startling. Meta introduced it on September 8 as a personal agent powered by a model called Muse Spark, running inside a dedicated cloud virtual machine Meta calls the Muse Secure VM, available in the US on iOS, Android, and the web. Ten days later a Mac app followed, reaching into native macOS applications: files, messages, calendar, notes, mail, all opt-in, with approval prompts before sensitive actions.
At Connect on September 23, Meta showed where this is going. Each Muse agent gets its own email address. The Mac app will gain the ability to "use your computer." Live video calls with a customizable avatar are coming, driven by a Muse Realtime Avatar model. And Muse is headed to Meta's smart glasses, where you will be able to ask it about what you are looking at. An early access program for the newest features opened on September 25.
The demand explains the velocity. Muse reportedly topped the App Store charts and was downloaded more than ChatGPT on mobile in its first twelve days. Downloads are not active users, but they are a signal Meta clearly intends to convert. A native Windows app is the next logical territory: the Mac app proved the desktop model works, and Windows is where most of the world's desktops are.

What "native" could mean on Windows​

Here we move from fact to informed speculation, and I will label it as such. On the Mac, "native" turned out to mean real reach: into the file system, into native apps, and soon into controlling the computer itself. A native Windows app worthy of the name would presumably offer the same: file access, notifications, calendar and mail integration, and eventually the computer-use capabilities Meta has promised for the Mac.
The interesting technical question is what Windows offers such an app to build on. Microsoft spent this same keynote talking about Execution Containers, the new OS-level isolation for background AI agents, and about Windows as a runtime where agents from different vendors coexist. If Muse on Windows plugs into that infrastructure, with proper permission boundaries and user controls, it becomes something more significant than a ported Mac app. It becomes the first major third-party agent to live inside Microsoft's agent platform vision. If it is just a wrapped web client with a taskbar icon, it will be a disappointment. The truth is probably somewhere between, and the details will decide which.

The real story: who owns the Windows agent​

Step back from the product details and the strategic picture gets strange in the best way. Microsoft is simultaneously building Copilot into an agentic Windows future and handing stage time to Meta's competing agent. That is not how platform owners behaved in the last era. Apple would never announce a rival assistant as a native Mac app in its own keynote. Google would not either.
There are a few ways to read it. The generous reading: Microsoft has realized the Copilot-everywhere strategy hit its limits, with user backlash forcing retreats in Notepad, Snipping Tool, Photos, and Settings, and has decided Windows should be neutral ground where the best agents win. The cynical reading: Copilot's mindshare is soft enough that Microsoft would rather host Meta's agent than watch users get it from somewhere Microsoft cannot see. The likely truth contains both. Either way, the era of one assistant per operating system is ending, and Windows is where the multi-agent experiment is happening first.
For Meta, the logic is simpler. Muse's whole pitch is becoming the default assistant layer of a person's digital life: the thing you talk to instead of the apps you open. You cannot own that layer while ignoring the operating system most of the world computes on. iOS, Android, WhatsApp, the web, the Mac, smart glasses, and now Windows: that is distribution most AI products would kill for, and Meta is assembling it in weeks, not years.

The questions nobody has answered yet​

A short list of what we still need to hear, from one company or the other.
When, and where. No date, no regions. The phone launch was US-only and adults-only. Does the Windows app inherit those limits?
What "native" integrates with. File system? Notifications? The new Execution Containers? Or a richer web wrapper? The permission model is the whole ballgame for an agent that can act on your behalf, and Meta's Mac app set a decent precedent with opt-in access and approval prompts. Windows users should demand at least as much.
What it costs. Muse is free for most uses, with $20 and $100 monthly tiers for heavier usage. Does the Windows app change that equation, and does Microsoft get a cut or a say?
What happens to your data. Meta's launch disclosures said conversations and tool calls may train models after removing identifying information, with an opt-out buried in settings, and that a Confidential VM with stronger guarantees is due later this year. An agent with deep Windows access makes those settings worth checking on day one, not day thirty.
And the enterprise question, which nobody wants to ask out loud: Muse is built for personal accounts. IT departments should not treat it as an approved tool for corporate mailboxes, and a native Windows app will make it much easier for employees to install one anyway. Shadow IT just got a very polished new vector.

Why we are covering this closely​

We have been tracking Muse since launch because it is the clearest example of where consumer AI agents are actually going: not smarter chatbots, but software with permissions. An inbox other people can write to. An app that can use your computer. An avatar you video-call. Each step expands what the agent can touch, and each step makes the permission model more important than the model quality.
Windows is about to become the biggest surface where those questions get answered. A Meta agent with native Windows access, living alongside Copilot under Microsoft's new agent infrastructure, is either the beginning of a genuinely open agent platform or a permissions disaster waiting for its first incident. Which one it becomes depends on details neither company has shared yet.
We will be watching for the release date, the permission model, and the first real-world reports. When there is something concrete to test, we will test it. That is a promise.