Meta发布Muse for Mac：跨应用个人AI Agent
Meta Launches Muse for Mac: A Personal AI Agent That Works Across Your Files, Mail, Messages, Calendar and Notes
Agent落地桌面端的标志性进展，详细披露了权限控制与安全架构设计，做AI Agent开发的同学值得参考其交互与安全策略。
Meta has released Muse for Mac, the first version of Muse that can complete things on a user’s computer. The agent works with local files and native apps, where your data already lives. It adds a desktop layer to an agent that launched on phones, the web and WhatsApp earlier this month.
Meta 已为 Mac 发布 Muse，这是首个能在用户电脑上完成任务的 Muse 版本。该智能体可处理本地文件和原生应用中的数据，即你数据所在之处。它为本月早些时候在手机上、网页和 WhatsApp 上推出的智能体增添了桌面层。
Is it deployable? Yes, for end users. It is a free macOS download today, only available in the US for now. It is a hosted consumer agent, not an open model you can self-host.
它可以部署吗？可以，面向终端用户。今天起可免费在 macOS 上下载，目前仅限美国地区可用。它是一个托管型消费级智能体，而非你可以自行托管的开源模型。
What Meta Shipped
Meta 发布了什么
Mark Zuckerberg announced the Mac app on X, noting that it works across apps, files, calendar, notes, and messages. His post added, “The team is shipping fast.” Meta’s Chief AI Officer Alexandr Wang also announced the launch the same day.
马克·扎克伯格在 X（原推特）上宣布了这款 Mac 应用，指出它可在各类应用、文件、日历、笔记和消息中跨平台工作。他的帖子补充道：“团队正在快速交付。” Meta 首席 AI 官 Alexandr Wang 也在同一天宣布了这一发布。
Muse itself is not new this week. Muse launched on September 8th in the US across iOS, Android, the web and WhatsApp. According to TechCrunch, it quickly rose to the top of the U.S. App Store charts after that launch.
Muse 本身并非本周才推出。Muse 于 9 月 8 日在美国上线，支持 iOS、Android、网页和 WhatsApp。据 TechCrunch 报道，自那次发布后，它迅速攀升至美国 App Store 排行榜榜首。
Muse for Mac is out today! It works across apps, files, calendar, notes, and messages on your computer. You control what it can access. The team is shipping fast. Download at https://t.co/BX3oX19Zcl
Muse for Mac 今日发布！它可在你的电脑上跨应用、文件、日历、笔记和消息工作。你能控制它能访问的内容。团队正在快速迭代。下载地址：https://t.co/BX3oX19Zcl
— Mark Zuckerberg (@finkd) September 17, 2026
—— 马克·扎克伯格 (@finkd) 2026年9月17日
What Muse for Mac Can Do
Muse for Mac 能做什么
On the Mac, Muse can interact with your files, messages, calendar, notes and mail, all within their native applications. Meta frames it around everyday tasks that span several apps. You can ask it to organize folders, finish a form using information stored in your files, or build an end-of-day summary from emails, messages, and notes.
在 Mac 上，Muse 可在其原生应用中与你的文件、消息、日历、笔记和邮件进行交互。Meta 将其定位为跨越多个应用的日常任务场景。你可以让它整理文件夹、利用存储在文件中的信息填写表单，或从电子邮件、消息和笔记中生成每日总结。
The practical shift is context gathering. A normal chatbot needs you to copy and paste information into a prompt. Muse can potentially collate different pieces of context across the computer. One task might touch a Calendar event, a Mail thread, a document in a folder and a Messages conversation.
实际转变在于上下文收集。普通聊天机器人需要你将信息复制粘贴到提示词中。而 Muse 有可能在整个电脑范围内汇总不同来源的上下文。一个任务可能涉及日历事件、邮件线程、文件夹中的文档以及消息对话。
Muse also runs asynchronously. Meta noted that the agent continues working in the background even when the desktop window is closed. You can start something on your phone, check in from your laptop or nudge it through WhatsApp, with Muse keeping the thread across devices.
Muse 还支持异步运行。Meta 指出，即使桌面窗口已关闭，智能体仍会在后台继续工作。你可以在手机上启动某项任务，通过笔记本电脑查看进度，或通过 WhatsApp 轻推提醒，Muse 会跨设备保持任务线程连贯。
How Permissions Work
权限如何运作
Local access raises the stakes, so the controls matter most here. Access to your computer is opt-in, while Full Disk Access is optional. You decide what permissions Muse gets and can change them anytime through Settings.
本地访问提升了风险等级，因此控制机制在此至关重要。对电脑的访问需主动选择加入，而“完全磁盘访问”则为可选。你可以决定授予 Muse 哪些权限，并随时通过设置进行修改。
Destructive or outbound actions are gated. Meta says sensitive actions such as deleting files or sending messages require approval. In practice, Muse can sort a folder freely but must stop before it deletes anything. It can draft a summary but must ask before sending it.
破坏性或出站操作受到限制。Meta 表示，删除文件或发送消息等敏感操作需要批准。在实际使用中，Muse 可以自由整理文件夹，但在删除任何内容前必须停止。它可以起草摘要，但在发送前必须征得同意。
The Stack Behind Muse
Muse 背后的技术栈
Muse is powered by Muse Spark, Meta’s most capable model to date, built for real-world agentic work, per Meta’s launch post. The same model powers Muse Code, a coding agent available for MacOS and Windows.
根据 Meta 的发布博文，Muse 由 Muse Spark 驱动，这是 Meta 迄今为止最强大的模型，专为现实世界中的智能体工作而构建。同一模型也 powering Muse Code，这是一款适用于 MacOS 和 Windows 的代码智能体。
The cloud side runs on Muse Secure VM. Muse runs on its own dedicated computer in the cloud, contained so no one else’s agent can reach it. A separate Sentinel agent runs on that same machine, kept apart from Muse at the system level. Nothing Muse does reaches the internet unless the Sentinel approves it.
云端部分运行在 Muse Secure VM 上。Muse 在云端的专用计算机上运行，被隔离起来，确保其他智能体无法访问它。一个独立的 Sentinel 智能体在同一台机器上运行，在系统层面与 Muse 保持分离。除非 Sentinel 批准，否则 Muse 所做的任何事情都不会触及互联网。
There is one caveat worth stating plainly. Secure VM isolates your data from other users, but it does not prevent Meta from accessing your data when necessary to operate the service. Meta plans to introduce Muse Confidential VM later in 2026, encrypting the entire VM with a key only the user holds. Meta also runs a public bug bounty for Muse.
这里有一个值得明确说明的例外情况。Secure VM 将你的数据与其他用户隔离开来，但它并不能阻止 Meta 在必要时访问你的数据以运营服务。Meta 计划于 2026 年晚些时候推出 Muse Confidential VM，使用仅由用户持有的密钥对整个 VM 进行加密。Meta 还为 Muse 运行公开的漏洞赏金计划。
Interactive Explainer: How Muse for Mac Gets a Task Done
交互式解说：Mac 版 Muse 如何完成任务
Key Takeaways
关键要点
- Muse for Mac is Meta’s first Muse version that acts directly on your computer.
- It works with Files, Mail, Messages, Calendar and Notes in their native apps.
- Access is opt-in, Full Disk Access is optional, and settings can change anytime.
- Deleting files or sending messages always requires your approval first.
- Free up to 100M tokens per week; US only for now.
- Mac 版 Muse 是 Meta 首个直接在电脑上操作的 Muse 版本。
- 它可以在原生应用中与文件、邮件、信息、日历和备忘录配合使用。
- 采用自愿加入机制，完全磁盘访问权限为可选，且设置可以随时更改。
- 删除文件或发送消息始终需要先获得你的批准。
- 每周免费额度高达 1 亿 token；目前仅限美国地区。
更进一步：量化金融体系
看懂新闻只是起点——沿量化金融路径，把它变成能交付的工程能力