Assembly is useful · buying is yours · six controls

A form-filler is a checkout-completer.

The Forms grant sounds like the dullest thing on the permissions list copy an address, fill in a field from a document. It is also the same capability that can complete a purchase, because a checkout is a form. That is the sentence worth carrying into every shopping task, and it is the one no product page puts in the first paragraph.

The same form-filling capability shown on an address form and on a checkout One grant: “Forms” What you pictured Name, address, postcode copied from a document Clerical. Reversible. Nobody is charged anything. This is the version the permission screen brings to mind. Same capability, elsewhere Card, address, delivery and a button marked Buy A checkout is a form Meta says it confirms before a purchase. That is the last line, not the only one. The grant you approve fastest sits nearest your card
Not a warning about misbehaviour a note about what one grant actually covers.
If you only read one bit

Good at the paperwork. Not your adviser.

The short version

Use it around the purchase, not for the purchase

An agent cannot check a price, a stock level or a delivery estimate, because those are current facts about the world and its reach is your Mac. What it can do is assemble what you already have: order confirmations scattered across months, the return window closing on Thursday, the receipt that never arrived. That is genuinely useful and completely unglamorous. Meta names making a purchase as an action it confirms first treat that as the last line of defence rather than the workflow.

Assemble orders and receipts Find the return deadline Prices need your own check Never delegate the buying

For talking through what to buy, a conversation beats an agent that is Meta AI, and it is available far more widely. This page is about the paperwork either side of the decision.

Worth saying plainly

Who is advising you, and what they sell

When an agent files your receipts, the company that made it has no stake in the outcome. When the same agent helps you decide what to buy, that stops being true and it stops being true in a specific, structural way that is worth naming without drama.

Meta sells advertising. Meta operates commerce surfaces on its own platforms. An assistant built by a company in those businesses, recommending products, occupies a different position from one sorting your Downloads folder. That is a fact about the shape of the arrangement, not an accusation about conduct.

This is not a claim that Muse pushes products. It is an observation that you should not have to take anyone’s word for it and that on a page about spending money, the incentive structure belongs in the open.

Meta’s own position is that the agent’s work runs in a sandbox it calls the Muse Secure VM, kept out of Meta’s advertising systems. That addresses one specific concern your agent activity feeding ad targeting and it is Meta’s statement rather than something verifiable from outside. It does not speak to which products get surfaced in a recommendation, which is a different mechanism entirely.

The practical upshot is not “distrust it”. It is narrower and more useful: keep it on the assembly work, where there is nothing to influence. A list of your own orders has no commercial angle. A recommendation does. Every prompt below sits deliberately on the first side of that line.

And for what it is worth in the other direction: this site takes no commission on anything, has no affiliate links, and would tell you if it did.

Assembly work with no commercial angle, beside recommendation which has one “List my orders from May” Answer comes entirely from your own mail Nothing to influence. No version of this favours anyone. no commercial angle “Which one should I buy?” Answer comes from somewhere you cannot see Built by a company that sells ads and hosts shops Not an accusation. Just a position worth knowing about. incentives exist here
Keep it on the top half and the question never arises.
Six prompts

What it is genuinely good for

All assembly against material you already own. None asks it to recommend, price or buy which is why every one of them is checkable in ten seconds.

Find every order confirmation in my mail from the last three months and list them with the supplier, date, item and total. Flag any where you could not find an order number.
MailDoing the work: the missing order-number flag that is the one you will need if something goes wrong.
Go through that list and tell me which orders have no delivery or dispatch confirmation. Do not contact any supplier.
MailNotesDoing the work: the gap between ordered and arrived is the only part you did not already know.
For each order in that list, find the stated returns window in the confirmation email and tell me which ones close within the next 14 days. Do not start any return.
MailDoing the work: a deadline you cannot recover once missed, buried in text nobody reads twice.
Save every receipt and invoice attachment from those confirmations into a folder called [name], named supplier-date-amount, and list anything that had no attachment.
MailFilesDoing the work: the naming convention, without which you get a folder of files all called invoice.pdf.
Read this comparison note I wrote and turn it into a table with one row per option and one column per feature I mentioned. Leave any cell blank where I did not state a value do not fill in gaps.
NotesDoing the work: “do not fill in gaps”. This is the instruction that stops research becoming invention.
Compare the receipts in that folder against the card transactions in this statement I have saved, and list any charge with no matching receipt. Do not dispute anything.
FilesDoing the work: a cross-check between two piles the shape of work an agent does better than a person.

Notice what is absent: no prompt asks for the best option, the cheapest supplier or the current price. Those are questions about the world, and it cannot see the world. The four parts of a task.

Buying controls

Six things between an agent and your card

Ordered strongest first. The first three are worth more than the last three combined, because they remove the possibility rather than managing it.

Do not grant the path

The strongest control is an absence. If the Forms area is not granted, no phrasing reaches a checkout and most of the useful prompts on this page need only Mail, Notes and Files. How grants work.

Removes it

Connect no account that holds a payment method

An integration is a standing connection revoked in that service’s own settings rather than in Muse, and uninstalling the app does not end it. An account with a card stored in it is the last one to hand over. Why integrations differ.

Removes it

Ask for a shortlist, never a purchase

Phrase every shopping task so the output is a list you read. “Tell me which” and “order the one that” are one verb apart and a world apart in consequence.

Removes it

Read the plan, because that is where buy appears

A plan mentioning a checkout when you asked for a comparison is telling you the task was understood differently from how you meant it. A correction there costs nothing; a restart costs a whole task. Why plans matter.

Catches it

Require the full total before any confirmation

If a task could ever reach a total, make it state the amount including delivery, tax and any fee in the confirmation itself. A number you have to go and find is a number you will approve without finding.

Catches it

Treat the confirmation prompt as the last line, not the plan

Meta says it confirms before purchases, and that is a genuine safeguard. But a safeguard you rely on routinely is one you will eventually click through while distracted, which is precisely how it stops working.

Catches it

Why the first three are a different kind of thing

Controls one to three remove the possibility. Controls four to six catch a mistake in progress, which means they depend on your attention at the moment it matters and attention is exactly what you were delegating in the first place.

If you only adopt one thing from this page, make it the first: an ungranted area cannot be reached by any wording, any misunderstanding, or any update that changes behaviour later.

A failed run still counts against your weekly allowance, which on a shopping task is an argument for getting the phrasing right first rather than iterating toward it.

FAQ

Shopping and buying questions

Can Muse buy things for me?

Making a purchase is named by Meta as a sensitive action it confirms before carrying out. Treat that confirmation as a backstop rather than a workflow spending money should be a decision you make deliberately, not one you approve while distracted. The six controls.

Why does granting the Forms area matter for shopping?

Because a checkout is a form. The Forms grant sounds clerical filling in an address, copying details from a document and it is the same capability that can complete a purchase. It is the grant people approve most casually and the one closest to money.

Is Meta a neutral party when it helps me shop?

Structurally, no. Meta sells advertising and operates commerce surfaces, so an assistant from Meta recommending what to buy sits differently from one filing your receipts. Meta says Muse’s work is kept out of its advertising systems, which addresses one specific concern rather than the general shape. The full argument.

Can it find me the best price?

Not reliably. Prices, stock and delivery times are current facts about the world, and an agent’s reach is your Mac. Anything it tells you about a price is a starting point for a check and being wrong here leads to a purchase rather than an inconvenience.

What is it actually good at around a purchase?

Assembly and aftercare pulling order confirmations together, listing what has not arrived, finding the return window before it closes, matching receipts against a statement. Tedious rather than difficult, all against material you already have. The six prompts.

Should I connect a shopping account to it?

Connect nothing you do not need for a specific task. An integration is a standing connection revoked in that service’s own settings rather than in Muse, and an account with a stored payment method is the last one to hand over. How connections work.

How do I stop it spending money by mistake?

The strongest control is not a setting but an absence: do not grant the path. After that, ask for shortlists rather than purchases, require the full total including delivery before any confirmation, and read the plan before every run.

Why read the plan before a shopping task?

Because the plan is where the word buy appears. A plan mentioning a checkout when you asked for a comparison is telling you the task was understood differently from how you meant it, and a correction at that point costs nothing.

Does a failed shopping task still count against my limit?

Assume it does, since the work was performed either way. That is an argument for getting the request right first rather than iterating which on a shopping task is also the safer habit. How the meter works.

Does this work outside the United States?

Muse launched in the United States only. Meta AI, which is the better tool for talking through what to buy anyway, has a far broader rollout. Where Muse works.

An ungranted area cannot be reached

Keep it on the paperwork, not the purchase.

Receipts, return windows and the order that never arrived are genuinely worth delegating. The decision to spend money was never the tedious part.

  • Assembly, not advice
  • Do not grant the path
  • Shortlists, not purchases
  • US only at launch

Independent guide not affiliated with Meta, no affiliate links, no commission on anything. Statements about confirmation prompts and advertising systems are Meta’s own and are not independently verified here.