Find every order confirmation in my mail from the last three months and list them with the supplier, date, item and total. Flag any where you could not find an order number.
A form-filler is a checkout-completer.
The Forms grant sounds like the dullest thing on the permissions list copy an address, fill in a field from a document. It is also the same capability that can complete a purchase, because a checkout is a form. That is the sentence worth carrying into every shopping task, and it is the one no product page puts in the first paragraph.
Good at the paperwork. Not your adviser.
Use it around the purchase, not for the purchase
An agent cannot check a price, a stock level or a delivery estimate, because those are current facts about the world and its reach is your Mac. What it can do is assemble what you already have: order confirmations scattered across months, the return window closing on Thursday, the receipt that never arrived. That is genuinely useful and completely unglamorous. Meta names making a purchase as an action it confirms first treat that as the last line of defence rather than the workflow.
For talking through what to buy, a conversation beats an agent that is Meta AI, and it is available far more widely. This page is about the paperwork either side of the decision.
Who is advising you, and what they sell
When an agent files your receipts, the company that made it has no stake in the outcome. When the same agent helps you decide what to buy, that stops being true and it stops being true in a specific, structural way that is worth naming without drama.
Meta sells advertising. Meta operates commerce surfaces on its own platforms. An assistant built by a company in those businesses, recommending products, occupies a different position from one sorting your Downloads folder. That is a fact about the shape of the arrangement, not an accusation about conduct.
This is not a claim that Muse pushes products. It is an observation that you should not have to take anyone’s word for it and that on a page about spending money, the incentive structure belongs in the open.
Meta’s own position is that the agent’s work runs in a sandbox it calls the Muse Secure VM, kept out of Meta’s advertising systems. That addresses one specific concern your agent activity feeding ad targeting and it is Meta’s statement rather than something verifiable from outside. It does not speak to which products get surfaced in a recommendation, which is a different mechanism entirely.
The practical upshot is not “distrust it”. It is narrower and more useful: keep it on the assembly work, where there is nothing to influence. A list of your own orders has no commercial angle. A recommendation does. Every prompt below sits deliberately on the first side of that line.
And for what it is worth in the other direction: this site takes no commission on anything, has no affiliate links, and would tell you if it did.
What it is genuinely good for
All assembly against material you already own. None asks it to recommend, price or buy which is why every one of them is checkable in ten seconds.
Go through that list and tell me which orders have no delivery or dispatch confirmation. Do not contact any supplier.
For each order in that list, find the stated returns window in the confirmation email and tell me which ones close within the next 14 days. Do not start any return.
Save every receipt and invoice attachment from those confirmations into a folder called [name], named supplier-date-amount, and list anything that had no attachment.
Read this comparison note I wrote and turn it into a table with one row per option and one column per feature I mentioned. Leave any cell blank where I did not state a value do not fill in gaps.
Compare the receipts in that folder against the card transactions in this statement I have saved, and list any charge with no matching receipt. Do not dispute anything.
Notice what is absent: no prompt asks for the best option, the cheapest supplier or the current price. Those are questions about the world, and it cannot see the world. The four parts of a task.
Six things between an agent and your card
Ordered strongest first. The first three are worth more than the last three combined, because they remove the possibility rather than managing it.
Do not grant the path
The strongest control is an absence. If the Forms area is not granted, no phrasing reaches a checkout and most of the useful prompts on this page need only Mail, Notes and Files. How grants work.
Connect no account that holds a payment method
An integration is a standing connection revoked in that service’s own settings rather than in Muse, and uninstalling the app does not end it. An account with a card stored in it is the last one to hand over. Why integrations differ.
Ask for a shortlist, never a purchase
Phrase every shopping task so the output is a list you read. “Tell me which” and “order the one that” are one verb apart and a world apart in consequence.
Read the plan, because that is where buy
appears
A plan mentioning a checkout when you asked for a comparison is telling you the task was understood differently from how you meant it. A correction there costs nothing; a restart costs a whole task. Why plans matter.
Require the full total before any confirmation
If a task could ever reach a total, make it state the amount including delivery, tax and any fee in the confirmation itself. A number you have to go and find is a number you will approve without finding.
Treat the confirmation prompt as the last line, not the plan
Meta says it confirms before purchases, and that is a genuine safeguard. But a safeguard you rely on routinely is one you will eventually click through while distracted, which is precisely how it stops working.
Why the first three are a different kind of thing
Controls one to three remove the possibility. Controls four to six catch a mistake in progress, which means they depend on your attention at the moment it matters and attention is exactly what you were delegating in the first place.
If you only adopt one thing from this page, make it the first: an ungranted area cannot be reached by any wording, any misunderstanding, or any update that changes behaviour later.
A failed run still counts against your weekly allowance, which on a shopping task is an argument for getting the phrasing right first rather than iterating toward it.
Shopping and buying questions
Can Muse buy things for me?
Making a purchase is named by Meta as a sensitive action it confirms before carrying out. Treat that confirmation as a backstop rather than a workflow spending money should be a decision you make deliberately, not one you approve while distracted. The six controls.
Why does granting the Forms area matter for shopping?
Because a checkout is a form. The Forms grant sounds clerical filling in an address, copying details from a document and it is the same capability that can complete a purchase. It is the grant people approve most casually and the one closest to money.
Is Meta a neutral party when it helps me shop?
Structurally, no. Meta sells advertising and operates commerce surfaces, so an assistant from Meta recommending what to buy sits differently from one filing your receipts. Meta says Muse’s work is kept out of its advertising systems, which addresses one specific concern rather than the general shape. The full argument.
Can it find me the best price?
Not reliably. Prices, stock and delivery times are current facts about the world, and an agent’s reach is your Mac. Anything it tells you about a price is a starting point for a check and being wrong here leads to a purchase rather than an inconvenience.
What is it actually good at around a purchase?
Assembly and aftercare pulling order confirmations together, listing what has not arrived, finding the return window before it closes, matching receipts against a statement. Tedious rather than difficult, all against material you already have. The six prompts.
Should I connect a shopping account to it?
Connect nothing you do not need for a specific task. An integration is a standing connection revoked in that service’s own settings rather than in Muse, and an account with a stored payment method is the last one to hand over. How connections work.
How do I stop it spending money by mistake?
The strongest control is not a setting but an absence: do not grant the path. After that, ask for shortlists rather than purchases, require the full total including delivery before any confirmation, and read the plan before every run.
Why read the plan before a shopping task?
Because the plan is where the word buy appears. A plan mentioning a checkout when you asked for a comparison is telling you the task was understood differently from how you meant it, and a correction at that point costs nothing.
Does a failed shopping task still count against my limit?
Assume it does, since the work was performed either way. That is an argument for getting the request right first rather than iterating which on a shopping task is also the safer habit. How the meter works.
Does this work outside the United States?
Muse launched in the United States only. Meta AI, which is the better tool for talking through what to buy anyway, has a far broader rollout. Where Muse works.
Keep it on the paperwork, not the purchase.
Receipts, return windows and the order that never arrived are genuinely worth delegating. The decision to spend money was never the tedious part.
Independent guide not affiliated with Meta, no affiliate links, no commission on anything. Statements about confirmation prompts and advertising systems are Meta’s own and are not independently verified here.