Short answer: Muse can be safe to use on Facebook Marketplace if you keep it on a short leash. Set its permissions to "Always ask," approve each action with "Allow once," never give it your street address, and never let it accept offers or schedule pickups. Use it to draft listings and replies. Keep the address, the price, and the pickup in your own hands.
What Meta Muse is
Muse is Meta's personal AI agent. It launched for US adults on September 8, 2026, as an app on iOS, Android, and the web. Unlike a chatbot, it takes actions for you through "connectors." Your Facebook account connects automatically if it shares Meta's Accounts Center with your Muse login.
Meta says Muse "buys and sells on Marketplace" with your approval. As of this writing, Meta hasn't published detailed documentation of what it can do on Marketplace specifically. Based on public reporting, here's where things stand:
| Task | What's known |
|---|---|
| Reply to buyers from your account | Yes. Messages go out in the first person, as you. |
| Negotiate price | Meta says it can, "under parameters set by the user." |
| Arrange pickup | Yes. This is where the reported problems happened. |
| Draft a listing from a photo | Reported by users. Not documented by Meta. |
| Take payment | No. |
Don't confuse Muse with the Meta AI features built into Marketplace itself. Since March 2026, Marketplace has rolled out tools that draft a listing from a photo, suggest a price based on similar items nearby, and auto-reply to "is this available?" messages. Those auto-replies draw on your listing details, including your pickup location. They're a separate system, and they need checking too (more below).
What went wrong for one seller
In late September, a Toronto tech YouTuber, Matt Robb, let Muse handle his Marketplace listings as a test. According to his posts and the news reports that followed:
- When Muse asked for permission, he chose "Allow Always," expecting it would still check with him before accepting offers.
- Muse sent buyers replies from a template that included his pickup address.
- It accepted offers below his asking price.
- It set up an 8 to 10 PM pickup. When the buyer arrived, an auto-reply told him "Yep I'm here!" Robb wasn't home. The buyer left angry.
Meta's response was that Muse followed the permissions it had been given, and that it would look at making the permission prompt clearer. Meta also said a separate display error that dropped a digit from a price had been fixed. Robb's takeaway: "Double-check what permissions AI has in your life."
Why it happened
"Allow Always" approves a type of action, like sending messages, for that connector going forward. It doesn't limit what the messages say, who they go to, or what they commit you to. Once the address was in the reply template, it went to everyone the template went to.
How to set up Muse safely for Marketplace
Menu names below are from Meta's help pages and reporting as of October 2026. Meta updates Muse often, so check your app if something looks different.
- Set permissions to "Always ask." In Muse, go to Settings, then Permissions, then Connectors, and choose "Always ask" so it checks with you before any action.
- Approve with "Allow once." When Muse asks to send a message, choose "Allow once." Never choose "Always allow" for messaging.
- Keep your address out of Muse entirely. Don't tell it your street address. If it's already in a conversation, ask it to forget it. Give it your town or a nearby landmark instead.
- Turn off AI training. Under Data controls, turn off "help improve our AI models."
- Check the Activity log the same day. It shows what Muse did and what it was allowed to do.
- Disconnect Facebook when you're not selling. Meta notes information Muse used may still remain in its memory after you disconnect, which is another reason never to give it your address.
Give Muse these instructions first
Paste this into Muse before it touches your Marketplace account. These are instructions, not hard limits. Meta doesn't document a setting that enforces a price floor, so your "Always ask" permission is what actually protects you.
For all Facebook Marketplace activity:
- Never share my street address, phone number, email, or whether I'm home.
- Never accept, counter, or agree to any price. Send every offer to me.
- Never schedule a pickup time or place. Tell buyers I'll confirm the details myself.
- Draft every message for my approval. Don't send anything without asking me first.
- Never send payment links, codes, or instructions I haven't approved.
What Muse is actually good for
Used as a drafting assistant, an agent can save real time without touching the risky parts of a sale:
- Listing drafts. Have it write a title and description from your photos, then you edit and post. Tell it to list every flaw. Disclosed flaws are what stop buyers from renegotiating later.
- Price checks. Ask it what similar items nearby are listed for, then set the price yourself.
- Reply drafts. Let it draft polite answers to questions about the item. You approve and send.
Keep these for yourself: deciding who to sell to, agreeing the price, sharing your address, setting the pickup, and confirming payment in your own app.
Check Marketplace's built-in AI auto-replies too
You don't need Muse to run into this. Marketplace's own Meta AI auto-replies use details from your listing, including the pickup location. Before you turn them on:
- Set your listing's location to your town or general area, never your street.
- Preview the auto-reply and read it the way a stranger would.
- If it says anything about where you live or when you're home, edit it or leave auto-replies off.
The rules that make any tool safe
The safest Marketplace sales follow the same order whether a person or an AI is typing: screen the buyer first, agree the price in writing, share your address only with a screened buyer who has committed to a time, and confirm payment in your own app before you count the sale. That's the core of the Porch Protocol, and it's exactly what an AI agent should never be allowed to skip.
Quick answers
Is Meta Muse safe?
It can be, with tight permissions. The risk comes from standing approvals like "Always allow," which let it act without checking with you. Meta also says Muse can make mistakes and that prompt injection, where a webpage or message tries to hijack an agent, "remains an open problem."
Can Muse create Marketplace listings?
Users report it can draft them, but Meta hasn't documented the feature. Marketplace's own Meta AI can draft a listing from a photo.
Should I let Muse reply to buyers?
Let it draft. You send. Approve each message with "Allow once."
Can Muse negotiate for me?
Meta says it can within limits you set, but there's no documented setting that enforces a floor. In the reported case it accepted offers below the asking price. Keep price decisions yourself.
Screen the buyer before anyone, human or AI, shares your address
The free 60-Second Buyer Check is the one-page screen I run on every Marketplace buyer. The full Porch Protocol guide covers the two-message pickup setup, scripts, printable porch signs, and pickups while you're home behind a locked door, plus when an away pickup makes sense.
Sources
- Meta: Muse for Shopping
- Moneywise: Man says Meta's AI agent Muse shared his address
- CBC: Meta's AI agent Muse set up Marketplace sale without telling him
- Engadget: How to get started with Muse
- Fullstack: Inside Muse's permissions and tools
- TechCrunch: Marketplace lets Meta AI respond to buyers
Related: Are porch pickups safe? Only if you have a system · Facebook Marketplace scams that target sellers
The Porch Protocol isn't affiliated with Meta. Muse features change often. This article reflects public information as of the date above and isn't legal or security advice.