Free is the easy part

On September 29, Meta launched Muse for Small Business. It isn’t a separate app. It’s a set of business skills and connectors added to Muse, the personal AI agent Meta released earlier in September for the US and Canada. The connector list covers most of a small company’s back office: Intuit QuickBooks, Shopify, Stripe, Slack, Notion, Klaviyo, Canva, Asana, Box, Dropbox, Figma, Granola, HighLevel, Lovable and Zoom, plus your Facebook Pages, Instagram professional account and Meta ad accounts.

Meta says Muse is “available for free with a usage limit,” with paid plans for heavier use. Its headline promise is “nothing publishes, sends, or spends without your approval.”

My call: the price is not the decision. Connecting an agent to your books, your storefront and your customer list is a change in who and what can touch your business. Treat it the way you’d treat giving a new hire login access on day one, which means limited, logged and reviewed.

What you’re actually granting

Meta’s own engineering post on Muse security is more detailed than most vendors publish, and it’s worth reading before you connect anything. Its help center fills in the rest. A few points matter to an operator.

  • Approvals come in sizes. When Muse asks, you can allow once, for the task, for a site, or “Always allow.” Meta’s engineering post also describes time-bounded and perpetual grants. The always and perpetual options are the ones to watch.
  • Read and write are separated where the service allows it. Meta says many connectors can be set so Muse “is only able to retrieve data, but not take actions,” and that users tend to add write access only once they trust the system. That’s the right instinct.
  • Your logins stay out of the model. Credentials go into what Meta calls a Secure Credentials Store, so Muse can act without the AI model seeing your password.
  • Purchases get extra friction. Meta says Muse “will always ask for your approval prior to completing a purchase.” With Link by Stripe, each purchase gets a one-time card number tied to one merchant, one amount and a limited time.
  • Your data trains the model by default. Meta says conversation and tool-call data is sanitized of key personal information and used for training unless you switch it off in settings.
  • Ads are mostly walled off, with an exception. Meta says Muse doesn’t share your conversations or VM data with its ad systems. But when Muse browses the web for you, that “will appear as your activity,” and it can influence the ads you see.

Meta’s help center adds three lines every owner should read twice. Choosing “Always allow” means Muse “can take this type of action for this Connector in the future without asking again.” Sending an email “cannot be reversed.” And from the payments page: “You’re responsible for all transactions your Muse makes on your behalf.”

That last one is the point. Approving every action keeps you in the loop. It doesn’t take you off the hook for what the agent drafted.

The privacy questions are real, but not the main event

Muse has had a rough first month on privacy. On October 3, Wired reported that researchers extracted Muse’s internal instructions, which include building “a page for every person in the user’s life” as an hourly process. Meta said Muse gathers that context “based on public information and from what you’ve chosen to share.” SiliconANGLE, citing 404 Media, reported that Meta engineers rushed to fix security flaws before launch. And CNBC reports that Amazon has blocked Meta’s agents, citing scraping concerns.

None of that makes Muse unusable. It does mean you should connect it to the minimum and assume anything it reads could end up in its memory.

Five metal toggle switches on a panel, two flipped on with vivid pink tips
Before you connect Muse to the books, treat settings like toggles: decide which ones are on, and leave the rest off.

Five things to check before you connect your books

  1. Start read-only. Connect QuickBooks, Shopify and Stripe so Muse can read, not write, wherever the connector allows it. Meta doesn’t publish which of those three support a read-only setup, so check in settings when you connect. A weekly sales-and-expense review needs no write access at all.
  2. Never tap “Always allow” on anything that talks to customers. Email, Slack and Klaviyo sends can’t be pulled back. One tap on a busy Tuesday turns Meta’s approval promise off for that connector.
  3. Make the training decision on purpose. If customer emails, payroll or margin data will flow through Muse, decide whether you’re comfortable with training being on. The default is on.
  4. Put a number on cost. Meta’s subscription page lists Power at $20 a month for 500 million “Muse tokens” a week and Maximum at $100 a month for 3 billion. Meta says benefits may vary by region and account, and the plans are still in limited testing. It doesn’t publish the size of the free allowance or how many tokens a typical task uses. Start on free and check where you hit the limit before you budget.
  5. Keep the books with your bookkeeper. Let Muse flag unusual expenses or draft a cash summary. Anything that changes an entry, sends an invoice or moves money stays with a person who signs for it. If you just hired a controller, this is the kind of boundary to set in the first 90 days.

How to pilot it

Pick one narrow job with a clear before-and-after, and evaluate it like any other AI workflow. A Monday review of last week’s sales, ad spend and overdue invoices is a good first candidate. Run it for four weeks alongside your current process. Track one number: minutes saved after corrections. If the corrections eat the savings, stop. If they don’t, expand one connector at a time.

Channel Insider makes the same point for IT partners: start with a limited workflow and measure time saved after review and corrections before you give the agent more responsibility.

FAQ

Is Muse for Small Business free? Meta says Muse is “available for free with a usage limit.” It doesn’t publish the size of that limit. Its subscriptions page lists Power at $20 a month and Maximum at $100 a month, and says those plans are still in limited testing.

Does Muse train on my business data? By default, yes. Meta says conversation and tool-call data is sanitized of key personal information and used for training unless you switch it off in settings.

Who is responsible if Muse buys something? You are. Meta’s payments help page says “You’re responsible for all transactions your Muse makes on your behalf.” Muse asks for your approval before completing a purchase, but approval doesn’t shift the responsibility.

Can I connect QuickBooks read-only? Meta says many connectors can be set so Muse can only retrieve data. It doesn’t publish which settings QuickBooks, Shopify or Stripe support, so check when you connect.

Bottom line

Muse for Small Business is one of the easiest agents a small business owner can try today. It’s free to start, it’s wired into the tools you already use, and it has approval gates by default. That’s exactly why it deserves five minutes of setup before the first prompt.

My advice: connect it read-only, keep humans on anything that sends or spends, decide on training deliberately, and measure one workflow for a month. If you’ve already wired Muse into your books and it’s paying off, I’d like to see your numbers.

Sources

Written by

Ken Koo

Partner at Force Scaling

Partner at Force Scaling, helping CEOs and leadership teams turn ambition into operating discipline and results.

ADVERTISEMENT