Meta launched Muse, its AI agent, on September 8. Ten days later Zuckerberg opened it to outside developers. The pitch is simple: you bring the API, Muse brings the agent. You tell it what you want and it goes and does it - reads your Notion docs, pulls your meeting notes, books the table, pays for it through Stripe at more than a million businesses. It hit number one on the App Store. Now read Meta's own help center. There are two kinds of connectors. The ones in the directory, which Meta reviews. And custom ones Muse builds on the fly for a single user from any service's public API - which Meta does not review. So the agent that can spend your money can also wire itself into services nobody at Meta has checked. Meta's own setup guidance says it plainly: Muse may take unexpected actions. Monitor it carefully. To be fair, there are real guardrails. Requests run in isolated virtual machines, Stripe never hands Muse your full card number & it's supposed to ask before anything consequential. But "supposed to ask" is doing a lot of work in a product whose whole selling point is that you don't have to.