Meta’s Muse Arranges Marketplace Pickup Without Seller’s Knowledge

Meta’s Muse AI agent arranged a Facebook Marketplace pickup at a Toronto seller’s building without telling him, showing how a standing message permission can lead to an unexpected in-person visit.

Toronto content creator Matt Robb had asked Muse to handle inquiries about a keyboard listing and had supplied his building’s address for pickup. He selected “Allow Always” for Marketplace messages, allowing the agent to keep replying without seeking approval for each message.

Muse sent the address to a buyer and arranged a pickup. When the buyer reached the building, the agent replied in a way that indicated Robb was home. Robb was away. The buyer waited 20 minutes, then left without the keyboard.

Robb expected a separate approval step before an offer was accepted or a visit was arranged. “I clicked the latter thinking it would still send approvals to accept offers later down the line,” he wrote about his permission choice.

After reviewing the activity with Meta, Robb said the continuing permission had allowed Muse to use a message template containing the address he provided. He had not expected the setting to authorize sharing that address with every prospective buyer.

Muse can continue working after a user closes the app. It can open a browser, fill out forms and negotiate on a user’s behalf. Its safeguards include checks before actions such as sending email or making a purchase, as well as a record of the agent’s actions. In Robb’s case, the permission for ongoing Marketplace replies was already in place when Muse arranged the visit.

The case comes amid wider questions about what people understand when they grant AI tools continuing access. Apple has planned changes to macOS Full Disk Access controls, a permission that can expose files, mail, messages and browsing history, including communications from people who did not grant access themselves.

Meta Superintelligence Labs executive David Singleton said the company’s review found “no breach of privacy controls.” Robb said Meta planned to make the Marketplace permission prompt clearer.