Skip to main content
9 – 17 UHR +49 8031 3508270 LUITPOLDSTR. 9, 83022 ROSENHEIM
DE / EN
Coding agent Meta Platforms United States Terminal (CLI)

Muse Code

Muse Code is Meta's terminal coding agent, powered by the Muse Spark models, with subagents, MCP, hooks, skills and sandboxed execution for developers.

Licence Proprietary
First release 0.1.0 (first published version per the changelog; exact calendar date not documented on the verified official pages)
Interfaces Terminal (CLI)
Platforms macOS, Linux, Windows
Instruction file AGENTS.md

The seven building blocks in Muse Code

How Muse Code implements the building blocks of an AI harness

  1. 1

    Agent loop

    Muse Code plans, edits files and runs commands to complete a task in a project, with approvals and, per the vendor, an OS-level sandbox active from the very first run.

  2. 2

    Tools and execution environment

    Tools cover file operations, shell commands and web search; multimodal input such as text, images, video and voice is supported per the vendor, and external systems can additionally be connected via MCP servers.

  3. 3

    Context management

    Per the documentation, configuration and context are spread across user settings (`~/.config/muse/settings.json`), project instructions (`AGENTS.md`, or `CLAUDE.md` as a fallback) and local memory (`.agents/memory/`).

  4. 4

    State and memory

    According to the documentation, personal project memory is stored on the local machine outside the repository and stays private, while committed project memory is shared with clones; the docs explicitly warn that project memory can act as a prompt-injection surface in untrusted workspaces.

  5. 5

    Permissions

    On first launch in an unfamiliar directory, Muse Code asks, per the documentation, whether to trust the workspace; approval modes, staged shell review and an OS sandbox govern what runs without asking, including UAC prompts on Windows.

  6. 6

    Verification and feedback

    Four observer agents, enabled by default per the documentation, run alongside the main session and propose actions without executing them – including one that explicitly verifies claimed work, plus others for memory recall, skill recommendations and goal tracking.

  7. 7

    Orchestration

    Per the documentation, a lead session can spawn subagents for bounded subtasks, with optional git worktree isolation; up to eight concurrent agents are allowed by default, configurable via `agents.execution_capacity` in settings.json (1 to 64).

Models and model access

Which models the harness uses and how they are obtained

Models and model access
Models Muse Spark model family (per the vendor, built specifically for Muse Code)
Access routes Meta Model API
Free choice of model No
Custom endpoint / LLM gateway No
According to the vendor, Muse Code and the Meta Model API are two ways of accessing the same Muse Spark models; switching to models from other vendors within Muse Code is not publicly documented.
Features
MCP servers Sub-agents Hooks Skills Plugins / extensions Sandbox Headless / CI SDK Resume sessions
Running it with herdr
Supported by herdr Yes
State detection Screen manifest
Integration none
According to herdr's documentation, it detects Muse Code sessions only via a screen manifest, with no state or session integration.
More about herdr →

Enterprise use

Data processing, controls and pricing model according to the vendor

Data processing and training use

Per the documentation, the Meta Model API distinguishes a standard tier, where prompts and outputs are not used for training, from a significantly cheaper contributor tier, where users grant Meta the right to use prompts and outputs to train future models in exchange for reduced cost. This tier choice, per the documentation, also applies to Muse Code's usage-based access.

Identity and access

The public documentation names no dedicated SSO or enterprise identity system specific to Muse Code; access runs through the Meta Model API's authentication.

Admin policies

According to the documentation, subagent capacity, approval modes and sandbox behaviour can be configured via settings.json; for centrally administered environments, Meta additionally documents a `defaults` and a `policy` configuration plane, checkable via `muse config validate --plane <defaults|policy>`, plus a `managed_hooks_path` for centrally imposed hooks.

Security and sandbox

According to the documentation, MCP tools bypass sandboxing, which is why the vendor recommends connecting only trusted MCP servers; hooks, per the documentation, run outside the sandbox with a cleared environment.

Pricing model

Per the documentation, Muse Code offers two ways to pay: a tiered flat-rate monthly subscription, or usage-based access via your own Meta Model API key billed per token, on either the standard or the cheaper contributor tier – see the vendor for current terms.

Strengths
  • A documented breadth of features from day one, including MCP, hooks, skills, sandboxing and git worktree parallelism
  • Four observer agents enabled by default for memory recall, skill recommendations, goal tracking and verification of ongoing work
  • Configurable subagent capacity with git worktree isolation for parallel subtasks
  • Multimodal input via text, images, video and voice, per the vendor
  • A TypeScript SDK and `muse serve` protocol for custom integrations
  • Compatibility with existing AGENTS.md and CLAUDE.md project instructions
Limitations
  • Proprietary software with no open licence and no publicly inspectable source code
  • Per the documentation, model access is tied to the Meta Model API and the Muse Spark model family, with no documented routing to other vendors' models
  • A freely configurable custom API endpoint for model access is not publicly documented
  • Per the documentation, MCP tools bypass sandboxing, which requires careful selection of connected servers

Use cases

Typical tasks for this harness

Complex, often long-running coding workstreams with multiple parallel subagents
Multimodal tasks combining image, video or voice context with code
Non-interactive automation via `muse exec` in scripts and CI
Extending workflows with project-specific skills and lifecycle hooks for teams
Programmable integration via the TypeScript SDK and `muse serve`

Muse Code is Meta’s agentic coding harness for the terminal: it plans tasks, edits files, runs commands inside a sandbox and connects MCP servers to turn the Muse Spark models into a working AI harness for developers in the terminal. It is built by Meta. As of 20 September 2026.

What is Muse Code?

Muse Code comes from Meta and, per its own documentation, is built specifically for the Muse Spark model family. The verified official pages do not document a public announcement date for Muse Code; per the changelog, 0.1.0 was the first published version, and as of 20 September 2026 Muse Code is at version 1.2.1 according to the changelog. It is installed via curl -fsSL https://dev.meta.ai/install.sh | sh (macOS, Linux) or irm https://dev.meta.ai/install.ps1 | iex on Windows, and started by running the native muse binary inside a project directory. The software is proprietary, and no public source-code repository is documented. Beyond interactive terminal use, Meta provides a TypeScript SDK (npm install @muse-code/sdk), which exposes its own protocol for programmable integrations via the muse serve command.

Muse Code as an AI harness

According to the documentation, Muse Code plans, edits and runs commands to complete a task in a project, backed by approvals and an operating-system sandbox active from the very first run. On first launch in an unfamiliar directory, the application explicitly asks whether to trust the workspace. Project instructions live in AGENTS.md, and Muse Code also reads an existing CLAUDE.md; user settings live in ~/.config/muse/settings.json. For memory, the documentation distinguishes personal project memory, stored outside the repository, from committed project memory shared with the team under .agents/memory/ – with an explicit warning that shared memory can act as an attack surface for prompt injection in untrusted workspaces. External systems connect via MCP servers over stdio or streamable_http, though MCP tools bypass sandboxing according to the documentation. Skills live under .agents/skills/<skill-id>/SKILL.md and are invoked via slash commands; hooks wire shell commands to lifecycle events such as SessionStart or PreToolUse via <project-root>/.muse/hooks.json. For complex tasks, a lead session spawns subagents with optional git worktree isolation, up to eight concurrently by default, configurable via agents.execution_capacity. Four observer agents, enabled by default, run alongside and propose actions on memory recall, skill use, goal tracking and verification of claimed work, without executing them directly.

Models and model access

According to its documentation, Muse Code is built specifically for Meta’s Muse Spark model family; the default model is muse-spark-1.2, selectable via the --model startup flag or mid-session via the /models slash command. A documented switch to other vendors’ models within Muse Code is not available. A freely configurable custom API endpoint for model access is not publicly documented. Whether model access can nonetheless be routed through a central proxy therefore remains open; organisations that want to budget and log Muse Code consistently alongside other model providers can use innFactory’s AI Gateway for the rest of their OpenAI-compatible model stack.

Enterprise use: data protection and governance

For the Muse Spark models, the Meta Model API documents a standard and a significantly cheaper contributor tier; on the contributor tier, users grant Meta the right to use prompts and outputs to train future models in exchange for reduced cost. This tier choice, per the documentation, also applies to Muse Code’s usage-based access, which sits alongside a separate flat-rate monthly subscription; the documentation names no dedicated EU or GDPR addendum. On the security side, the documentation explicitly notes that MCP tools bypass sandboxing and that hooks run outside the sandbox with a cleared environment – both should feed into an internal risk assessment. Important in practice: source code and prompts go to Meta as the model provider, which should be mapped in advance in an organisation’s records of processing activities, together with a check of current terms directly with Meta.

Orchestrating Muse Code with herdr

According to the documentation of the terminal orchestrator herdr, it detects Muse Code sessions via a screen manifest, but without state or session integration. This allows a basic status view of Muse Code instances alongside other coding agents in one shared terminal interface.

Where it fits: developer harness and enterprise harness

Muse Code is a harness for developers working on complex, often long-running coding workstreams with multiple subagents. For business users outside development, CompanyGPT is the matching harness: tools via MCP servers and n8n workflows, context via companyRAG, roles from Entra ID or Keycloak, and audit logs for business departments. The AI Gateway forms the shared cost and governance layer for both worlds, wherever the respective harnesses allow a custom endpoint. For an overview of other coding agents and orchestrators, see our overview of all AI harnesses. We help organisations evaluate and adopt new coding harnesses such as Muse Code too, securely, with proper governance and centralised cost control.

From developer harness to enterprise harness

Coding harnesses are tools for developers. Business users, cost control and governance need two more layers.

CompanyGPT – the harness for business users

CompanyGPT gives any language model tools via MCP servers, integrations and n8n, company knowledge via companyRAG, roles from Entra ID or Keycloak, and audit logs – operated in your Azure environment or sovereignly on STACKIT.

Discover CompanyGPT
AI Gateway – cost and governance for every agent

The AI Gateway bundles the model access of your tools and coding agents behind an OpenAI-compatible API: authentication via Entra ID, budgets and cost centres per team, user and agent, guardrails and complete logging.

View the AI Gateway

Frequently Asked Questions

What is Muse Code?

Muse Code is Meta's coding agent for the terminal and for CI environments. It plans, edits files and runs commands to complete tasks in a project, and is powered by the Muse Spark models from the Meta Model API.

Is Muse Code open source?

No. According to the vendor, Muse Code is proprietary software from Meta; no publicly inspectable source-code repository is documented.

Which models does Muse Code support?

According to its documentation, Muse Code is built specifically for Meta's Muse Spark model family; the default model is muse-spark-1.2, selectable via the `--model` flag or the `/models` slash command. A documented switch to other vendors' models within Muse Code is not available.

Can Muse Code be used in a GDPR-compliant way?

The public documentation names no separate GDPR addendum for Muse Code. For the underlying models, the Meta Model API distinguishes a standard and a contributor tier with different training use; organisations should verify current terms directly with Meta and map the processing of prompts and source code in their records of processing activities in advance.

Does Muse Code work with herdr?

Yes, with a caveat. According to herdr's documentation, herdr detects Muse Code sessions via a screen manifest, but without the deeper state or session integration documented for other supported agents.

What is the difference between Muse Code and the Meta Model API?

Muse Code is the finished terminal application for developers, with subagents, skills, hooks and a sandbox. Per the vendor, the Meta Model API exposes the same Muse Spark models directly as an API, for example for custom integrations via the TypeScript SDK or the `muse serve` protocol.

Introduce coding agents safely in your company

We support selection, model access in the EU, permission design and cost control.