How Muse Pays for Things: Stripe Link, Virtual Cards and Spending Safety

Muse pays through Stripe's Link. At the 1M+ businesses that accept Link, it checks out with the payment method you already saved there. Everywhere else, Link issues Muse a single-use virtual card scoped to the purchase you approved, so your real card number never reaches the agent. You approve the total in chat before anything is charged, and Shop Pay and PayPal were added as extra ways to pay in the week of September 21.

Here's how each piece works, what Amazon did about it, and how to keep an agent with a wallet from surprising you.

How does Muse pay with Stripe Link?

Link is Stripe's saved-payments wallet. For Muse, Stripe built what it calls "Link's wallet for agents," and the Stripe announcement describes two paths:

Where you're buying	What Muse uses	What the merchant sees
A business that accepts Link (1M+)	Your preferred saved method in Link, instant checkout	A normal Link payment
Any other online store	A single-use virtual card issued by Link, scoped to the approved purchase	A card number that works once

Stripe says that for every purchase, you "are asked to approve the transaction total directly in the chat interface, and Muse never sees their underlying payment details." Meta's launch post puts it the same way: the agent wallet "generates a one-time-use card so your real card details stay hidden."

The catalog files this as the Stripe Link wallet for Muse purchases. Link is also one of the fifteen launch connectors, and Meta's developer platform names Stripe Link as the payment layer for connectors too (CellCog's breakdown).

What is a single-use virtual card, and why does it matter?

A single-use card is a real card number generated for one transaction. Once that purchase goes through, the number is spent. If a sketchy store leaks it, or a prompt-injected page tries to reuse it, there's nothing left to charge.

That design fits how Meta built the rest of Muse. The agent runs in a per-user Muse Secure VM, and Meta's security write-up describes "credential surrogation," which keeps secrets away from the model itself. Meta's launch post says "Muse has no visibility into people's passwords or payment methods. Any credentials a person shares go into secure storage, so Muse can use them without seeing them."

The practical upshot: the thing most likely to go wrong with an agent (it reads a malicious page and tries to do something you didn't ask for) runs into a card that only covers the purchase you signed off on. For more on that threat, see prompt injection and agents.

Does Muse buy things without asking?

No. Meta says Muse "checks with the person before sensitive actions like sending an email or making a purchase" and "shows people a complete audit trail of everything it has done and plans to do." The same rule carries over to Muse for Mac, where it asks before making purchases while controlling your computer.

The approval is on the total, in chat. That matters because the total is what hits your statement, including shipping, taxes and fees the product page may have buried.

Are Muse purchases protected?

Meta says Muse is "the first AI agent covered by Link's purchase protections." Per the launch post, that means "free coverage for damaged or lost items, price drops, no-fee returns, and a return guarantee on eligible purchases." Note the word eligible. Meta and Stripe haven't published the full terms in either announcement, so check Link's own terms before counting on a specific return.

Shop Pay, PayPal and the other checkout partners

Link was first. Others followed within two weeks of launch:

• Shop Pay (Sep 21). Shopify enabled "agentic checkout" so Muse can pay with Shop Pay on Shopify stores, from the app or WhatsApp (PYMNTS).
• PayPal (Sep 22). PayPal users can check out through Muse at PayPal merchants worldwide (PYMNTS). Muse itself is still US-only, so "worldwide" describes the merchants, not who can use it.
• Instacart and Expedia. Groceries from about 100,000 stores (Instacart, catalog entry here) and travel booking, both announced alongside retailers like Walmart, Best Buy and Sephora at Connect 2026.
• Vertical connectors. Duffel books flights across 500+ airlines, while Ticketmaster completes purchases on its own marketplace.

One more thing is unconfirmed. Jane Manchun Wong reported finding Meta Pay alongside Link and Shop Pay in Muse's payment options (RuntimeWire). Meta hasn't announced it.

Why so many partners? Zuckerberg said Meta will profit "by taking a small fee from transactions" (TechCrunch). Checkout is the business model. More on that in Muse pricing.

Why can't Muse buy from Amazon?

Amazon blocked Muse from purchasing on Amazon.com starting Sunday, September 20. GeekWire reports Amazon's reasons: Meta didn't tell Amazon Muse would access its store, the agent doesn't identify itself when browsing, and it appeared to capture and store customer credentials. An Amazon spokesperson said such apps "should operate openly and respect service provider decisions." Meta had not commented when the story ran.

Users now see a message saying the agent violates Amazon's Conditions of Use (catalog entry). At least one builder worked around it for their own account: a self-hosted Amazon cart API that Muse reaches over SSH to search and add items to a cart. That's a personal hack that still leaves checkout to a human, and it may conflict with Amazon's terms too.

What people are actually paying for with Muse

The catalog shows the wallet used for small, specific jobs more than big shopping sprees:

• Event tickets. Alex Volkov had Muse book Rosh Hashanah dinner tickets through Link while a rival agent was still searching. He also tested the Stripe-powered payments on ThursdAI.
• Bills. Muse confirmed a Verizon gift card could pay down an account balance, then made the payment on Verizon.com.
• Negotiation before payment. Chandra Bhavanasi authorized Muse to accept any AT&T fiber offer under $70/month. It came back with $40 plus three months free, as reported by the author.
• Selling, not buying. Muse priced books from photos and listed them on eBay, then kept watching Fandango prices.

For more errands like these, see Muse agent errands.

How to keep Muse spending safe

The defaults are sensible. These habits close the remaining gaps.

1. Give it a ceiling in words. The AT&T example works because the instruction had a hard number. "Book it if it's under $X, otherwise ask me" is a better prompt than "find me a deal."
2. Read the total, not the item. You approve the transaction total in chat. Compare it to what you expected before tapping yes.
3. Prefer Link-accepting stores or single-use cards over saved logins. Every other store gets a single-use card by default. Be more careful when you hand Muse a store login, since that's a credential with a longer life.
4. Set connectors to read-only where you can. Meta's connector help page lets you do this. A bank connector like Plaid rarely needs write access for budgeting.
5. Be picky with custom connectors. Directory connectors are reviewed by Meta; custom ones are not. If a connector can move money, look for approvals built into it. Change Verifier holds payee changes until a named owner accepts them, and 1Claw surfaces an agent approval queue with scoped, revocable tokens.
6. Check the audit trail. Muse keeps a log of what it did and plans to do. Skim it after any purchase run, and match it against your Link and card statements.
7. Keep the Mac locked down. Patrick Wardle reported a Muse for Mac zero-day that can expose voice prompts and auth tokens. No patch had been mentioned as of September 22.

Our agent guardrails and Muse security and privacy posts go deeper. If you've built a payments workflow or connector on Muse, submit it.

Frequently asked questions

Does Muse see my credit card number?

No, according to Meta and Stripe. Payment details stay in Link or secure storage, and at stores that don't accept Link, Muse gets a single-use virtual card instead of your real number.

Can Muse make purchases without my approval?

Meta says Muse checks with you before purchases, and Stripe says you approve the transaction total in the chat. You also get an audit trail of what it has done and plans to do.

What payment methods does Muse support?

Stripe Link was there at launch, with single-use virtual cards for non-Link stores. Shop Pay was added on September 21 and PayPal on September 22. A Meta Pay option has been spotted in testing but not announced.

Why doesn't Muse work on Amazon?

Amazon blocked Muse purchases from September 20, saying Meta didn't notify it, the agent doesn't identify itself, and it appeared to store customer credentials. Meta hadn't responded publicly when GeekWire reported the block.

Are Muse purchases covered if something goes wrong?

Meta says Muse is the first agent covered by Link's purchase protections, including damaged or lost items, price drops, no-fee returns and a return guarantee on eligible purchases. Check Link's terms for what counts as eligible.