Meta's Muse Gets 'Spaces': Custom AI Workspaces With a Data-Sharing Question

On November 6, 2026, Meta announced Spaces, a feature inside its Muse app that lets users build customised interactive experiences and games from plain-language prompts. The rollout lands seventeen days after Meta suspended Muse's conversation-sharing function, following reports that 6,800 shared links could be enumerated to expose loan applications, bank fraud alerts and employee leave calendars.

What does Spaces actually do?

Users describe what they want — a tracker, a dashboard, a planning tool — and Muse builds it. The model mirrors Anthropic's Claude Artifacts, which already lets users generate interactive tools by describing requirements. Users refine a Space through follow-up prompts: adding features, changing appearance or altering behaviour.

Spaces can also connect to other apps so the information inside stays updated in the background. Users can add and edit notes and check off tasks directly within a Space, and organise Spaces in Muse's sidebar or main tabs. Spaces can be hidden or replaced as needs change.

Meta listed six concrete use cases:

• Shopping hub: consolidate gift ideas, Instagram wishlists, Marketplace listings and buyer messages.
• School dashboard: extract school events from emails and add them to a calendar.
• Music tracker: follow artists, new releases and upcoming concerts.
• Wedding planner: organise RSVP lists, vendor invoices and tasks.
• Small business order tracker: monitor new orders, customer messages and pending shipments.
• Trip planner: bring together flights, hotels, reservations and daily itineraries.

The small-business case is the one with obvious enterprise weight: order and customer-message tracking in a single workspace that refreshes itself through connected apps.

Why does planned sharing raise alarms?

Meta said it is exploring options to let users share their Spaces with others. That plan collides with Muse's recent record. On October 20, 2026, Meta suspended Muse's existing conversation-sharing functionality after researchers at Claroc reportedly identified 6,800 shared conversation links that could be enumerated — meaning an outsider could walk through link sequences and reach other people's exchanges.

The exposure was not trivial. The compromised material included loan applications, bank fraud alerts and employee leave calendars — exactly the kind of connected-app data Spaces is designed to aggregate. The October incident involved conversations, not Spaces, but the planned sharing feature would extend the same class of risk across workspaces that pull from emails, calendars and other applications.

The core mechanism of the concern is straightforward: if a Space aggregates data from a user's connected applications, a collaborator with access to that Space could, in principle, reach information they were never authorised to see. Meta has not yet said how it will draw that boundary.

What has Meta been asked to answer?

Media outlets have put four questions to the company, which said it will update coverage when it responds:

• How will Meta structure access to shared Spaces, and what information can be shared?
• What safeguards will stop users from reaching another person's private data from connected applications through a shared Space?
• Will users get controls to decide which connected-app data enters a shared Space?
• How can users revoke access, and how will Meta prevent collaborators from retaining information they already viewed?

Availability

Spaces are available wherever Muse is available. Sharing remains a stated intention, not a shipped feature — and until Meta answers the access-control questions, it is the gap to watch.

The takeaway in one line: a capable workspace builder is now live on Muse, but the governance for sharing it does not yet exist.