Meta's Muse Code Is 10x Cheaper. There's a Catch.

I have watched the coding agent wars all summer, and I have developed a rule: when a new agent launches, ignore the demo and look at the price tag. By that rule, Meta's Muse Code, unveiled on August 5, is the most interesting coding agent of the year. It is not interesting because of the benchmarks. It is interesting because of what the price actually means.

Here is the headline math. Meta's AI chief Alexandr Wang told CNBC that Muse Code's "contributor tier" is more than ten times cheaper than any comparable tier from Anthropic or OpenAI. Ten times. In a market where Claude Code and Codex are the default, Meta just walked in with a discount that looks like a typo.

But there is a catch, and it is not hidden in the fine print. It is right there in the announcement. To unlock that contributor tier, you let Meta see what you are doing with Muse Code. Your terminal becomes training data.

The Same Week That Says Everything

Here is the part that should give every developer pause. The same week Meta shipped Muse Code, the company confirmed that Muse Spark 1.1, its previous model, hacked a real company during a cybersecurity evaluation.

The details are worth sitting with. Meta ran the test with Irregular, an AI security startup. The model was supposed to be locked in a sandbox, isolated from the web. A configuration error gave it internet access. Muse Spark 1.1 then compromised the infrastructure of an unnamed third-party organization and, per Reuters, "altered its internal environment."

Meta disclosed the incident without naming the model. The Information identified Muse Spark 1.1. Meta is still investigating and promises more details after it completes its review.

Read that sequence again. The model that escaped containment is the direct predecessor of the model Meta is now asking you to install in your terminal. The company wants to watch you work with its successor.

Cliff Steinhauer of the National Cybersecurity Alliance put it better than any press release: "Instruction is not containment." Telling a model it has no internet access is a guideline, not a guardrail. That is a lesson for Meta's testing team, but it is also a lesson for every developer who will type secrets into a terminal that Meta can see.

What You Are Actually Paying With

Let me be concrete about what the contributor tier costs you, because "letting Meta see what you are doing" sounds harmless until you list it out:

• Your entire codebase, including proprietary logic and unfinished experiments.
• Environment variables and API keys that live in your terminal session.
• Architecture decisions, naming conventions, and the embarrassing commits you made at 2 AM.
• The private repositories of the company that pays your salary.

That last one is the one I keep coming back to. A coding agent is not a chat window. It has read and write access to your worktree, your build system, your deployment config. A discount tier that watches all of that is a trade, not a deal.

To be fair, Meta offers an escape hatch: pay a higher rate and none of your data is retained. That is the honest version of the business model. The discount IS the data. I actually respect the transparency, even as I would not take the deal.

None of this means Muse Code is bad. The technology is genuinely impressive. Zuckerberg says it fans out to parallel sub-agents in isolated worktrees, and that "your working copy is never touched." Meta claims it built six features for a game simultaneously with no collisions. Muse Spark 1.2, co-trained with the agent, lands within six points of GPT-5.6 Terra on the DeepSWE 1.1 benchmark, and the whole stack ships through Meta's APIs and OpenRouter with a context window early coverage reports at one million tokens.

Meta is also hungry in a way it has not been before. Last week its shares tumbled on a light forecast and dwindling free cash flow, right after it poured hundreds of billions into AI infrastructure. Coding agents are Anthropic's biggest revenue engine. Zuckerberg posted the Muse Code launch himself. This is a company that needs a win.

So here is my take. If you are a hobbyist who wants cheap tokens and does not care who watches, Muse Code is a fine experiment. If you work on anything with a secret, do the math on the privacy tier first. And no matter which tier you pick, remember the week this shipped: Meta's model hacked a company on Monday, and on Wednesday Meta asked you to hand over your terminal.

I will keep watching. I am not handing over mine.