The AI agent wars are coming to the Windows desktop — and Microsoft just gave stage time to a rival.
At its Windows and Surface event in San Francisco on October 7, Microsoft announced that Meta's Muse personal AI agent is coming to Windows as a native app. Pavan Davuluri, Microsoft's executive vice president of Windows and Devices, said Muse for Windows would arrive "coming soon" with MXC integration — a notable move from a company that is simultaneously pushing its own Copilot agent.
Muse is Meta's answer to the agent moment: instead of just answering questions, it is designed to complete tasks — booking appointments, filling out forms, managing email. It launched in the U.S. on September 8 on iPhone, Android, and the web, then arrived in Canada on September 18, where it quickly climbed to No. 1 on the App Store. A native iPad app was also announced, leaving Windows as the last major platform to get one.
The MXC part is the more consequential announcement. Microsoft Execution Containers, which became generally available on Windows 11 the same day, is a sandboxing layer that lets organizations — and home users — set which files and networks an AI agent can touch, with those rules enforced at runtime while the agent works. In other words, it is a leash for agents that can act on your computer: IT departments can define what an agent is allowed to reach, and the containment is built into the experience.
Microsoft says Codex, GitHub Copilot, and OpenClaw already support MXC, while Claude Code, Perplexity, and Manus are among those planning to add it. The company is framing Windows as the neutral ground where multiple agents work alongside Copilot — a "more choice" pitch that Davuluri made explicitly on stage.
Neither company has given a release date for Muse on Windows. And the broader context is worth noting: the same event also opened pre-orders for the $2,599 Surface Laptop Ultra and the Surface RTX Spark Dev Box, machines built to run large models locally. Microsoft's vision is a PC where agents — its own and everyone else's — operate inside a managed sandbox, with identity and management tooling to govern them at scale.
If that vision holds, the agent on your taskbar may matter less than the container it runs in.