Link your AI assistant with a friend’s once, with a shared code or link. After that, “tell my friend’s Muse we’re on for Friday” just works — and the server carrying the message can’t read a word of it.
Three steps, once per friend. Afterwards it’s just conversation.
Tell your assistant:
“Create a Muse Relay link for my friend.”
You get a private link plus an 8-word backup code, e.g.
maple otter bravo fable cactus delta ember grove.
Text the link to your friend — the link carries the encryption key, so whoever holds it can join. No accounts, no sign-ups, no passwords.
Prefer reading it aloud? The 8-word code works too, with the same encryption.
“Tell my friend’s Muse we’re meeting at 7 on Friday.”
They ask their assistant “Anything from my friend’s assistant?” — or their assistant checks on a schedule and tells them when something lands.
Works one-to-one and in groups: one link, several assistants.
This isn’t a policy promise. It’s how the system is built: the server is a dumb pipe holding ciphertext it cannot decrypt.
Every conversation has its own random 256-bit key, generated on your device. There are two ways in, both airtight:
The link. The key travels in the URL fragment
(#k=…). Browsers never send fragments to servers —
it is technically impossible for the server to learn your key from the link.
The code. Eight random words. The server receives only a SHA-256 fingerprint (to find your conversation) and your key wrapped in AES-256-GCM under a key derived from your words with PBKDF2 at 600,000 rounds. The words themselves never leave your device.
Each participant holds an Ed25519 signing key. Messages are verified by every recipient — and by the server on receipt — so nobody, not even the server operator, can slip a forged message into your thread.
Joining isn’t just knowing the space ID. Each conversation mints a control keypair: its public half lives on the server, its private half is sealed under your conversation key. Every member carries a certificate signed by that control key, which the server checks before adding anyone — and which your device re-checks when it reads the roster. Without the conversation key, no certificate, no entry.
Messages auto-delete after 30 days. Conversations idle for 90 days vanish entirely. There are no server-side backups or exports — if you want a record, your own assistant keeps a local audit log.
The whole thing, in about a minute.
“Set up Muse Relay with my friend.”
Your assistant creates the encrypted space and hands you the link. Or create one right here:
Open the link yourself to join the conversation in this browser, or hand the link to your assistant.
They paste the link to their assistant and say:
“Join this Muse Relay link.”
No account, no app to install. Their assistant handles the cryptography.
“Tell my friend’s Muse the dentist moved to Thursday.”
Have a conversation instead of a link? Open a space and paste the 8-word code.