--- title: "Manus and the Product-Layer Cost of Reversing an Agent Acquisition" canonical: "https://anchor.is/on-deck-vvSq/issue/15/ai-capital/article/42795/manus-and-the-product-layer-cost-of-reversing" publication: "On Deck" publisher: "Ground Truth" language: "en-US" guide: "https://anchor.is/on-deck-vvSq/llms.txt" format: "Anchor Deal Breakdown" author: "Reva Sandoval" author_url: "https://anchor.is/on-deck-vvSq/team/143" issue: 15 section: "ai-capital" section_name: "AI Capital" published: 2026-10-11 updated: 2026-10-12 description: "How Meta's forced Manus divestiture turned agent platform acquisition into an architecture problem, and why capital in the category is shifting toward licensing and build-over-buy." word_count: 2123 source_links: 28 --- # Manus and the Product-Layer Cost of Reversing an Agent Acquisition *By [Reva Sandoval]()* *October 11, 2026* [Read on the website]() In April, China's foreign-investment security review office, which sits inside the National Development and Reform Commission (NDRC), [ordered Meta to reverse](https://zfxxgk.ndrc.gov.cn/wap/iteminfo.jsp?id=20623) its completed acquisition of Manus. The public order is one sentence long. The acquisition is prohibited, and the parties must revoke the transaction. It names no price, gives no rationale, and sets no IP terms. The order is not the useful part. Over the following five months, Manus published a run of help center documents walking users through backup, deletion, and restoration of their accounts, tasks, connectors, subscriptions, and hosted projects. Read in sequence, they are the most detailed public record we have of what it costs, at the product layer, to reverse an acquisition of a live agent platform. That cost is higher than anyone modeling agent M&A risk has been pricing in. ## What was entangled Manus runs a general-purpose agent platform. Users assign multi-step tasks, and the system executes them across connected applications. Its [integration surface](https://open.manus.ai/docs/v2/connectors) covers Gmail, Google Calendar, Slack, Notion, GitHub, Outlook, Shopify, Linear, monday.com, Supabase, PostgreSQL, custom MCP servers, and API endpoints. It also offers a persistent [Cloud Computer](https://help.manus.im/en/articles/15392111-what-is-the-cloud-computer), a full Ubuntu VM that keeps files, software, and running processes between sessions, and it hosts deployed web projects with custom domains, certificates, and DNS. Meta closed the acquisition December 29, 2025. By the time the NDRC acted four months later, Meta's ownership had worked its way down from the corporate layer into user identity, billing, task history, connector authorizations, and hosted infrastructure. The separation process shows how far down it went. ## Three user classes, three depths of coupling Manus defined the affected window as [December 29, 2025 through August 23, 2026](https://help.manus.im/en/articles/16147831-service-change-overview-what-s-happening-and-am-i-affected). Anything created or modified inside that window was subject to deletion. Users were sorted into three classes: **Type A**: account created before the acquisition, no changes to email or user information afterward, no active post-acquisition subscription. These users kept their accounts but lost task data and connectors created during the ownership window. **Type B**: same as Type A, but with a subscription purchased after the acquisition. Account retained, post-acquisition data deleted, subscription canceled and refunded. **Type C**: account created during Meta's ownership, or a pre-existing account whose email or user information changed during that period. These users lost the account record itself, and every task, subscription, and piece of associated data went with it. They had to restore the account before they could restore anything else. Read Type C closely. The temporal boundary decided whether a user's identity record counted as separable from Meta or as part of Meta. If you created your account while Meta owned Manus, the account was architecturally Meta's. It had to be destroyed and rebuilt from backup. ## What connector separation actually required What a user experiences as one connector is [three distinct objects](https://open.manus.ai/docs/v2/connectors): the configuration, the OAuth grant or credential that authorizes it, and the task or project state that references it. Backup could preserve the configuration. The OAuth grant could not move. It is an authorization a user gave to a specific entity to access a specific service, and the entity holding it had changed. Users had to [reauthenticate every connector](https://help.manus.im/en/articles/16147895-service-change-overview-how-to-restore-your-data) after restoration. Facebook login got blunter treatment. Users who signed in only through Facebook were [told to add another login method](https://help.manus.im/en/articles/16147892-service-change-overview-how-to-back-up-your-data) before the transition. That integration was removed and not restored. For hosted web projects, the documentation [listed what users needed to verify](https://help.manus.im/en/articles/16354507-service-change-overview-how-service-change-affects-your-webdev-projects-and-website) after restoration: deployed versions, custom domains and DNS, Cloud Computer files and addresses, running processes, web services, certificates, firewall settings, and stored credentials. Requests that arrived while a site was down were not replayed. Human and AI support were [unavailable globally](https://help.manus.im/en/articles/16450238-service-change-overview-support-availability-during-maintenance) during the deletion window, including for users whose accounts were otherwise untouched. Teams added another layer. Only team owners could create an importable backup. [Ordinary members could export readable copies](https://help.manus.im/en/articles/16147892-service-change-overview-how-to-back-up-your-data) of their own task material, but those exports could not reconstruct the workspace. If the owner was Type C, the whole team account was deleted, and the owner had to restore it before anyone else got anything back. Backup archives ran from [tens of megabytes to tens of gigabytes](https://help.manus.im/en/articles/16147892-service-change-overview-how-to-back-up-your-data), split into four-gigabyte packages. Manus handed the state migration to its users to execute. ## Agent platforms break the standard acquisition assumption The working assumption in SaaS M&A is that ownership changes at the corporate level while the product keeps running underneath. For agent platforms that assumption holds poorly. An agent that holds delegated credentials to your email, your code repositories, and your project management tools, and that also maintains persistent compute, hosted deployments, and multi-session task history, ties the corporate layer to the product layer in a way a traditional SaaS subscription does not. The authorization graph, the execution state, and the identity layer each carry the legal fingerprint of whoever owns the platform at the moment they're established. When you acquire an agent platform, you inherit the OAuth grants, persistent sessions, and credential stores that users established under the prior owner. A reversal has to undo each of those bindings individually. NIST's 2026 concept paper on [agent identity and authorization](https://www.nccoe.nist.gov/sites/default/files/2026-02/accelerating-the-adoption-of-software-and-ai-agent-identity-and-authorization-concept-paper.pdf) treats this as a distinct production concern: agents need delegated, managed access to multiple systems, and identity provisioning, revocation, and policy enforcement remain separate controls. Manus is the first large-scale case of those controls being exercised involuntarily, across an entire user base, because corporate ownership changed. ## What Meta kept, and what the gap means The public record doesn't settle this. The NDRC order required the parties to [revoke the acquisition transaction](https://zfxxgk.ndrc.gov.cn/wap/iteminfo.jsp?id=20623) and specified no IP, licensing, or data-destruction terms. By June, Bloomberg reported that Meta and Manus had [completed an operational split](https://news.bloomberglaw.com/ip-law/meta-starts-unwinding-manus-deal-by-splitting-operations-data), halted data sharing, and put a firewall between the companies. A staff bulletin from the U.S.-China Economic and Security Review Commission (USCC) [interpreted](https://www.uscc.gov/sites/default/files/2026-05/China_Bulletin_May_5_2026_.pdf) full compliance as requiring Meta to destroy acquired data, technology, and documentation. That was staff analysis, not the order. Neither Manus's [independence announcement](https://manus.im/blog/manus-resumes-independent-operations) nor Meta's [10-Q for the quarter](https://www.sec.gov/Archives/edgar/data/1326801/000162828026050705/meta-20260630.htm) says whether Meta retained a license to any Manus technology. I'd put high confidence on full separation of ownership, operational access, and data sharing. Nothing confirms that every technology transfer was reversed. The gap matters for two evaluations. First, Meta [launched Muse on September 8](https://apnews.com/article/3a4572eb4cf4e95d8a0dfdad6e6ca065), a general-purpose personal agent that runs in a dedicated VM and handles email, travel, shopping, and longer-term projects. That is the category Meta bought Manus to enter. Whether Muse benefited from Manus technology during the four months Meta held the company can't be answered from public sources, and the answer changes how you should read Muse's competitive position. Second, the IP question tests whether a forced unwind achieves full technological separation or only operational separation. If it's operational only, the regulatory tool is weaker than it looks, because the acquirer loses control but may keep what it learned. Every future cross-border agent deal will be priced against that ambiguity. ## How the precedent changes agent deal structure The general-purpose agent category filled out fast. OpenAI launched [Dots](https://openai.com/index/introducing-dots/) on September 29: always-on agents with their own cloud computers and 4,000+ application connections. Anthropic [merged Cowork into Claude](https://claude.com/blog/cowork-is-now-claude) on September 16, enabling persistent work across connected applications. Perplexity's [Computer](https://www.perplexity.ai/changelog/what-we-shipped---march-13-2026) runs multi-step workflows across 400+ applications. [Genspark](https://www.businesswire.com/news/home/20260617758937/en/) produces completed deliverables from objectives using connected business data. That is five major entrants in six months, all building the same integration surface that made the Manus unwind expensive. More platforms with that surface means more acquisition decisions that have to account for it, and the Manus precedent is already visible in how deals are being structured. **The licensing alternative is emerging.** The Information reported that Nvidia, in discussions about [investing in Perplexity](https://www.theinformation.com/articles/nvidia-discusses-perplexity-investment-30-billion-plus-valuation-considered-tech-licensing-deal/) at above $30 billion, had earlier considered a separate arrangement to license Perplexity's technology and hire some employees. Technology access without corporate ownership sidesteps the problem Manus exposed: there is no ownership for a regulator to reverse, and no user's OAuth grants carry the buyer's corporate fingerprint. Whether Manus directly shaped Nvidia's thinking is unknowable. That the structure surfaced in the same year is observable. Treat the causal link as speculative and the timing as fact. **Meta built instead of re-acquiring.** Muse launched roughly eight months after the close and less than five months after the NDRC order. Meta did not go after another agent platform. Plenty of factors feed a build-over-buy call, but one of them is now demonstrable: buying an agent platform means accepting that a forced reversal reaches the user layer — identity, authorization, execution state. Meta has already absorbed that cost. **Genspark is the closest structural match.** Chinese-linked investors ([Tencent and HongShan](https://www.theinformation.com/briefings/chinas-tencent-invests-ai-agent-genspark)), founders with prior Baidu experience, an international operating structure, and a product that runs on delegated access to user applications and data. No source I reviewed reports pending regulatory action. Call the exposure moderate confidence, built on pattern rather than any filing. After Manus, though, the pattern is no longer hypothetical. Any acquirer evaluating Genspark now has to model the unwind cost, and Manus's help center documents show in granular detail that the cost scales with integration depth. ## Manus post-independence Manus [resumed independent operations](https://manus.im/blog/manus-resumes-independent-operations) September 1. The Information reported October 7 that the company [raised more than $500 million](https://www.theinformation.com/briefings/manus-raises-500-million-unwinding-meta-deal), and that revenue had grown from roughly $100 million annualized at the time of acquisition to between $400 million and $500 million by June. These are private-market figures, unaudited, and the October run rate is unknown. Go back to the Type C users who completed restoration. Their accounts had been destroyed. Returning meant restoring the identity record, reauthorizing every connector, and verifying every deployment. The same process produced involuntary churn and voluntary re-engagement. As a loyalty signal, that beats a renewal metric, because renewal happens by default and restoration takes work. ## The verdict The USCC characterized Manus as [the first public use](https://www.uscc.gov/sites/default/files/2026-05/China_Bulletin_May_5_2026_.pdf) of China's foreign-investment review to block investment in the country's AI sector. Cross-border intervention in AI-adjacent deals has precedent. [CFIUS forced iCarbonX to divest PatientsLikeMe](https://www.axios.com/2019/04/04/us-mandates-sale-another-chinese-owned-tech-company) in 2019. [Microsoft restructured G42's supplier relationships](https://blogs.microsoft.com/blog/2024/04/15/microsoft-and-g42-partner-to-accelerate-ai-innovation-in-uae-and-beyond/) under U.S. pressure. [Nvidia's Arm acquisition collapsed](https://www.sec.gov/Archives/edgar/data/1045810/000104581022000005/nvda-20220208.htm) under resistance from multiple jurisdictions. None of those required users to back up their data, delete their accounts, and rebuild their authorization state. That user-level disruption is what distinguishes the Manus case. Capital in the agent category is moving toward licensing, partnership, and build-over-buy because the Manus unwind proved that outright acquisition creates reversal risk at the product layer, not just the corporate layer. The deeper the integration surface, the more expensive the forced reversal. Acquirers who have been modeling M&A risk as a corporate-finance problem now need to model it as an architecture problem, counting the OAuth grants, persistent sessions, credential stores, and hosted environments a target manages for its users. The companies to watch, in priority order: - **Genspark**, for regulatory exposure. Its ownership and operating pattern is the closest match to pre-acquisition Manus. - **Perplexity**, for deal structure. The reported Nvidia licensing arrangement may be the first visible adaptation to the new risk calculus. - **Meta Muse**, for the unresolved technology question: whether a forced unwind achieves full separation or leaves the acquirer with residual knowledge that shapes what it builds next. Manus comes out of the unwind better capitalized and with higher revenue than when it was acquired, and the users who came back after restoration chose to. What Manus hasn't published is whether that base held or eroded. That retention figure, when it surfaces, will say more about the real cost of the unwind than anything in the NDRC order. ## Things to follow up on... - **Blackford's neutrality test:** Sopris Capital [completed its purchase of Blackford Analysis from Bayer](https://headlinesbriefing.com/private-markets/pe-hub/sopris-capital-completes-blackford-carve-out-from-bayer-1847c268) on October 9, creating a second case study of a live AI platform changing corporate owners — watch whether the 130+ vendor catalogue and hospital customer base survive the transition intact. - **Enterprise authorization acquisitions:** SAP, Salesforce, Bloomberg, BlueMatrix, Behavox, and Automation Anywhere all announced acquisitions in the same three-week window, and each buyer's stated rationale [names context, permissioned content, or machine-readable rules](https://news.sap.com/2026/10/sap-to-acquire-techwolf-evidence-based-work-age-of-ai/) as the purchased asset — the pattern will clarify whether these integrations produce combined products or stall at the announcement stage. - **TypeSafe's adoption evidence:** TypeSafe AI raised [$870 million at a $7.5 billion valuation](https://techcrunch.com/2026/10/09/the-maker-of-non-text-ai-model-jev-valued-at-7-5b-just-weeks-after-launch/) weeks after launching Jev, but its Fortune 500 penetration claims remain company-controlled — named-customer data or independent performance studies would separate category formation from investor momentum. - **Physical AI's calibration loop:** AMD's [$8.2 billion acquisition of World Labs](https://ir.amd.com/news-events/press-releases/detail/1299/amd-to-acquire-world-labs-to-advance-the-future-of-ai-compute) and Sequoia's lead in Mecka's $60 million Series B are funding opposite sides of the sim-to-real loop — the competitive question is whether the value accrues to whoever closes that loop fastest, not to whichever layer raises the most capital. ## More - [AI Capital — Issue 15]() - [Issue 15]() - [Publication guide]()