Cowork — an overview · We Love Claude

What it is

Cowork is Claude’s agentic mode. You give it a multi-step task and it works on it: reading and writing files, browsing in Chrome, calling connectors, executing code. Each task is its own session with a conversation, a progress tracker, a scratchpad, and pinned context files.

Every task can run for minutes or hours. You can walk away; Cowork keeps going as long as your Mac stays awake. Come back and check progress, add instructions, or hand off what Claude produced.

Where to find it

On desktop

Cowork — second top-level tab in the app. The sidebar inside shows: New task · Projects · Scheduled · Customize · Dispatch · Pinned · Recents.

How to use it

Start a task

Cowork → New task.
In the composer, type what you want. Attach files if needed.
Below the composer, the Work in a project dropdown lets you scope the task to a folder on disk.
The Ask dropdown sets approvals: Ask for approvals (default — Claude checks in before tool calls) or Skip all approvals (trust mode for well-defined jobs).
Pick a model. Submit.

Watch a task run

The task detail view is three columns:

Left — the Cowork sidebar.
Middle — the task conversation. Shows your prompts, Claude’s tool runs (e.g. “Ran 2 commands, created a file”), produced files with Show in Folder buttons, and validation messages.
Right rail — Progress (N of M), Instructions, pinned files, Scratchpad (Claude’s working notes), Context (connector/skill badges).

You can reply mid-task to course-correct or add context.

Recover context later

Every task lands in Recents. Reopen it and the right rail is restored — progress, files, scratchpad.

Right-click a task for quick actions

Right-click on any Recents item: Move to project · Pin · Rename · Archive.

Good to know

Paid plans only. Cowork is on Pro, Max, Team, and Enterprise.
macOS and Windows. Cowork runs on Claude Desktop for macOS and Windows; it is not available on web or mobile (though Pro/Max can trigger Cowork tasks from the mobile app — they still run on the desktop).
Check your machine first. Anthropic provides a Cowork readiness check downloader for macOS, Windows arm64, and Windows x64. Run it before installing if you’re unsure whether your hardware supports Cowork.
Deletion protection. Claude needs explicit Allow before permanently deleting any file.
Code runs isolated. Shell commands and code run inside an isolated VM on your computer, separate from your OS. File and network access follow the permissions you’ve set.
Approvals on by default. Change the default in Customize; override per-task from the composer’s Ask dropdown.
Task runs stop when the Mac sleeps. Enable Keep awake (on the Scheduled view) or plug in the laptop for long runs. The Claude Desktop app must stay open.
Paused tasks show a pause icon in the task list. Click to resume.
Not suitable for regulated workloads. Cowork activity is stored locally (not under Anthropic’s data-retention schedule) and is not captured in Audit Logs, Compliance API, or Data Exports. Team/Enterprise admins can use OpenTelemetry to monitor activity — it isn’t a replacement for audit logging.

Safety and permissions

Cowork has agentic access to files, your browser, and connected services. That capability brings real risks — here’s how to use it responsibly. For the full guidance, see the help-center article Use Claude Cowork safely.

Key risks to watch for:

Prompt injection via untrusted web content, emails, or documents Claude reads.
Data exfiltration through malicious MCP servers, plugins, or skill packages.
Unintended changes — Claude can write and delete your files, send messages, make purchases. You are responsible for anything Claude does on your behalf.

Recommended permissions posture:

Give Claude access to a dedicated working folder, not your whole home directory. Avoid granting access to financial documents, credentials, or personal records. Keep backups.
Only extend Claude’s default network access to sites you trust. Note that egress permissions don’t apply to the web search tool or to MCPs (including Claude in Chrome).
Be wary with Claude in Chrome; don’t use it for sensitive workflows (banking, healthcare, etc.).
Be cautious with scheduled tasks — they run without you watching. Start with low-risk summaries; don’t schedule anything that sends messages, makes purchases, or touches sensitive data.
Be cautious with computer use (which operates outside the VM, directly on your desktop). Block sensitive apps, start with low-stakes tasks, monitor actions.
Stick to verified plugins and MCPs from the Claude Desktop directory. Plugins can bundle local MCP servers that run with the same permissions as any program you launch.
Stop any task that feels off — Claude scope-creeping, touching files or sites you didn’t mention — and report it via the in-app feedback button.

Team/Enterprise owners can turn off web search for Cowork and Chat in Organization settings → Capabilities, or Claude in Chrome via Organization settings → Claude in Chrome.

What’s changed recently

2026-04-18 — Cross-referenced with official help-center articles; added sources.
2026-04-18 — Page verified against desktop build 1.3109.0.

Cowork — an overview