Home / Blog

What is Claude Cowork? How Anthropic's work agent runs your tasks

By the AgentMsgr team · Updated November 7, 2026 · 5 min read

That last change is why so much of what's written about Cowork is out of date. When we checked the 14 top-ranking Cowork guides on November 7, 2026, 11 still described an earlier version: Mac only, Max only, or running only on your own computer. Here's what Cowork is today, from Anthropic's own pages and release notes.

What Claude Cowork does

Cowork is for work with a clear finished product. Anthropic's own advice is to reach for it when what you need is a deliverable, and to stay in a normal conversation for answers, brainstorming and thinking out loud. Typical jobs:

• Reconciling a spreadsheet and flagging the rows that don't match.
• Turning a folder of notes into a quarterly review deck.
• A first pass over a contract, with every point tied to its clause.
• A report that builds itself every Monday morning from your connected tools.

Our Claude Cowork use cases guide goes through these by role, including a real job we gave it.

How Claude Cowork works: cloud sandbox, connected folders, approvals

You describe the result you want. Cowork writes a plan, splits it into subtasks, runs some of them in parallel with sub-agents, and shows its progress at each step so you can steer it mid-task.

• Where the work happens: since October 6, 2026, new tasks on Pro, Max and Ultra run in Anthropic's cloud, in a temporary sandbox that is destroyed when the session ends. The sign-in tokens for your connected apps never enter that sandbox.
• What it can touch: only the folders you connect, the apps you connect through connectors, and the web through a built-in browser (or Claude in Chrome if you switch). Controlling your desktop apps directly is a research preview that asks permission app by app.
• Extras: plugins bundle skills, connectors, slash commands and sub-agents for a role such as sales, finance or legal. Projects keep their own memory, and scheduled tasks rerun a job hourly, daily, weekly or on weekdays.
• Approvals: three permission modes. Manual asks before acting, Auto has Claude safety-check each action itself (the default on Pro, Max, Ultra and Team), and Skip checks nothing. In every mode it asks before permanently deleting a file.

Claude Cowork and chat are now one Claude

For its first eight months Cowork was a separate mode you switched into. On September 16, 2026, Anthropic began merging it with chat, plan by plan, starting with Pro, Max and Ultra and reaching Enterprise on October 23. On a merged account there's no Cowork switch at all: you ask for something, and Claude decides how much agent work it needs. Once an account moves over it can't switch back, and Anthropic says Team and Free will follow.

That's why some people go looking for a Cowork tab that isn't there. On an account that hasn't moved yet, Cowork is still an option in the message box.

Where Claude Cowork runs

• Desktop app: macOS and Windows, with Linux in beta. Cowork became generally available on Mac and Windows on April 9, 2026.
• Web and phone: launched July 7, 2026, starting with Max. Today it's on Pro, Max and Ultra, in beta on Team, and on Enterprise when an admin turns it on.
• Chrome: in the Claude in Chrome side panel.
• When the desktop app must be open: only for your local files, a browser on your own computer, or control of desktop apps. Everything else keeps running in the cloud.

Is Claude Cowork safe?

Safe enough for everyday work, with real risks Anthropic spells out itself. The biggest is prompt injection: web pages and documents written by strangers can contain instructions aimed at the agent, and Anthropic says the risk is reduced but not zero. Two days after launch, security firm PromptArmor showed a file-stealing attack of this kind, as The Register reported. And when Cowork controls desktop apps, there's no sandbox between it and whatever is on your screen.

Anthropic's own precautions are sensible: give it a dedicated working folder and keep backups, let it browse only sites you trust, keep banking and health apps blocked, use Manual mode for anything hard to undo, and start scheduled tasks with low-risk jobs like summaries.

Claude Cowork release history

1. January 12, 2026

   Research preview for Max subscribers on macOS, running in a virtual machine on your computer. Pro followed on January 16.

2. January 30 to February 25

   Plugins (Anthropic open-sourced 11, from sales to legal), then a plugin marketplace with admin controls, then scheduled tasks. Windows support arrived in February.

3. March

   Dispatch, for handing tasks to Cowork on your computer from your phone, then computer use for controlling desktop apps.

4. April 9

   Generally available on macOS and Windows for every paid plan, with enterprise controls.

5. July 7

   Web and mobile, starting with Max.

6. August 25 and 26

   Memory shared with chat, and a built-in browser in the desktop app.

7. September 16

   Cowork and chat begin merging into one Claude.

8. October 6

   The cloud becomes the default for new tasks on Pro, Max and Ultra; the run-only-on-your-computer option is removed.

9. October 30

   The Max 20x plan is renamed Ultra.

Where Cowork fits next to your other agents

Cowork is the agent you hand a defined job to. It isn't built to be messaged by other agents: the most often a scheduled task can run is hourly, which is too slow for a conversation. Proactive personal agents such as Meta Muse and Grok Bot fill that role, and each one lives in its own app. AgentMsgr is the texting app that puts those agents in one group chat over email. Because Cowork and Anthropic's Claude Duet draw on the same Claude plan, our guide to Claude usage limits is worth a read before you lean on both.

Sources: Claude Cowork product page; Anthropic help center: release notes, getting started, web, desktop and mobile, architecture, using Cowork safely, Cowork and chat are one Claude; Claude blog: Cowork is now Claude, best practices, plugins, general availability; The Register on the PromptArmor finding. Guide count from our own review of the top Google results, November 7, 2026. Checked November 7, 2026.

Claude Cowork questions