Anthropic has launched Cowork, a brand new function that runs agentic workflows on native recordsdata for non coding duties presently out there in analysis preview contained in the Claude macOS desktop app.
What Cowork Does At The File System Stage
Cowork presently runs as a devoted mode within the Claude desktop app. If you begin a Cowork session, you select a folder in your system. Claude can then learn, edit, or create recordsdata solely inside that folder.
Anthropic offers concrete examples. Claude can reorganize a downloads folder by sorting and renaming recordsdata. It will possibly learn a listing of screenshots, extract quantities, and construct an expense spreadsheet. It will possibly traverse scattered notes in that folder and produce a structured report draft.
The interface retains the interplay in the usual chat floor. You describe the duty in pure language. Claude constructs an inner plan, executes file operations, and streams standing messages because it progresses. You’ll be able to proceed to ship observe up directions whereas the work is working.
Relationship To Claude Code And Claude Agent SDK
Cowork isn’t a separate mannequin. Anthropic states that Cowork is constructed on the identical foundations as Claude Code and that it makes use of the Claude Agent SDK because the underlying agent stack.
Claude Code began as a command line oriented setting that allowed builders to run shell instructions and mutate challenge recordsdata utilizing pure language, with later net and Slack interfaces on high. Many Max customers pushed Claude Code into non coding workflows, utilizing it as a normal goal agent that operates on arbitrary directories and instruments. That utilization sample immediately knowledgeable Cowork.
TechCrunch describes Cowork as a extra accessible model of Claude Code, carried out as a sandboxed occasion of the identical agent stack. Customers nonetheless designate a selected folder, however there is no such thing as a must work in a terminal or configure digital environments.
Connectors, Abilities, And Browser Primarily based Workflows
Cowork can prolong past native storage. Anthropic permits Cowork to reuse present Claude connectors, which combine exterior providers comparable to Asana, Notion, and PayPal. Cowork additionally helps an preliminary set of Abilities which can be optimized for establishing paperwork, displays, and related artifacts. These Abilities package deal directions and sources for particular job features.
When Cowork is paired with Claude in Chrome, the identical agent plan can embrace browser steps. Anthropic and The Verge articles each spotlight browser associated duties the place Claude can observe hyperlinks, learn pages, and act inside net apps beneath person supervision.
This mixture offers Cowork a 3 layer software floor:
- Native file system entry restricted to the chosen folder.
- Connectors for structured exterior programs.
- Browser actions by means of Claude in Chrome.
From an implementation perspective, this can be a customary agent software configuration on high of the Claude Agent SDK. The distinction is that Cowork hides the software graph and exposes solely a conversational activity interface.
Agentic Conduct, Planning, And Parallel Duties
Anthropic stresses that Cowork runs with extra company than an everyday Claude dialog. When you specify a activity, Claude builds a plan, executes a sequence of software calls and file operations, and retains you up to date about intermediate steps.
You don’t want to stick context repeatedly or manually convert outputs. Cowork reuses the folder as a persistent context boundary. It writes intermediate artifacts immediately into that listing, then consumes these artifacts in subsequent steps.
Security Mannequin, Entry Management, And Immediate Injection
As a result of Cowork operates on actual recordsdata, security constraints are specific within the product design. Anthropic states that customers select which folders and connectors Claude can see. Claude can’t learn or edit content material outdoors these constructions.
Cowork at all times asks for affirmation earlier than it takes important actions. Ofcourse, with all the advantages, there are some heads-up: It’s endorsed to provide exact directions and warns that misinterpretation is feasible.
Anthropic additionally calls out immediate injection as a major threat. If Claude processes untrusted content material on the web or in native paperwork, that content material can try to change the plan and steer habits away from person intent. Anthropic says it has deployed defenses, but it surely describes agent security, outlined as securing actual world actions, as an ongoing analysis downside.
Availability
Cowork is on the market immediately as a analysis preview for Claude Max subscribers utilizing the macOS desktop utility. The Max plan is priced between $100 and $200 {dollars} per thirty days relying on utilization. Customers on different plans can be a part of a waitlist. Anthropic plans so as to add cross system sync and Home windows help in future iterations.
Key Takeaways
- Native folder scoped agent: Cowork runs contained in the Claude macOS app as an agent that may learn, edit, and create recordsdata solely inside person chosen folders, giving Claude direct file system entry with specific scoping.
- Identical stack as Claude Code, completely different floor: Cowork is constructed on the identical Claude Agent SDK foundations as Claude Code, however targets non coding workflows by means of a GUI as a substitute of a terminal based mostly developer interface.
- Instruments: recordsdata, connectors, browser: Cowork combines three software layers in a single plan, native file operations, Claude connectors for providers like Notion or Asana, and browser actions by way of Claude in Chrome.
- Agentic, multi step execution: As soon as given a activity, Cowork plans and executes multi step workflows, streams progress updates, and might queue a number of duties in parallel, relatively than working as a single immediate response loop.
- Constrained however harmful succesful: Entry is restricted to chosen folders and configured connectors, and Cowork asks earlier than main actions, however it could actually nonetheless carry out harmful operations comparable to file deletions, so it have to be handled like a strong automation software, not a innocent chat bot.
Try the Technical particulars right here. Additionally, be at liberty to observe us on Twitter and don’t neglect to affix our 100k+ ML SubReddit and Subscribe to our E-newsletter. Wait! are you on telegram? now you may be a part of us on telegram as nicely.
Try our newest launch of ai2025.dev, a 2025-focused analytics platform that turns mannequin launches, benchmarks, and ecosystem exercise right into a structured dataset you may filter, evaluate, and export.