News

Anthropic Expands Claude's 'Computer Agent' Tools Beyond Developers with Cowork Research Preview

Anthropic is widening access to the computer-using capabilities behind its Claude Code tool with a new research preview called Cowork, aiming to let non-technical workers delegate file-heavy tasks on their Macs while warning about the risks of giving an AI system the ability to act on local files.

Cowork is "a simpler way for anyone, not just developers, to work with Claude," the company said in a blog post. Anthropic described Cowork as built on "the very same foundations" as Claude Code, its command-line oriented coding agent, but packaged for non-coding work and designed to feel less like a chat session and more like assigning tasks to a colleague.

Unlike a typical chatbot conversation, Cowork requires users to grant Claude access to a specific folder on their computer. Claude can then "read, edit, or create files in that folder," Anthropic said, citing examples such as reorganizing a downloads folder by sorting and renaming files, turning screenshots of receipts into an expense spreadsheet, or producing a first draft of a report from notes.

Anthropic said Cowork is more agent-like than a standard conversation. "Once you've set it a task, Claude will make a plan and steadily complete it, while looping you in on what it's up to," the company wrote. Users can also queue tasks, Anthropic added, so Claude can work through them without requiring constant back-and-forth.

The launch underscores a broader push by AI companies to move beyond conversational interfaces toward systems that can carry out multi-step work across files, apps and the web. Microsoft has spent years promoting Copilot across its productivity software, while other AI labs have introduced tools aimed at browsing the web, writing code, and interacting with software.

Anthropic is betting that a product shaped by developer usage will translate to the broader workplace. In its blog post, the company said it expected Claude Code to be used mainly for programming, but found developers "quickly began using it for almost everything else," prompting the company to build Cowork for non-coding tasks.

Cowork can be extended using Anthropic's "connectors," which link Claude to external information and third-party services, and an initial set of "skills" intended to improve how Claude creates documents, presentations and other files, the company said. If paired with "Claude in Chrome," Cowork can also take on tasks that require browser access, it added.

Anthropic placed unusual emphasis on guardrails and failure modes, reflecting growing scrutiny of agents capable of taking real-world actions.

In Cowork, users choose which folders and connectors Claude can access, and Claude "can't read or edit anything you don't give it explicit access to," the company said.

Anthropic also said Claude will ask before taking "any significant actions," but cautioned that Cowork can take "potentially destructive actions," including deleting local files, if instructed. The company urged users to give clear guidance and to be cautious while learning how the system behaves.

Anthropic also warned about "prompt injections," in which hidden instructions embedded in web pages, images or other content attempt to alter an agent's behavior.

"We've built sophisticated defenses against prompt injections," the company said, but added that agent safety "is still an active area of development in the industry," recommending precautions, especially for new users.

Some users have raised concerns about the risks in practice. User reports posted on GitHub and Reddit claimed Cowork "consumed 11GB of files accidentally during testing" and advised implementing backups before granting directory access, though Reuters could not independently verify the claim.

Anthropic said Cowork is being released as a research preview and that it plans to make "lots of improvements," including adding cross-device sync, bringing Cowork to Windows and identifying further ways to make it safer.

Access is being gated by both platform and subscription. Anthropic said Cowork is available in its macOS app for Claude Max subscribers, with other users able to join a waitlist for future access. Subsequent coverage said Anthropic later expanded availability to its $20-per-month Pro tier, with the company noting that Pro users may reach usage limits sooner than Max subscribers.

The rollout has also drawn attention from software startups whose products focus on narrow workplace tasks such as file organization, data extraction and document generation. By bundling those capabilities into a general-purpose assistant, Cowork could intensify pressure on smaller companies that have raised funding to solve specific workflow problems, even as many argue that specialized user experiences and domain depth remain defensible.

Anthropic, for its part, framed Cowork as an early step toward more practical agency rather than a replacement for human control. "Stay in control," the company wrote, while encouraging users to experiment and learn what the system can do and where it still falls short.

About the Author

John K. Waters is the editor in chief of a number of Converge360.com sites, with a focus on high-end development, AI and future tech. He's been writing about cutting-edge technologies and culture of Silicon Valley for more than two decades, and he's written more than a dozen books. He also co-scripted the documentary film Silicon Valley: A 100 Year Renaissance, which aired on PBS.  He can be reached at [email protected].