Claude Cowork: Desktop Agent Architecture

Claude Cowork is Anthropic’s desktop agent — software that automates knowledge work by acting directly on your local files and applications. It debuted on macOS and is now also available on Windows. Where the web chat interface answers questions, Cowork plans and executes multi-step workflows on the machine itself.

Core capabilities

The Windows release holds feature parity with macOS:

• Local file access — read, write, and manage files directly on the host.
• Multi-step execution — plan and carry out tasks that require a sequence of actions, e.g. “analyze these spreadsheets and draft a summary report.”
• Global instructions — set global and folder-specific context rules that persist across sessions.

Cowork also hosts the Model Context Protocol (MCP), so it can pull context from external services (GitHub, Google Drive, Slack) through connectors, and it supports agentic plugins for domains like sales, legal, finance, and data analysis.

Security architecture

Giving an agent access to local files is the central risk, and the sandboxing model is the answer to it:

• VM sandboxing — the agent runs inside a virtual machine and cannot see or touch any folder that hasn’t been explicitly allow-listed.
• Folder restrictions — on Windows it’s confined to the user’s personal folder by default, keeping it out of system directories and root-level repositories (e.g. C:\git) unless you configure otherwise.
• Prompt-injection defense — safeguards against hidden text in a document hijacking the agent’s instructions.

The practical takeaway: scope access deliberately. The agent’s reach is exactly the set of folders you allow-list and no more.

Ecosystem context

Cowork has reportedly seen internal adoption at Microsoft — its CoreAI and Business Copilot teams using Claude Code and Cowork for engineering work — and Anthropic’s Claude Opus 4.6 has been made available through Microsoft Foundry as a premium option for complex, long-context tasks. This is notable given Microsoft’s separate investment in OpenAI, and it signals that desktop agents able to orchestrate work across applications now compete with standalone automation and analysis tools.

Availability

• Access: available to paid subscribers (Pro, Team, Enterprise).
• Entry price: the Pro tier starts at $20/month.
• Maturity: offered as a Research Preview — expect capabilities and limits to shift.

Source: “Anthropic’s Claude Cowork finally lands on Windows.” Product details (pricing, availability, and partnership specifics) change frequently — verify against Anthropic’s current documentation.