> For the complete documentation index, see [llms.txt](https://handbook.harmonic.security/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://handbook.harmonic.security/by-ai-vendor/anthropic.md).

# Anthropic

Security configuration, governance controls, and risk guidance for Claude Cowork, Claude Code, and Claude Tag.

{% hint style="info" %}
This section focuses on the Anthropic products that create the clearest workforce and agent security decisions: Claude Cowork, Claude Code, and Claude Tag.
{% endhint %}

## Products covered in this handbook

<table data-view="cards"><thead><tr><th></th><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><h3><i class="fa-briefcase" style="color:$primary;">:briefcase:</i></h3></td><td><strong>Claude Cowork</strong></td><td>Focus first on RBAC, OTel, prompt injection, browser scope, plugins, MCP, scheduled tasks, and the local VM boundary. Related: OTel and sandboxing.</td><td><a href="/by-ai-vendor/anthropic/claude-cowork.md">Claude Cowork</a></td></tr><tr><td><h3><i class="fa-code" style="color:$primary;">:code:</i></h3></td><td><strong>Claude Code</strong></td><td>Focus first on repository scope, shell and filesystem access, MCP allowlists, managed settings, hooks, approvals, and sandbox mode. Related: hooks and sandboxing.</td><td><a href="/by-ai-vendor/anthropic/claude-code.md">Claude Code</a></td></tr><tr><td><h3><i class="fa-hashtag" style="color:$primary;">:hashtag:</i></h3></td><td><strong>Claude Tag</strong></td><td>Focus first on Slack scope, service accounts, Access bundles, retained memory, channel permissions, Agent Proxy credentials, and downstream evidence.</td><td><a href="/by-ai-vendor/anthropic/claude-tag.md">Claude Tag</a></td></tr></tbody></table>

## Security considerations specific to Anthropic

**Cowork is not a chatbot.** Treat it as an agentic work surface that can read and write files, run code, browse with user context, invoke MCP and plugins, and continue unattended work. Approve local, remote, browser, MCP, plugin, and Computer Use paths separately.

**OTel is the practical Cowork evidence path today.** Cowork activity is not currently covered by Anthropic audit logs, the Compliance API, or data exports. Route OpenTelemetry to a protected collector and SIEM, then test whether the fields needed for investigations arrive with the right redaction.

**Claude Code needs code-review-grade governance.** Repository instructions, hooks, MCP servers, shell commands, local credentials, and generated changes can all influence outcomes. Keep unmanaged hooks and broad filesystem access out of ordinary use.

**Claude Tag is a Slack agent with its own identity and memory model.** Scope workspace, channel, repository, service-account, credential, and spend access. Preserve Slack threads, Agent Proxy evidence, downstream system logs, and revocation paths before broad rollout.

## Current provider documentation

* [Use Claude Cowork on web, desktop, and mobile](https://support.claude.com/en/articles/15520349-use-claude-cowork-on-web-desktop-and-mobile)
* [Claude Code overview](https://code.claude.com/docs/en/overview)
* [What is Claude Tag?](https://support.claude.com/en/articles/15594475-what-is-claude-tag)
* [Monitor Cowork with OpenTelemetry](https://support.claude.com/en/articles/14477985-monitor-claude-cowork-activity-with-opentelemetry)

*Last reviewed: August 18, 2026*

## Applicable Harmonic guidance

* [Securing Claude Cowork: A Security Practitioner's Guide](https://www.harmonic.security/resources/securing-claude-cowork-a-security-practitioners-guide)

## Related handbook guidance

* [AI Security Handbook](/ai-security-handbook.md)
* [Claude Cowork](/by-ai-vendor/anthropic/claude-cowork.md)
* [Claude Code](/by-ai-vendor/anthropic/claude-code.md)
* [Claude Tag](/by-ai-vendor/anthropic/claude-tag.md)
* [7.4 The vendor-neutral control matrix](/handbook/7.-rollout-and-operations/7.4-the-vendor-neutral-control-matrix.md)


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://handbook.harmonic.security/by-ai-vendor/anthropic.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.