Anthropic

Security configuration, governance controls, and risk guidance for Claude Cowork, Claude Code, and Claude Tag.

This section focuses on the Anthropic products that create the clearest workforce and agent security decisions: Claude Cowork, Claude Code, and Claude Tag.

Products covered in this handbook

Claude Cowork

Focus first on RBAC, OTel, prompt injection, browser scope, plugins, MCP, scheduled tasks, and the local VM boundary. Related: OTel and sandboxing.

Claude Code

Focus first on repository scope, shell and filesystem access, MCP allowlists, managed settings, hooks, approvals, and sandbox mode. Related: hooks and sandboxing.

Claude Tag

Focus first on Slack scope, service accounts, Access bundles, retained memory, channel permissions, Agent Proxy credentials, and downstream evidence.

Security considerations specific to Anthropic

Cowork is not a chatbot. Treat it as an agentic work surface that can read and write files, run code, browse with user context, invoke MCP and plugins, and continue unattended work. Approve local, remote, browser, MCP, plugin, and Computer Use paths separately.

OTel is the practical Cowork evidence path today. Cowork activity is not currently covered by Anthropic audit logs, the Compliance API, or data exports. Route OpenTelemetry to a protected collector and SIEM, then test whether the fields needed for investigations arrive with the right redaction.

Claude Code needs code-review-grade governance. Repository instructions, hooks, MCP servers, shell commands, local credentials, and generated changes can all influence outcomes. Keep unmanaged hooks and broad filesystem access out of ordinary use.

Claude Tag is a Slack agent with its own identity and memory model. Scope workspace, channel, repository, service-account, credential, and spend access. Preserve Slack threads, Agent Proxy evidence, downstream system logs, and revocation paths before broad rollout.

Current provider documentation

• Use Claude Cowork on web, desktop, and mobile
• Claude Code overview
• What is Claude Tag?
• Monitor Cowork with OpenTelemetry

Last reviewed: August 18, 2026

Applicable Harmonic guidance

• Securing Claude Cowork: A Security Practitioner's Guide

Related handbook guidance

• AI Security Handbook
• Claude Cowork
• Claude Code
• Claude Tag
• 7.4 The vendor-neutral control matrix