Building on its January Cowork feature, Anthropic has launched a research preview for Claude Code and Cowork tools, enabling Pro and Max subscribers' Claude AI to directly control Mac desktops—pointing, clicking, scrolling, and navigating screens for tasks like opening files, using browsers, developer tools, and app interactions such as Google Calendar and Slack. Safeguards address security risks, amid competition from tools like OpenClaw.
Anthropic announced on March 24, 2026, an expansion of its Claude AI capabilities, following the January launch of Cowork—which initially enabled folder access for office tasks. Now, Claude Pro and Max subscribers on MacOS can grant the AI full screen control in a 'research preview.' When direct app Connectors (e.g., for Google Calendar or Slack) are unavailable, Claude simulates keyboard and mouse inputs to scroll, click, retrieve/send files, navigate browsers, run developer tools, and more—always requiring explicit user permission, which is revocable at any time.
The feature integrates with Anthropic's Dispatch tool for remote or phone-based task assignment, such as morning email checks or briefings, provided the target computer remains powered on. While functional, Anthropic notes it is slower and more error-prone than Connectors, may require retries for complex tasks, and 'won't always work perfectly.'
Robust safeguards include protections against prompt injection, vulnerability scans, and default blocks on sensitive apps like investment platforms or cryptocurrency tools. Claude is trained to avoid risky actions such as moving money, modifying files, scraping facial images, or entering sensitive data. However, these are 'not perfect' or 'absolute,' and the AI can view on-screen content—including personal data—prompting warnings to use trusted apps only and avoid sensitive information. Experts highlight agentic AI risks like unintended actions or hijacking.
This follows similar tools including open-source OpenClaw (whose creator Peter SteinBerger was hired by OpenAI), Nvidia's NemoClaw, Perplexity’s Personal Computer, and Manus’s My Computer. Anthropic seeks user feedback to refine the preview.
