# Claude Cowork

This page is for an agent helping a team cover Claude Cowork with Zaun. Cowork can be observed
through telemetry and, on Claude Enterprise, blocked through inference hooks. If you are the
person, check your Claude plan first, because it decides whether Cowork can be blocked at all.

| Plan | Observe | Block |
| --- | --- | --- |
| Claude Enterprise | Telemetry | Inference hooks |
| Claude Team | Telemetry | Not available: inference hooks are Enterprise only, and Zaun's client hooks cover Claude Code, Codex and Cursor, not Cowork |

## Observe with telemetry

An admin turns on Cowork's OpenTelemetry export in claude.ai **Admin settings > Cowork**, on
Team and Enterprise plans, with the Claude desktop app 1.1.4173 or later. Cowork exports logs
and events over OTLP, as `http/json` or `http/protobuf`.

Point the export at Zaun with the endpoint and header the console generates for a Cowork
source:

| Setting | Value |
| --- | --- |
| Endpoint | `https://api.zaun.ai/v1/ingest/otlp` |
| Protocol | `http/protobuf` or `http/json` |
| Header | `x-zaun-ingest-key=<INGEST_KEY>` |

- `<INGEST_KEY>` is an ingest key for your Cowork source. It can only submit events for one
  project, and it cannot scan or read results.
- On Anthropic's own platform, Cowork includes prompts, replies and tool details by default. A
  device can turn content capture off; without content, Hex v1.3 has nothing to assess.
- Telemetry cannot block: events arrive after the fact. Telemetry scans are billed like any
  other scan.

## Block with Claude Enterprise inference hooks

Inference hooks are a beta feature of Claude Enterprise. An Owner or Primary Owner registers
one Zaun webhook in Claude's organization settings, with the signing secret the Zaun console
shows for it. Anthropic then asks Zaun before each prompt, and before each tool call when tool
validation is on, across claude.ai, Cowork, Claude Code and Claude Tag. Zaun answers allow
or deny, and a denial shows its reason to the user.

- Nothing is installed on laptops and no key is placed on devices.
- Inference hooks allow or deny. They cannot redact, and they do not see the final assistant
  reply.
- The Owner sets the timeout, 5 seconds by default, and what happens when Zaun does not answer:
  allow, the default, or block. Shadow mode records decisions without enforcing them, which is
  the safe way to start.
- They are not available on Amazon or Google Cloud deployments of Claude.

## The proof to show

- **Telemetry:** the Cowork source's health report in the console shows events arriving and
  whether prompt content is present.
- **Inference hooks:** type the test string `ZAUN-TEST-VIOLATION-7f3a9c` from
  [Try it](try-it.md) into Cowork or claude.ai. It is denied with Zaun's reason, and the event
  appears on Violations.