Claude Cowork
This page is for an agent helping a team cover Claude Cowork with Zaun. Cowork can be observed through telemetry and, on Claude Enterprise, blocked through inference hooks. If you are the person, check your Claude plan first, because it decides whether Cowork can be blocked at all.
| Plan | Observe | Block |
|---|---|---|
| Claude Enterprise | Telemetry | Inference hooks |
| Claude Team | Telemetry | Not available: inference hooks are Enterprise only, and Zaun's client hooks cover Claude Code, Codex and Cursor, not Cowork |
Observe with telemetry#
An admin turns on Cowork's OpenTelemetry export in claude.ai Admin settings > Cowork, on
Team and Enterprise plans, with the Claude desktop app 1.1.4173 or later. Cowork exports logs
and events over OTLP, as http/json or http/protobuf.
Point the export at Zaun with the endpoint and header the console generates for a Cowork source:
| Setting | Value |
|---|---|
| Endpoint | https://api.zaun.ai/v1/ingest/otlp |
| Protocol | http/protobuf or http/json |
| Header | x-zaun-ingest-key=<INGEST_KEY> |
<INGEST_KEY>is an ingest key for your Cowork source. It can only submit events for one project, and it cannot scan or read results.- On Anthropic's own platform, Cowork includes prompts, replies and tool details by default. A device can turn content capture off; without content, Hex v1.3 has nothing to assess.
- Telemetry cannot block: events arrive after the fact. Telemetry scans are billed like any other scan.
Block with Claude Enterprise inference hooks#
Inference hooks are a beta feature of Claude Enterprise. An Owner or Primary Owner registers one Zaun webhook in Claude's organization settings, with the signing secret the Zaun console shows for it. Anthropic then asks Zaun before each prompt, and before each tool call when tool validation is on, across claude.ai, Cowork, Claude Code and Claude Tag. Zaun answers allow or deny, and a denial shows its reason to the user.
- Nothing is installed on laptops and no key is placed on devices.
- Inference hooks allow or deny. They cannot redact, and they do not see the final assistant reply.
- The Owner sets the timeout, 5 seconds by default, and what happens when Zaun does not answer: allow, the default, or block. Shadow mode records decisions without enforcing them, which is the safe way to start.
- They are not available on Amazon or Google Cloud deployments of Claude.
The proof to show#
- Telemetry: the Cowork source's health report in the console shows events arriving and whether prompt content is present.
- Inference hooks: type the test string
ZAUN-TEST-VIOLATION-7f3a9cfrom Try it into Cowork or claude.ai. It is denied with Zaun's reason, and the event appears on Violations.
Maintained with the API contract · Defaults may vary by deployment.