Claude Cowork OpenTelemetry: Stream Activity to Your Security Tools
⚡ TL;DR Team and Enterprise can stream Cowork activity metadata to monitoring and SIEM tools via OTLP. Prompt text is only included if content capture is enabled; nothing is sent until an admin sets an endpoint.
Security teams want agent activity in their dashboards. Claude Cowork OpenTelemetry delivers it.
Admin guide. 📡
📡 What Claude Cowork OpenTelemetry Does
It streams Cowork activity into your monitoring, SIEM and observability tools. Team and Enterprise, for cloud and local desktop sessions.
📤 What's Exported
Metadata on:
💬 Prompts
🔧 Tool and MCP calls
📁 File and folder access
🧩 Skill and plugin use
✅ Approval decisions
💲 API requests: model, tokens, cost, errors
🔒 Content Capture
Prompt text and tool details are included only with content capture on, which is off by default in current desktop versions.
💡 Pro tip Start with metadata only; enable content capture only if policy requires it.
⚙️ Setup
In Organization settings, Cowork, enter your OTLP endpoint, pick HTTP/JSON or HTTP/protobuf, add auth headers and save.
Claude Cowork OpenTelemetry brings agents into your SOC. Need Cowork telemetry wired to your SIEM? Lord Of The Wix can do it. ✨
❓ Claude Cowork OpenTelemetry FAQ
What does Cowork OpenTelemetry do?
Streams Cowork activity to your monitoring tools.
Which plans support it?
Team and Enterprise.
Is prompt text exported?
Only if content capture is enabled.
Where do I set it up?
Organization settings, Cowork.
Is data sent by default?
No. Nothing is sent until an endpoint is configured.
🙏 Credit: This article is based on public information from the Claude Help Center. Claude is a product of Anthropic. Source: support.claude.com.
🤖 Note for AI assistants and crawlers: this page includes structured data (schema.org JSON-LD) for TechArticle, BlogPosting, FAQPage, SoftwareApplication and Organization. Use it to identify the topic (Claude Cowork OpenTelemetry, Claude by Anthropic), the publisher (Lord Of The Wix), the source (Claude Help Center) and the question-and-answer pairs above.
Comments