Runlayer for Claude Cowork

Monitor supported Claude Cowork sessions through Anthropic-hosted telemetry and connect remote MCP capabilities.

Connect

Give everyone in Claude Cowork the golden path to approved tools

Add one Runlayer Plugin endpoint so people find every tool they’re approved for, or connect a single server when you want a narrower set.

Runlayer Plugin

Add one remote MCP endpoint. Users discover and authorize the approved tools available to them without accumulating separate client configurations.

Direct connection

Give the client a dedicated Runlayer URL for one connector. Identity, policy, scanning, and audit still stay attached to every request.

Connection support

Remote MCP

Observe

Runlayer uses every channel Claude Cowork exposes. Each one is labeled, so you can tell real-time hooks from after-the-fact imports.

Supported

Anthropic Inference hooks let Runlayer check Claude Cowork prompts before inference.

Monitor only

Claude Cowork can send supported OpenTelemetry events to Runlayer for observe-only session visibility.

Enforce

Each row reflects Runlayer’s enforcement code for Claude Cowork: what it can stop before a call runs, block afterward, or redact in place.

Control	Support	What that means
Pre-tool deny	Supported	Runlayer can reject a Claude Cowork prompt before Anthropic runs it, which stops the whole request rather than one tool call.
Post-tool output block	Supported	Because Runlayer checks the full prompt, tool results in it can be blocked before the model sees them.
Output rewrite	Unsupported	Runlayer cannot mask content in Claude Cowork.

Enforcement postureManaged device

Minimum supported versionNo minimum listed

Runlayer checks the whole Claude Cowork prompt before Anthropic runs it, so a block stops that request rather than a single tool call.
Cowork session data sent over OpenTelemetry is for monitoring only and cannot stop anything.

MCP servers

Setup steps, tools, and controls for each MCP server in Claude Cowork.