Claude in Chrome

Skills, plugins and connectors work in the side panel as they do in desktop Cowork, so the agent takes authenticated action in connected systems through Claude's connectors as well as driving any site in the browser.

Sourcesupport.claude.com/en/articles/12012173-get-started-with-claude-in-chromeread 2026-09-27

Claude carries out multi step tasks across several tabs at once, and the classic side panel records a workflow the user performs so Claude can repeat it. The extension has no multi agent execution or composed workflow model.

Sourcesupport.claude.com/en/articles/12012173-get-started-with-claude-in-chromeread 2026-09-27

Context is assembled per run from the page in view and from connectors queried during the task. The extension has no maintained retrieval index over the customer's own knowledge.

Sourcesupport.claude.com/en/articles/12012173-get-started-with-claude-in-chromeread 2026-09-27

There are three permission modes. Manual pauses for approval before each action, Auto has a safety classifier review each action and block unsafe ones, and Skip removes the checks. Per site always allow grants and a permission history are reviewable. Claude always asks before granting authorizations, entering sensitive information or downloading files, and never makes purchases, creates accounts or permanently deletes.

Sourcesupport.claude.com/en/articles/12902446-claude-in-chrome-permissions-guideread 2026-09-27

On Team and Enterprise plans admins enable or disable the extension and set website allowlists and blocklists, and on Enterprise they grant or withhold a per role Claude in Chrome permission in custom roles. Anthropic lists SOC 2 Type I and Type II, ISO 27001:2022 and ISO/IEC 42001:2023 for its commercial products (Claude for Work and the API), so the certifications do not cover the individual Free, Pro and Max plans. The reports are available from Anthropic, whose trust center sits at trust.anthropic.com.

Sourcesupport.claude.com/en/articles/13065128-claude-in-chrome-admin-controlsread 2026-09-27

Side panel sessions are saved to Cowork history and sync across devices, and the extension keeps a permission history. There is no audit log, trace export or admin view of Claude in Chrome actions.

Sourcesupport.claude.com/en/articles/12012173-get-started-with-claude-in-chromeread 2026-09-27

The side panel runs as a Claude Cowork session on Max and Team plans (rolling out to Pro), and Claude's memory is shared between chat and Cowork in the cloud. It is stored as topics per user with a separate memory space for each project, retained under the account's chat data retention policy, and each entry can be viewed, edited or deleted in Settings > Memory. On Team and Enterprise an owner turns it on. The Chrome pages themselves do not mention memory, so its reach into the side panel rests on the Cowork and memory documentation, not the extension's own.

Sourcesupport.claude.com/en/articles/11817273-use-claude-s-chat-search-and-memory-to-build-on-previous-contextread 2026-09-27

The extension runs in the user's own Chrome and model inference runs in Anthropic's cloud. Usage based Enterprise plans can switch on US-only inference, which covers all Claude apps but not data storage or connectors. The Chrome pages do not name the setting, and there is no storage region, VPC or self hosted option.

Sourcesupport.claude.com/en/articles/15422948-enable-us-only-inference-for-your-organizationread 2026-09-27

Users save their own prompts as shortcuts and record their own workflows for Claude to repeat, which are assets the customer assembles, and skills and plugins work in the side panel. No Chrome page names a packaged set of prebuilt browser agents or templates.

Sourcesupport.claude.com/en/articles/12012173-get-started-with-claude-in-chromeread 2026-09-27

Recurring browser tasks run automatically on a schedule the user sets, daily, weekly, monthly or annually, in the background with no manual trigger, so work reaches the agent without a person starting it.

Sourcesupport.claude.com/en/articles/12012173-get-started-with-claude-in-chromeread 2026-09-27

Every public Claude model is available in the extension, all from one provider, Anthropic, so the choice is among one vendor's tiers. There is no other provider or bring your own model route.

Sourcesupport.claude.com/en/articles/12012173-get-started-with-claude-in-chromeread 2026-09-27

Claude Desktop can enable Claude in Chrome as a connector so a task started there carries on in the browser. That route runs between Anthropic's own apps, and there is no public API, SDK or MCP endpoint with an auth scheme and tool list for an outside caller to drive the extension.

Sourceclaude.com/claude-for-chromeread 2026-09-27

The user's browser tasks have no evaluation harness, test cases or quality gate. Anthropic's published prompt injection attack success rates are its own safety research, not a surface a user runs.

Sourceclaude.com/blog/claude-in-chrome-generally-availableread 2026-09-27

Claude in Chrome reads, clicks, types, fills forms and navigates websites in the user's own Chrome browser, works across several tabs at once and reads console output and network requests. It has been generally available on every paid Claude plan since 26 August 2026.

Sourcesupport.claude.com/en/articles/12012173-get-started-with-claude-in-chromeread 2026-09-27