Claude Desktop companion

Claude does not run plugins in ordinary Claude Desktop chats. The AgentID companion protects them from the computer itself. Current versions: Windows 0.5.4, macOS 0.2.1.

How it works

When you press Return or the Send button in Claude's prompt box, the companion holds the prompt.
It sends the prompt to AgentID Guard. A line Checking by AgentID... appears above Claude's message box.
A masked prompt is submitted with placeholders; a blocked prompt is not sent and the line shows the policy reason. Problems (AgentID unreachable, timeout, revoked installation, rate limit, outage) are shown in the same line with the exact cause.
Claude's answer is logged to the activity log, including long multi-step tasks (followed for up to 20 minutes; a continued reply is logged as a further step).
When the answer contains masked values, an AgentID window shows it with the original values, on this device only.

Cowork and Claude Code are protected by the AgentID plugin. Install both for full coverage of the Claude app.

Install on a computer

Copy the install command

On the system's Integration tab, under 2 · Install on each computer, select Windows and click Copy install command.

Run it in PowerShell

Open PowerShell (Start → type PowerShell), paste the command and press Enter.

Restart Claude Desktop

Restart Claude Desktop. The companion starts automatically with Windows from now on.

If you downloaded the Claude Desktop chat companion (Windows) ZIP in the registration wizard instead, unpack it and run Install-AgentID.cmd with the setup code from the Integration tab.

Copy the install command

On the system's Integration tab, under 2 · Install on each computer, select macOS and click Copy install command.

Run it in Terminal

Open Terminal, paste the command and press Enter. It installs AgentID Claude in ~/Applications and starts it for your user.

Allow Accessibility

In the window that opens, turn on AgentID Claude under Accessibility. Protection starts right away.

The command activates the computer with a setup code that is passed through the environment, never on the command line. The device credential is stored in Windows DPAPI for the current user or in the macOS Keychain.

To remove the companion, click copy remove command under the install command and run it the same way.

Deploy to the whole organization

On the Integration tab choose Whole organization. One activation is valid for a year and can be revoked; every device and user still gets its own credential.

Platform	Package	How to deploy
Windows	Windows package	Intune Win32 app, ConfigMgr or GPO with install behaviour User. The install and uninstall commands are in `DEPLOY.txt`; use `Detect-AgentIDClaudeDesktop.ps1` as the detection rule.
macOS	macOS script	Run with Jamf, Kandji or Intune as root. It installs for the user signed in at the console, who allows Accessibility once.

Attachments

Platform	Protected
Windows	Files added with Claude's Add files or photos: AgentID attaches a masked copy. Files dragged into the window are not protected.
macOS	No attachment protection yet.

Failure behaviour

The companion follows the system's Guardrails setting. Claude systems start fail-open: if AgentID is unreachable, prompts continue. With Strict Security (Fail-Closed), the prompt is not sent.

Limits

The companion reads Claude Desktop's accessibility interface. A Claude Desktop update can stop prompt or answer detection until the companion is updated; with fail-closed the prompt is then not sent.
On Windows, Smart App Control or an App Control policy can restrict PowerShell. The installer then explains that a signed build is required; removal still works.
On Windows the companion also masks ordinary Cowork prompts before submitting them, so the plugin's own prompt check sees placeholders only.