Claude Cowork

Claude Cowork is a distinct product from Claude Code and Claude Desktop. Do not fold sessions into CLAUDE_CODE. Ingested sessions appear as sourceTool=CLAUDE_COWORK.

Cowork is not a log-file collector. It POSTs OTLP logs to the manager. Application traces (spans) are a different signal — Cloud traces.

Where it is enabled

• RetrySight Cloud — included in the Cloud profile (TIER_4_CLOUD)
• Enterprise — Integration or Cloud Scale only (not Core/Analytics)

Endpoint

Item	Cloud	Enterprise
URL	https://cloud-staging.retrysight.com/api/v1/otel/v1/logs	http(s)://<manager>/api/v1/otel/v1/logs
Method	POST	POST
Content-Type	application/json (OTLP/HTTP JSON)	same
Auth	X-Agent-Api-Key: rk_live_… or Authorization: Bearer …	Agent API key on the manager

Convenience: POST /api/v1/otel/ingest treats payloads with resourceLogs or events as logs. Metrics (/api/v1/otel/v1/metrics) are accepted but not persisted yet.

Cowork admin configuration

1. In Claude Cowork / Anthropic org monitoring, enable OpenTelemetry export.
2. Set the OTLP HTTP endpoint to the logs URL above (or an OpenTelemetry Collector that forwards there).
3. Send the agent API key as a header on the exporter.
4. Confirm service.name is cowork (or contains cowork).

If Desktop cannot reach the manager directly:

Claude Desktop (Cowork) → OTel Collector → manager /api/v1/otel/v1/logs

Event mapping (summary)

Cowork event	Platform item
First event per session.id	TASK_START
user_prompt	Session/task event (prompt body only if full-prompt storage is on)
api_request	Token usage + model
tool_result / tool_decision	Edit / fail / accept / reject heuristics
api_error	Retry-related event

Correlation keys: session.id, prompt.id, event.sequence.

Privacy

Default: no prompt or assistant response bodies. Cost, retries, and tool timelines do not require content capture. Enable full storage only with explicit compliance review (store-full-prompts).

Related

Claude Desktop · Cloud dashboard · Enterprise Integration