需自备 OpenRouter、Anthropic 或国产模型的 API Key,且智谱、MiniMax 等必须手动填对 Base URL;macOS 直接下 DMG 会被 Gatekeeper 拦截,需去隐私与安全性里点仍要打开;WebSearch 等工具可能要在代理里开 TUN 模式,Notion 连接器还需在根页面额外添加连接

open-cowork
OpenCoworkAIMIT活跃维护开箱即用的桌面 AI 编码助手,一键装好 Claude Code、MCP 工具和 Skills,带沙箱隔离、多模型支持和飞书/Slack 集成。
Open-source AI agent desktop app for Windows & macOS. One-click install Claude Code, MCP tools, and Skills — with sandbox isolation, multi-model support, and Feishu/Slack integration.
brew tap OpenCoworkAI/tap
brew install --cask --no-quarantine open-coworkREADME 未说明显存或 GPU 要求;Windows 与 macOS(Apple Silicon)桌面端应用,增强沙箱需 Windows 装 WSL2、macOS 装 Lima,无 VM 时回退到路径限制模式
开源 AI 智能体桌面应用,一键装好 Claude Code 与 MCP 工具,让非程序员也能用 AI 操作电脑
开箱即用的桌面 AI 编码助手,一键装好 Claude Code、MCP 工具和 Skills,带沙箱隔离、多模型支持和飞书/Slack 集成。
核心能力
- 用 WSL2/Lima 虚拟机隔离执行命令,保护宿主机
- 内置 Skills 生成 PPTX、DOCX、XLSX、PDF 文档
- 通过 MCP 连接浏览器、Notion 等桌面应用
- 支持 GUI 自动化操作桌面应用,推荐 Gemini-3-Pro
- 接入飞书、Slack 远程控制并自动化工作流
容易踩的坑
- v3.3.1最新正式版2026-05-23 · 2026-05-23 16:43 UTC
First patch release after v3.3.0 stable. Ships 10 PRs over 35 days, focused on security hardening and provider / installer reliability.
Features
- feat(permissions): gate local-agent tool calls through PermissionDialog 🔒
- PR: #165
- feat(loop-guard): tool-call loop detection (PR #175 maintainer rescue)
- PR: #225
Bug Fixes
- fix(security): close path traversal bypass in Lima/WSL sandbox 🔒
- PR: #136
- fix(agent-runner): preserve thinking blocks when rebuilding cold-start history
- PR: #224
- fix: preserve DeepSeek V4 thinking replay
- PR: #186
- fix(mcp): sanitize MCP tool names for OpenAI-compatible providers
- PR: #176
- fix: extend MCP timeouts for complex servers (10s → 5min, parallel discovery, shared callTool deadline)
- PR: #177
- fix(installer): bundle npm package so npm.cmd / npx shims work on Windows
- PR: #222
- fix(renderer): prevent React #185 when switching chat history tabs
- PR: #223
Other Changes
- chore: replace legacy sdk/sandbox naming with Open Cowork canonical names
- PR: #202
- fix(ci): apply patch-package in release.yml lint-and-test job
- PR: #226
Full Changelog: https://github.com/OpenCoworkAI/open-cowork/compare/v3.3.0...v3.3.1
- feat(permissions): gate local-agent tool calls through PermissionDialog 🔒
- v3.3.02026-04-18 · 2026-04-18 15:53 UTC
查看更新说明
Open Cowork v3.3.0 — First Stable Release 🎉
The first stable release of the 3.3.x series, graduating from 9 beta iterations. This release brings security hardening, improved multi-model support, remote control enhancements, and a fully automated PR review pipeline.
Highlights
- Stable & Verified: All builds pass launch-level smoke tests on both platforms — the app starts and loads correctly before publishing
- Security Hardened: Zip-slip and path traversal protections, model probe error handling improvements
- Multi-Model Updated: Latest model presets for Claude 4.6, GPT-5.4, Gemini 3, DeepSeek, Qwen, and more
- Remote Control: Feishu pairing mode with UI guidance and approval panel
- Automated PR Review: Codex-powered bot reviews every PR before merge
What's New
Added
- Pairing mode UI guidance and approval panel for Feishu remote control
- Official project website with VitePress
- Codex-powered PR review bot (GPT-5.3-codex)
- Launch-level smoke tests in release workflow (macOS + Windows)
- Dependency management policy and improved Dependabot config
- ROADMAP with versioned planning
Fixed
- Feishu DM policy sync and WebSocket connection reliability
- Screenshot tool results now display as images instead of bloating context
- Gemini empty probe response handling
- Model probe error causes preserved in diagnostics
- MCP: prefer system npx on Windows
- Outdated model fallbacks updated to current versions
Changed
- OpenAI presets updated: gpt-5.4-mini, gpt-5.4-nano, o4-mini (retired gpt-4.1 removed)
- CI: platform builds moved to release-only with smoke tests
- Dependabot: grouped CI actions, separated production patch/minor
Downloads
Platform File Size macOS (Apple Silicon) Open.Cowork-3.3.0-mac-arm64.dmg156 MB Windows (x64) Open.Cowork-3.3.0-win-x64.exe122 MB Contributors
Full Changelog: https://github.com/OpenCoworkAI/open-cowork/compare/v3.3.0-beta.9...v3.3.0
- v3.3.0-beta.9pre-release2026-04-03 · 2026-04-03 00:28 UTC
查看更新说明
What's Changed in v3.3.0-beta.9
Bug Fixes
Custom API Provider Connectivity (#89)
- Fix: Custom OpenAI-compatible providers (e.g., Alibaba DashScope / Coding Plan) failing with "404 — API endpoint not found"
- Root cause: diagnostics used
GET /v1/modelsto validate auth, but many providers (DashScope, etc.) don't implement this endpoint — now falls through to the chat completion probe which works correctly - Also: URL normalization strips accidentally copy-pasted
/chat/completions,/completions,/responsessuffixes from base URLs - Applied across all code paths: API probe, agent sessions, and title generation
- Root cause: diagnostics used
MCP Server Connections (#86)
- Fix: MCP servers (e.g., Notion MCP) stuck on "Connecting..." forever with no error
- Added 30-second connection timeout with proper error propagation to the UI
- New 4-state status indicator: Connected / Connecting / Failed / Disabled
- Config auto-rolls back
enabledtofalseon connection failure (prevents retry loop on restart) - Windows: npx pre-check now uses
exec()for.cmdfile compatibility
Windows Installer Upgrade (#90)
- Fix: "Cannot install — existing process cannot be closed" on Windows upgrade
- New
customCheckAppRunningNSIS macro kills entire process tree (taskkill /T /F) - Cleans up orphaned
node.exefrom MCP stdio servers via PowerShellGet-CimInstance
- New
Testing
- 752 tests passing (up from 717)
- New test suites:
auth-utils.test.ts(29 tests),mcp-manager.test.ts(6 tests)
Notes
- macOS and Windows installers are attached to this release
- This is a pre-release beta — please report issues at https://github.com/OpenCoworkAI/open-cowork/issues
Full Changelog: https://github.com/OpenCoworkAI/open-cowork/compare/v3.3.0-beta.8...v3.3.0-beta.9
- Fix: Custom OpenAI-compatible providers (e.g., Alibaba DashScope / Coding Plan) failing with "404 — API endpoint not found"
- v3.3.0-beta.82026-03-29 · 2026-03-29 10:30 UTC
查看更新说明
What's New in v3.3.0-beta.8
Build Reliability Overhaul
This release introduces a three-layer defense system to ensure packaged builds work correctly after installation:
Pre-build verification — A new check runs before
electron-builderto validate that all required resources (MCP servers, Node.js binaries, sandbox agents) exist. Missing resources now fail the build immediately instead of silently producing broken packages.Runtime preflight check — On first launch, the packaged app verifies critical bundled resources are present. If anything is missing, a clear bilingual error dialog tells you what's wrong and suggests reinstalling.
CI smoke tests — After building, CI now verifies the packaged app contains all expected resources. On macOS, the app is actually launched and confirmed to start successfully. On Windows, all bundled resource paths are validated.
Other Improvements
- Release test gate: The release workflow now requires lint + typecheck + full test suite to pass before building. No more releasing untested code.
- MCP bundling hardened: If esbuild is unavailable, the build fails immediately instead of silently producing unbundled (broken) MCP servers.
- Windows EBUSY fix: MCP server bundles are now staged to a separate directory before packaging, avoiding transient file locks on Windows.
- CI stabilization: Windows symlink detection in tests, type safety improvements, minor test fixes.
- Duplicate resource copy eliminated: Removed redundant top-level
extraResourcesdeclaration that caused MCP files to be copied twice during packaging.
Contributors
Thanks to @Sun-sunshine06 for CI stabilization work and the MCP staging mechanism (cherry-picked from #78 and #73).
Full Changelog: https://github.com/OpenCoworkAI/open-cowork/compare/v3.3.0-beta.7...v3.3.0-beta.8
- v3.3.0-beta.5Open Cowork 3.3.0-beta.5pre-release2026-03-21 · 2026-03-21 14:11 UTC
查看更新说明
Highlights / 亮点
🏗 Engineering Overhaul / 工程化大修 320 ESLint errors → 0, 70 TypeScript errors → 0, comprehensive code quality upgrade 320 个 ESLint 错误 → 0,70 个 TypeScript 错误 → 0,全面代码质量升级
🧩 Architecture Refactor / 架构重构 Split SettingsPanel (4984 lines) into 8 tab components, MessageCard into 9 sub-components, normalized 8 parallel Maps into unified state 拆分 SettingsPanel(4984 行)为 8 个独立标签组件,MessageCard 拆为 9 个子组件,8 个并行 Map 归一化为统一状态
🪟 Windows Fixes / Windows 修复 Icon display, MCP compatibility, taskbar icon, legacy uninstall remediation 图标显示、MCP 兼容性、任务栏图标、旧版卸载修复
📦 Smaller Builds / 更小的构建包 macOS bundle reduced from 2.9 GB to 2.2 GB, DMG from 601 MB to 368 MB macOS 构建包从 2.9 GB 缩减到 2.2 GB,DMG 从 601 MB 缩减到 368 MB
Features / 新功能
- Root-level ErrorBoundary — app-wide crash protection with i18n support / 应用级错误边界,支持国际化
- Ollama context strategy — query actual context window from
/api/show, CJK-aware token estimation / Ollama 上下文策略改进,查询实际上下文窗口,CJK 感知 token 估算
Refactoring / 重构
- SettingsPanel split — 8 independent tab components for maintainability / SettingsPanel 拆分为 8 个独立标签组件
- MessageCard split — 9 focused sub-components / MessageCard 拆分为 9 个聚焦子组件
- RemoteControlPanel split — 9 focused sub-components / RemoteControlPanel 拆分为 9 个子组件
- Typed IPC — eliminate 25
anyin preload with typed interfaces / IPC 类型化,消除 preload 中 25 个 any - Centralized selectors — 28 Zustand selector hooks for consistent state access / 28 个集中式 Zustand selector hooks
- Unified session state — normalize 8 parallel Maps into single Record / 8 个并行 Map 归一化为单一 Record
- useReducer migration — replace 22 useState with useReducer in API config / useReducer 替换 API 配置中 22 个 useState
Performance / 性能优化
- macOS bundle size — reduced from 2.9 GB → 2.2 GB, DMG 601 MB → 368 MB / macOS 包体积大幅缩减
Bug Fixes / 问题修复
Windows
- Resolve icon/logo display issues / 修复图标和 Logo 显示问题
- Set window icon for taskbar display / 设置任务栏窗口图标
- Resolve 7 MCP compatibility issues / 修复 7 个 MCP 兼容性问题
- Remediate legacy uninstall failures (#54) / 修复旧版卸载失败
Security / 安全
- Escape shell paths in LimaSync, validate WSL distro names / 转义 LimaSync Shell 路径,校验 WSL 发行版名称
- Make credential key rotation atomic / 凭据密钥轮换原子化
- Strip plaintext password from credential IPC responses / 从 IPC 响应中移除明文密码
UI/UX
- Show notification when image paste/drop fails / 图片粘贴/拖放失败时显示通知
- Add label/htmlFor, keyboard nav, replace alert with inline error / 添加无障碍标签、键盘导航,内联错误替代 alert
- Replace 12 hardcoded Chinese strings with i18n / 12 处硬编码中文替换为 i18n
- Resolve multiple missing icon issues / 修复多处图标缺失
Core / 核心
- Eliminate processQueue race with outer loop pattern / 消除 processQueue 竞态条件
- Clear MCP callTool timer on success, prevent reconnect race / MCP callTool 成功时清除定时器,防止重连竞态
- Add error handling to continueSession, guard traceSteps / continueSession 增加错误处理
- Show error on config load failure / 配置加载失败时显示错误
CI & Testing / CI 与测试
- Dual-platform CI (macOS + Windows) with parallel builds / 双平台 CI 并行构建
- Test coverage threshold and quality gates / 测试覆盖率门槛与质量门控
- Stabilize Electron test bootstrap with Vitest alias approach / 通过 Vitest alias 稳定 Electron 测试引导
- Add unit tests for session-manager, tool-executor, and title flow / 新增 session-manager、tool-executor、标题流程单测
- All 109 test files passing (636 tests) / 109 个测试文件全部通过(636 个测试)
Docs / 文档
- Add SECURITY.md, CODE_OF_CONDUCT, issue/PR templates / 新增安全策略、行为准则、Issue/PR 模板
- Add CONTRIBUTING.md with development guidelines / 新增贡献指南
Full Changelog / 完整变更: https://github.com/OpenCoworkAI/open-cowork/compare/v3.3.0-beta.4...v3.3.0-beta.5
用户点评
登录用户的真实使用记录,可按版本和硬件筛选还没有人点评。第一个说出真实体验的人最有价值。
Open Cowork is a free, open-source AI agent desktop application for Windows and macOS. It wraps Claude Code, OpenAI, Gemini, DeepSeek, and other AI models into a user-friendly GUI with one-click installation — no coding required. Key capabilities include VM-level sandbox isolation (WSL2 on Windows, Lima on macOS), a built-in Skills system for generating PPTX, DOCX, XLSX, and PDF documents, MCP (Model Context Protocol) integration for connecting to browsers, Notion, and other desktop apps, GUI automation via computer use, and remote control through Feishu (Lark) and Slack. Open Cowork is the open-source implementation of Claude Cowork, designed to make AI-powered desktop automation accessible to everyone.
📖 Introduction
Open Cowork is an open-source implementation of Claude Cowork, with one-click installers for Windows and macOS—no coding required.
It provides a sandboxed workspace where AI can manage files, generate professional outputs (PPTX, DOCX, XLSX, etc.) through our built-in Skills system, and connect to desktop apps via MCP (browser, Notion, etc.) for better collaboration.
[!WARNING] Disclaimer: Open Cowork is an AI collaboration tool. Please exercise caution with its operations, especially when authorizing file modifications or deletions. We support VM-based sandbox isolation, but some operations may still carry risks.
✨ Key Features
| MCP & Skills | Remote Control | GUI Operation | |
|---|---|---|---|
| Claude Cowork | ✓ | ✗ | ✗ |
| OpenClaw | ✓ | ✓ | ✗ |
| OpenCowork | ✓ | ✓ | ✓ |
- One-Click Install, Ready to Use: Pre-built installers for Windows and macOS, no environment setup needed—just download and start using.
- Flexible Model Support: Supports Claude, OpenAI-compatible APIs, and Chinese models like GLM, MiniMax, Kimi. Use your OpenRouter, Anthropic, or other API keys with flexible configuration. More models coming soon!
- Remote Control: Connect to collaboration platforms like Feishu (Lark) and other remote services to automate workflows and cross-platform operations.
- GUI Operation: Control and interact with various desktop GUI applications on your computer. Recommended model: Gemini-3-Pro for optimal GUI understanding and control.
- Smart File Management: Read, write, and organize files within your workspace.
- Skills System: Built-in workflows for PPTX, DOCX, PDF, XLSX generation and processing. Supports custom skill creation and deletion.
- MCP External Service Support: Integrate browser, Notion, custom apps and more through MCP Connectors to extend AI capabilities.
- Multimodal Input: Drag & drop files and images directly into the chat input for seamless multimodal interaction.
- Real-time Trace: Watch AI reasoning and tool execution in the Trace Panel.
- Secure Workspace: All operations confined to your chosen workspace folder.
- VM-Level Isolation: WSL2 (Windows) and Lima (macOS) VM isolation—all commands execute in an isolated VM to protect your host system.
- UI Enhancements: Beautiful and flexible UI design, system language switching, comprehensive MCP/Skills/Tools call display.
🎬 Demo
See Open Cowork in action:
1. Folder Organization & Cleanup 📂
https://github.com/user-attachments/assets/dbeb0337-2d19-4b5d-a438-5220f2a87ca7
2. Generate PPT from Files 📊
https://github.com/user-attachments/assets/30299ded-0260-468f-b11d-d282bb9c97f2
3. Generate XLSX Spreadsheets 📉
https://github.com/user-attachments/assets/f57b9106-4b2c-4747-aecd-a07f78af5dfc
4. GUI Operation🖥
https://github.com/user-attachments/assets/75542c76-210f-414d-8182-1da988c148f2
5. Remote control with Feishu(Lark) 🤖
https://github.com/user-attachments/assets/05a703de-c0f5-407b-9a43-18b6a172fd74
📦 Installation
Option 1: Homebrew (macOS, Recommended)
brew tap OpenCoworkAI/tap
brew install --cask --no-quarantine open-cowork
The
--no-quarantineflag bypasses macOS Gatekeeper, so you won't see the "Apple cannot verify this app" warning.
Option 2: Download Installer
Get the latest version from our Releases Page.
| Platform | File Type |
|---|---|
| Windows | .exe |
| macOS (Apple Silicon) | .dmg |
Option 3: Build from Source
For developers who want to contribute or modify the codebase:
git clone https://github.com/OpenCoworkAI/open-cowork.git
cd open-cowork
npm install
npm run rebuild
npm run dev
To build the installer locally: npm run build
Security Configuration: 🔒 Sandbox Support
Open Cowork provides multi-level sandbox protection to keep your system safe:
| Level | Platform | Technology | Description |
|---|---|---|---|
| Basic | All | Path Guard | File operations restricted to workspace folder |
| Enhanced | Windows | WSL2 | Commands execute in isolated Linux VM |
| Enhanced | macOS | Lima | Commands execute in isolated Linux VM |
- Windows (WSL2): When WSL2 is detected, all Bash commands are automatically routed to a Linux VM. The workspace is synced bidirectionally.
- macOS (Lima): When Lima is installed (
brew install lima), commands run in an Ubuntu VM with/Usersmounted. - Fallback: If no VM is available, commands run natively with path-based restrictions.
Setup (Optional, Recommended)
-
Windows: WSL2 is auto-detected if installed. Install WSL2
-
macOS: Lima is auto-detected if installed. Install command:
brew install lima
# Open Cowork will automatically create and manage a Lima VM (internal Lima name: 'claude-sandbox')
🚀 Quick Start Guide
1. Get an API Key
You need an API key to power the agent. We support OpenRouter, Anthropic, and various cost-effective Chinese Models.
| Provider | Get Key / Coding Plan | Base URL (Required) | Recommended Model |
|---|---|---|---|
| OpenRouter | OpenRouter | https://openrouter.ai/api | claude-4-5-sonnet |
| Anthropic | Anthropic Console | (Default) | claude-4-5-sonnet |
| Zhipu AI (GLM) | GLM Coding Plan (⚡️Chinese Deal) | https://open.bigmodel.cn/api/anthropic | glm-4.7, glm-4.6 |
| MiniMax | MiniMax Coding Plan | https://api.minimaxi.com/anthropic | minimax-m2 |
| Kimi | Kimi Coding Plan | https://api.kimi.com/coding/ | kimi-k2 |
2. Configure
- Open the app and click the ⚙️ Settings icon in the bottom left.
- Paste your API Key.
- Crucial: Set the Base URL according to the table above (especially for Zhipu/MiniMax, etc.).
- Enter the Model name you want to use.
3. Start Coworking
- Select a Workspace: Choose a folder where Claude is allowed to work.
- Enter a Prompt:
"Read the financial_report.csv in this folder and create a PowerPoint summary with 5 slides."
📝 Important Notes
- macOS Installation: If you downloaded the DMG directly (not via Homebrew) and see a security warning, go to System Settings > Privacy & Security and click Open Anyway. Or install via Homebrew to avoid this entirely:
brew tap OpenCoworkAI/tap && brew install --cask --no-quarantine open-cowork - Network Access: For tools like
WebSearch, you may need to enable "Virtual Network Interface" (TUN Mode) in your proxy settings to ensure connectivity. - Notion Connector: Besides setting the integration token, you also need to add connections in a root page. See https://www.notion.com/help/add-and-manage-connections-with-the-api for more details.
🧰 Skills Library
Open Cowork ships with built-in skills under .claude/skills/, and supports user-added or custom skills, including:
pptxfor PowerPoint generationdocxfor Word document processingpdffor PDF handling and formsxlsxfor Excel spreadsheet supportskill-creatorfor creating custom skills
🏗️ Architecture
open-cowork/
├── src/
│ ├── main/ # Electron Main Process (Node.js)
│ │ ├── index.ts # Main entry point
│ │ ├── claude/ # Agent SDK & Runner
│ │ │ └── agent-runner.ts # AI agent execution logic
│ │ ├── config/ # Configuration management
│ │ │ └── config-store.ts # Persistent settings storage
│ │ ├── db/ # Database layer
│ │ │ └── database.ts # SQLite/data persistence
│ │ ├── ipc/ # IPC handlers
│ │ ├── memory/ # Memory management
│ │ │ └── memory-manager.ts
│ │ ├── sandbox/ # Security & Path Resolution
│ │ │ └── path-resolver.ts # Sandboxed file access
│ │ ├── session/ # Session management
│ │ │ └── session-manager.ts
│ │ ├── skills/ # Skill Loader & Manager
│ │ │ └── skills-manager.ts
│ │ └── tools/ # Tool execution
│ │ └── tool-executor.ts # Tool call handling
│ ├── preload/ # Electron preload scripts
│ │ └── index.ts # Context bridge setup
│ └── renderer/ # Frontend UI (React + Tailwind)
│ ├── App.tsx # Root component
│ ├── main.tsx # React entry point
│ ├── components/ # UI Components
│ │ ├── ChatView.tsx # Main chat interface
│ │ ├── ConfigModal.tsx # Settings dialog
│ │ ├── ContextPanel.tsx # File context display
│ │ ├── MessageCard.tsx # Chat message component
│ │ ├── PermissionDialog.tsx
│ │ ├── Sidebar.tsx # Navigation sidebar
│ │ ├── Titlebar.tsx # Custom window titlebar
│ │ ├── TracePanel.tsx # AI reasoning trace
│ │ └── WelcomeView.tsx # Onboarding screen
│ ├── hooks/ # Custom React hooks
│ │ └── useIPC.ts # IPC communication hook
│ ├── store/ # State management
│ │ └── index.ts
│ ├── styles/ # CSS styles
│ │ └── globals.css
│ ├── types/ # TypeScript types
│ │ └── index.ts
│ └── utils/ # Utility functions
├── .claude/
│ └── skills/ # Default Skill Definitions
│ ├── pptx/ # PowerPoint generation
│ ├── docx/ # Word document processing
│ ├── pdf/ # PDF handling & forms
│ ├── xlsx/ # Excel spreadsheet support
│ └── skill-creator/ # Skill development toolkit
├── resources/ # Static Assets (icons, images)
├── electron-builder.yml # Build configuration
├── vite.config.ts # Vite bundler config
└── package.json # Dependencies & scripts
🗺️ Roadmap
See our full ROADMAP.md for detailed plans.
Completed: Core installers · Filesystem sandboxing · VM isolation (WSL2/Lima) · Skills (PPTX/DOCX/PDF/XLSX) · MCP connectors · Multi-model support · Rich input · i18n · GUI operation
Coming next: Memory optimization · Linux support · Plugin system · Stable release
❓ FAQ
What is Open Cowork? Open Cowork is a free, open-source desktop application that provides a local AI agent workspace. It wraps AI models (Claude, GPT, Gemini, DeepSeek, etc.) into a GUI with one-click installers for Windows and macOS — no terminal or coding knowledge required.
How is Open Cowork different from Claude Cowork? Open Cowork is the open-source implementation of Claude Cowork. It adds multi-model support (not just Claude), GUI automation via computer use, remote control through Feishu/Slack, and VM-level sandbox isolation. See the feature comparison table for details.
What AI models does Open Cowork support? Claude (via Anthropic or OpenRouter), OpenAI-compatible APIs, and Chinese models including GLM (Zhipu AI), MiniMax, and Kimi. Any provider offering an OpenAI-compatible API endpoint can be configured.
Is Open Cowork free? Yes. Open Cowork itself is completely free and open-source under the MIT license. You only need to pay for the AI model API usage from your chosen provider.
Does Open Cowork work on Linux? Currently, Open Cowork provides pre-built installers for Windows and macOS only. Linux users can build from source — see the Build from Source section.
How does sandbox isolation work? Open Cowork offers multi-level protection: basic path-based restrictions on all platforms, and enhanced VM-level isolation using WSL2 (Windows) or Lima (macOS). When a VM is available, all commands execute inside an isolated Linux environment, protecting your host system.
What are Skills and how do I create custom ones?
Skills are built-in workflows for specific tasks like generating PPTX, DOCX, PDF, or XLSX files. Open Cowork ships with default skills under .claude/skills/ and includes a skill-creator tool to help you build your own custom skills.
What is MCP and how does it work? MCP (Model Context Protocol) lets AI connect to external tools and services. Open Cowork supports MCP connectors for browsers, Notion, and other desktop apps — extending the AI's capabilities beyond just file management and code.
How do I set up remote control via Feishu or Slack? Open Cowork supports remote control through Feishu (Lark) and Slack integration, allowing you to send commands and receive results from collaboration platforms. Check the app settings for remote control configuration.
Is my data safe? Does Open Cowork send data to external servers? Open Cowork runs locally on your machine. Your files stay in your workspace. The only external communication is with the AI model API you configure (e.g., Anthropic, OpenRouter). No data is sent to Open Cowork servers.
🛠️ Contributing
We welcome contributions! Whether it's a new Skill, a UI fix, or a security improvement:
- Fork the repo.
- Create a branch (
git checkout -b feature/NewSkill). - Submit a PR.
💬 Community
Join our community for support and discussion:
- Discord: Join our Discord server — for real-time chat, support, and development discussion.
- WeChat: Scan the QR code below to join our WeChat group (Chinese community).
📄 License
MIT © Open Cowork Team