Your access follows your request
Anthropic has updated Claude Tag, its assistant for Slack channels, so it can use the personal services connected to the account of the person asking. Previously, it was limited to tools an administrator had attached to the channel. A user can now ask it to compare a private Drive planning document with work recorded in the channel’s GitHub integration, without giving every teammate access to that document.
The personal login does not become a shared channel credential. Claude uses that person’s permissions for the request, and activity through the connector is logged under their account. It is a practical example of AI agents working across tools, with an important boundary around who owns the access.
The answer is a separate disclosure decision
A teammate may be unable to open the original file yet still see the summary Claude posts to Slack. Anthropic offers a review mode that lets the requester approve the response before it appears. Auto mode posts without that step unless Claude decides the content is sensitive enough to require review.
That automatic check is not a promise to catch every detail your organization considers private. If a request involves customer information or an unpublished plan, reviewing the proposed message is safer than relying on the filter. Anthropic says Enterprise administrators will be able to require review. Personal connectors are rolling out to Team now, with Enterprise support to follow.
Unattended work still needs shared connectors
Personal connectors apply to requests a person makes in a channel. Scheduled routines and actions Claude starts on its own continue to use admin-managed shared connectors. Those run under a different identity, so connecting your account does not silently give an unattended workflow your permissions.
Anthropic says Claude will ask the first time a channel request needs one of your connected services, and that you can disconnect it later. Check what the service can read or change before approving it. Our guide to prompt injection explains why outside content deserves particular care once an assistant also has permission to act.
The conversation starts here
Sign in with a supporter account to comment. Sign in
Nobody has commented yet. Want to go first?