Claude Cowork Plugins: Extending Your AI Assistant's Capabilities
By Dorian Laurenceau
Updated
Claude Cowork Plugins: Extending Your AI Assistant's Capabilities
š Last reviewed: April 24, 2026. Updated with April 2026 findings and community feedback.
š Related articles: Skills vs Projects vs Plugins | Skills User Guide | MCP Protocol
What Is a Cowork Plugin?
A Cowork plugin is an extension that connects Claude to external services, APIs, and tools. Plugins allow Claude to:
- āRead data from external sources (Google Drive, Notion, databases)
- āWrite to third-party services (Slack, GitHub, email)
- āTransform data with specialized tools (Mermaid, LaTeX, image analysis)
- āExecute actions in external environments (deployments, CI/CD)
Plugins vs Skills vs MCP
| Aspect | Cowork Plugins | Skills | MCP Servers |
|---|---|---|---|
| Nature | Service connections | Internal procedures | Open tool standard |
| Installation | Integrated catalog | SKILL.md file | Server configuration |
| Interface | Native GUI | CLI / files | JSON-RPC |
| Network access | Yes | No (local) | Yes |
| Target audience | End users | Developers/Power users | Developers |
The plugin story for Cowork lives in an awkward space that the Anthropic plugin documentation doesn't fully address: plugins, skills, and MCP servers solve overlapping problems with different trust models, and the community on r/ClaudeAI is still negotiating which tool belongs where. Plugins are the most polished from a UX standpoint ā catalog, one-click install, sandbox ā which is exactly why power users gravitate toward them and also exactly why they hit the feature ceiling fastest.
What plugins genuinely solve: hooking Cowork into a SaaS you use daily without writing code. Notion, Linear, Slack, Jira, a calendar ā if the plugin exists and it's maintained, install it, use it, don't think twice. What plugins do not solve: durable automations, repository-scoped behavior, or anything that needs to outlive a Cowork session. That is where MCP servers (see modelcontextprotocol.io) and local skills start making more sense.
Where the community correctly pushes back: treat the plugin catalog like a browser extension store ā useful, curated, but not sacred. Some plugins are maintained by Anthropic, some by vendors, some by enthusiastic individuals; the trust level varies. Threads on r/cybersecurity remind readers that every plugin you authorize gets access to the conversation context ā including whatever you pasted five minutes ago. Install with intention, not out of curiosity.
Exploring the Plugin Catalog
The catalog is accessible from the Claude interface via Menu > Plugins or in Claude Cowork via the extensions icon.
Navigation and Search
The catalog organizes plugins by category:
| Category | Description | Plugin Count |
|---|---|---|
| Productivity | Google Drive, Notion, Slack, Trello | 25+ |
| Development | GitHub, GitLab, Code Review, CI/CD | 20+ |
| Visualization | Mermaid, Chart.js, LaTeX, Excalidraw | 15+ |
| Data | SQL, MongoDB, Google Sheets, Airtable | 12+ |
| Communication | Email, Teams, Discord, Webhooks | 10+ |
| Research | Web Search, Academic Papers, News | 8+ |
Available Filters
- āBy category: Productivity, Dev, Data, etc.
- āBy popularity: Installation count
- āBy rating: Community reviews
- āBy compatibility: Claude Pro, Team, Enterprise
- āBy publisher: Anthropic, Verified, Community
Default Installed Plugins
Some plugins come pre-installed with Claude Cowork:
Code Review
The Code Review plugin automatically analyzes shared code:
- āPotential bug detection
- āPerformance suggestions
- āBest practices verification
- āMulti-language support (Python, JS, TypeScript, Java, Go, Rust)
You: [Upload file.py]
Claude (via plugin):
š Code Review Analysis
āāā 2 potential bugs detected (lines 42, 87)
āāā 3 optimization suggestions
āāā Quality score: 7.2/10
Mermaid Diagrams
The Mermaid plugin generates visual diagrams directly in conversation:
- āFlowcharts
- āSequence diagrams
- āClass diagrams
- āGantt charts
- āEntity-Relationship diagrams
Web Search
The Web Search plugin gives Claude access to up-to-date information:
- āReal-time web search
- āPage content extraction
- āFact verification
- āNews monitoring
File Converter
The File Converter plugin transforms files between formats:
- āMarkdown ā PDF, DOCX, HTML
- āCSV ā Excel, JSON
- āImages ā optimized formats
- āCode ā formatted snippets
Top 10 Must-Have Plugins
| Rank | Plugin | Category | Usage | Rating |
|---|---|---|---|---|
| 1 | GitHub Integration | Dev | Read issues, PRs, create branches | ā 4.9 |
| 2 | Google Drive | Productivity | Read/write docs and sheets | ā 4.8 |
| 3 | Mermaid Diagrams | Visualization | Generate technical diagrams | ā 4.8 |
| 4 | SQL Explorer | Data | Query databases in natural language | ā 4.7 |
| 5 | Notion Sync | Productivity | Sync with Notion pages/databases | ā 4.7 |
| 6 | Code Review Pro | Dev | In-depth code review with metrics | ā 4.6 |
| 7 | Slack Messenger | Communication | Send/receive Slack messages | ā 4.6 |
| 8 | Chart Builder | Visualization | Create interactive charts | ā 4.5 |
| 9 | Academic Search | Research | Search scientific publications | ā 4.5 |
| 10 | Jira Connector | Productivity | Manage tickets and sprints | ā 4.4 |
What is the fundamental difference between a Cowork plugin and a Claude Skill?
Creating a Custom Plugin
Plugin Architecture
š my-plugin/
āāā manifest.json ā Metadata and declarations
āāā src/
ā āāā index.ts ā Entry point
ā āāā handlers/ ā Request handlers
ā āāā utils/ ā Utilities
āāā schemas/
ā āāā input.json ā Input schema
ā āāā output.json ā Output schema
āāā tests/
ā āāā plugin.test.ts ā Tests
āāā README.md ā Documentation
The Manifest File
{
"name": "weather-plugin",
"version": "1.0.0",
"description": "Fetches weather forecasts for any city",
"author": "your-name",
"permissions": ["network:read"],
"endpoints": [
{
"name": "get_weather",
"description": "Get the current weather for a city",
"input_schema": {
"type": "object",
"properties": {
"city": { "type": "string", "description": "City name" },
"units": { "type": "string", "enum": ["celsius", "fahrenheit"] }
},
"required": ["city"]
}
}
]
}
Implementing the Handler
// src/handlers/weather.ts
import { PluginHandler, PluginRequest, PluginResponse } from '@anthropic/plugin-sdk';
export const getWeather: PluginHandler = async (req: PluginRequest): Promise<PluginResponse> => {
const { city, units = 'celsius' } = req.input;
const response = await fetch(
`https://api.weather.example/v1/current?city=${encodeURIComponent(city)}&units=${units}`
);
if (!response.ok) {
return { error: `Unable to fetch weather for ${city}` };
}
const data = await response.json();
return {
result: {
city: data.city,
temperature: data.temp,
conditions: data.description,
humidity: data.humidity
}
};
};
Testing Locally
# Install the development SDK
npm install -g @anthropic/plugin-dev
# Launch the test server
plugin-dev serve --manifest ./manifest.json
# Test an endpoint
plugin-dev test get_weather --input '{"city": "Paris"}'
Publishing to the Catalog
# Validate the plugin
plugin-dev validate
# Submit for review
plugin-dev publish --manifest ./manifest.json
The review process typically takes 3 to 5 business days.
Security Model
Granular Permissions
Each plugin declares the permissions it needs:
| Permission | Description | Example |
|---|---|---|
network:read | HTTP read requests | Weather API |
network:write | HTTP write requests | Post to Slack |
files:read | Read shared files | Analyze a CSV |
files:write | Create/modify files | Generate a PDF |
user:profile | Access user profile | Personalize responses |
oauth:* | OAuth authentication | Google Drive |
Verification Process
Plugins go through a security pipeline before publication:
- āStatic analysis: Code checked for known vulnerabilities
- āSandbox testing: Execution in an isolated environment
- āManual review: Anthropic team review for high-permission plugins
- āContinuous monitoring: Abnormal behavior surveillance post-publication
Security Best Practices
| Practice | Description |
|---|---|
| Principle of least privilege | Only request necessary permissions |
| Encryption in transit | All data via HTTPS |
| No secret storage | Use the built-in vault for tokens |
| Audit logs | Trace all plugin actions |
| Rate limiting | Limit API calls to prevent abuse |
Which file is essential for defining a Cowork plugin's metadata and endpoints?
What is the role of the plugin verification process?
Which of these plugins allows generating visual diagrams directly in Claude?
What permission must a plugin declare to post messages on Slack?
Plugin API, Reference
Plugin Lifecycle
Installation ā Authorization ā Activation ā Execution ā Deactivation
ā ā ā ā ā
ā¼ ā¼ ā¼ ā¼ ā¼
Manifest Permissions Trigger Handler Cleanup
parsed granted matched called resources
SDK Events
| Event | Trigger | Usage |
|---|---|---|
onInstall | Plugin installed | Initialization, configuration |
onActivate | Plugin activated in a conversation | Resource loading |
onRequest | Claude calls an endpoint | Request processing |
onError | Error during execution | Error handling, logging |
onDeactivate | Conversation ended | Resource release |
Tips for Plugin Developers
Do's ā
| Tip | Reason |
|---|---|
| Clear endpoint descriptions | Claude chooses plugins based on descriptions |
| Strict input schemas | Reduces call errors |
| Concise responses | Saves tokens in context |
| Thorough testing | Guarantees reliability |
| Full documentation | Facilitates adoption |
Don'ts ā
| Anti-pattern | Risk |
|---|---|
| Overly broad permissions | Rejection during verification |
| Endpoints without descriptions | Claude doesn't know when to use them |
| Overly verbose responses | Exceeds context limits |
| Hardcoded secrets | Sensitive data leaks |
| No error handling | Degraded user experience |
The Bottom Line
Cowork plugins transform Claude from a conversational assistant into a productivity hub connected to your everyday tools. Whether you use existing plugins or build your own, the ecosystem offers flexibility suited to all skill levels.
Next steps:
- āExplore the plugin catalog in your Claude interface
- āBuild your first plugin with the developer SDK
- āCombine plugins and Skills for maximum impact, see our comparison
Module 0 ā Prompting Fundamentals
Build your first effective prompts from scratch with hands-on exercises.
Dorian Laurenceau
Full-Stack Developer & Learning DesignerFull-stack web developer and learning designer. I spent 4 years as a freelance full-stack developer and 4 years teaching React, JavaScript, HTML/CSS and WordPress to adult learners. Today I design learning paths in web development and AI, grounded in learning science. I founded learn-prompting.fr to make AI practical and accessible, and built the Bluff app to gamify political transparency.
One practical AI workflow in your inbox
Methods, resources and new exercises. Free, unsubscribe at any time.
āRelated articles
FAQ
What is a Claude Cowork plugin?+
A Cowork plugin is an extension that connects Claude to external services or adds specific capabilities. Unlike Skills that add internal procedures, plugins interact with third-party APIs and tools.
How do I install a Cowork plugin?+
Open the plugin catalog in the Claude interface, search for the desired plugin, and click 'Install.' Some plugins require OAuth authorization to access your third-party service accounts.
Can I create my own plugins?+
Yes. The Plugin API lets you create custom plugins by defining endpoints, input/output schemas, and permissions. The development SDK provides testing and debugging tools.
Are plugins secure?+
Plugins go through a verification process before publication. They work with granular permissions (read-only, write, etc.) and data is transmitted via encrypted connections.
What's the difference between a plugin and an MCP server?+
A Cowork plugin is a native extension of the Claude interface with an integrated catalog. An MCP server is an open standard for connecting tools to any LLM client. Plugins can use MCP internally.