Skip to content
The AI Agent Factory

A worker with its own name

Approved by
Panaversity ·
14 min read

Slack in six lines

The firm talks in Slack, a chat app for teams. If you have not used it, this is all you need.

  • A channel is a room for one topic. Its name starts with #.
  • A private channel is a room that only invited people can enter or see.
  • A message is what someone writes in a channel. Everyone in the channel can read it.
  • A thread is the set of replies under one message. It keeps one conversation together.
  • Writing @ and a name calls that person. Writing @Claude calls the worker.
  • A one-to-one message is a private chat between two people, outside any channel.

A Slack channel in one picture. A box shows a private channel named lakeshore-work with three members and the worker. Inside it, a message from Hamza says at-Claude, please reconcile this week. Under it, joined by a line, is a thread with three replies: Claude says it is on it, Claude posts the file, and Nisha says she will read it now. Labels point to each part: the channel is a room for one topic, a message is seen by everyone in the room, at-Claude calls the worker, and a thread keeps the replies under one message. To the side, a separate small box shows a one-to-one message, a private chat outside any channel.

A worker in the channel

Anthropic's Claude Tag puts Claude into a team's Slack channels. It was in public beta, on Team and Enterprise plans only.1 Nisha, as the Owner of the firm's Claude organization, set it up one evening. She added Claude to a private channel called #lakeshore-work. The channel had three human members: Nisha, Sana and Hamza.

From then on, any of the three could write @Claude in the channel and hand it work. It answered in a thread under the message, where all three could read every step.

Its own accounts

This was the change Nisha had wanted since that Thursday night with Mark's bridge.

In her old project, anything the worker did through a connector appeared as her. In a Slack channel, Claude acts under its own service accounts, not as the person who asked.2 Anthropic's advice was to give it a dedicated account in each tool, not anyone's personal login.

So Nisha created a mailbox for the worker, reports@, at the firm's own address. An email from the worker would now arrive from reports@, not from Nisha. Dana would be able to tell the worker's mail from Nisha's own.

Two things stayed personal.

  • One-to-one messages. If Hamza wrote to Claude in a private one-to-one message, that session would run on Hamza's own account, and its work would appear as Hamza's.3
  • A member's own connectors. In a channel, Claude can also use a connector from a member's own Claude account, but only for that member's own task, after the member allows it. That work is recorded under the member's name, not the worker's.4

So there were two kinds of access in the firm's Slack: the shared access that belonged to the worker and the channel, and each person's own access. The firm agreed to keep client work in the channel, and that nobody would connect a personal email account. That agreement was a rule, not a setting.

Whose name is on the work? Three columns. In the channel, with the channel's shared credentials: everyone in the channel can ask, and the work carries the worker's name, reports. In the channel, with your own connector: only you, for your own task, after you allow it, and the work carries your name. In a one-to-one message: only you, with your own connectors, and the work carries your name. A band says there are two kinds of access: the channel's shared access, and each person's own. A callout says shared access carries the worker's name, and your own access carries yours.

What the channel holds

In Claude Tag, access belongs to a place, not to a person. An admin chooses where each connector applies, from all of Slack down to one channel.5 Nisha applied three things to #lakeshore-work and nowhere else.

WhatWhat it lets the worker doHow it is limited
A key to Lakeshore's bank exportDownload the week's bank linesRead-only. It can fetch. It cannot change anything.
A shared drive folderRead Lakeshore's ledger export, and save each week's fileOne folder only
The reports@ mailboxSend emailIt can send to anyone

Email was not among Claude Tag's ready-made connectors. Nisha added the mailbox as a custom connector to the firm's email service.6

The bank key was the one she had worried about most. She typed it in once. After that, even she could not see it again. The key is kept outside the worker's desk and added to each request on its way out, so the worker itself never holds it.7

The channel map before the incident. One private channel, lakeshore-work, with three people in it: Nisha, Sana and Hamza. The worker, Claude, is in the channel under its own accounts. Three credentials apply to the channel: a read-only key to the bank export, a shared drive folder, and the reports mailbox, which can send. A Wednesday draft routine and a Friday file routine run in the same channel. A band says that access belongs to the channel, so every member can ask for anything the channel holds. A dashed box shows the written rule: send only after Nisha or Sana has approved. A callout says the rule is words and the mailbox is a setting.

Nothing lasts at the desk

Each Slack thread gets its own borrowed desk. When a thread goes quiet, the desk is released, and any file that existed only there is gone.8 Nisha had learned this lesson with her project's Library. Here there was no Library.

So she wrote it into the channel's instructions: post every file in the thread, and save a copy to the shared drive with its date. The thread and the drive were outside the desk. They would still be there on Monday.

Next, Two routines and one rule.

Sources for the product facts in this story are given in full in the exhibits.

Check yourself

Question 1 / 4

0 answered

In the firm's Slack channel, under whose name does Claude act?

  1. As verified on November 10, 2026, Anthropic says "Claude Tag is available on Team and Enterprise plans" and "isn't available on individual plans (Free, Pro, Max, or Ultra)". It was in public beta. Work with Claude Tag, Anthropic.↑
  2. As verified on November 10, 2026, Anthropic says that in channels "Claude acts with its own service accounts, rather than as a specific user." How agent identity works, Claude Tag docs, Anthropic.↑
  3. As verified on November 10, 2026, Anthropic says a one-to-one direct message "runs with your own claude.ai account", with "results attributed to you". How agent identity works, Claude Tag docs, Anthropic.↑
  1. As verified on November 10, 2026, Anthropic says "Claude uses a user's personal connectors in a channel only for that user's own tasks, after the user allows it. The work runs with that user's permissions and is recorded under their name." Security and data handling, Claude Tag docs, Anthropic.↑
  2. As verified on November 10, 2026, Anthropic says "An admin chooses where each connector applies, from every channel down to one". It also says you can narrow a credential "to one host, one path prefix, or read-only methods". Security and data handling, Claude Tag docs, Anthropic.↑
  3. As verified on November 10, 2026, Anthropic's examples of ready-made connectors cover documents, code, data, monitoring, issue tracking and sales tools. No email service is among them. The page says "Any service with an HTTP API can be added" as a custom connector. Whether a given email service works this way is for the practical to confirm. Give Claude access to your tools, Claude Tag docs, Anthropic.↑
  4. As verified on November 10, 2026, Anthropic says "A saved credential is not displayed again. The setup screens are write-only", and that the proxy injects the credential "so the model and the sandbox are not given the key." Security and data handling, Claude Tag docs, Anthropic.↑
  5. As verified on November 10, 2026, Anthropic says "Files that existed only inside the sandbox" do not persist, and "To keep generated files, ask Claude to push them to a branch or post them in the thread." Security and data handling, Claude Tag docs, Anthropic.↑
Owner
Panaversity