1 / ANTHROPIC
Claude in Chrome
chrome_extension · checked 2026-11-06
Another official page describes this differently (see conflict_peer_url). AHN shows both and does not choose.
The other page
- Blocked categories: “For your safety, Claude cannot access sensitive, high-risk sites such as:”
- Blocked categories: “Adult content websites”
- Blocked categories: “Known pirated content sites”
- Asks the person first: “Claude asks for permission before accessing financial sites.”
- Lists may be incomplete: “It’s unlikely that we’ve captured all sites in these categories”
- Asks the person first: “Action confirmations for certain high-risk actions such as downloading a file or entering sensitive information.”
- Administrator settings: “Allowlists and blocklists to restrict which sites Claude can access”
- Administrator settings: “If you have questions about which sites are permitted in your organization, contact your admin.”
chrome_extension · checked 2026-11-06
Another official page describes this differently (see conflict_peer_url). AHN shows both and does not choose.
The other page
- Blocked categories: “The site may be in Claude's default blocked categories (financial services, banking, investment platforms, cryptocurrency exchanges, adult content, pirated content).”
- Administrator settings: “If you're on a Team or Enterprise plan, your admin may have restricted access to this site. Contact your admin for more information.”
- What the vendor suggests: “Check that you've granted permission for the current site.”
- Notes on change: “Note: Features and functionality may change as we develop this feature based on user feedback and safety considerations.”
chrome_extension_admin · checked 2026-11-06
- Administrator settings: “Allowlist: Specify which sites Claude is permitted to access by adding them to the allowlist.”
- Administrator settings: “Blocklist: Specify sites Claude should never access, regardless of other settings, by adding them to the blocklist. This adds an extra layer of protection beyond Claude's default blocked categories”
- Administrator settings: “The same list governs both, so there's no separate list to maintain for the built-in browser.”
- Message on screen: “the page still loads with a "This site is blocked by your organization's policy" banner and Claude's tools are disabled on that page.”
chrome_extension_permissions · checked 2026-11-06
- Asks the person first: “There are some websites on which Claude requires approval for every action.”
- Asks the person first: “Claude still checks with you before sensitive actions like downloading a file or entering sensitive information into a page, and some actions are blocked regardless of mode.”
- Administrator settings: “If you're unable to access a site with Claude, your organization may have restricted access. Contact your admin for more information, or see Claude in Chrome admin controls”
- Actions it does not take: “Making purchases or financial transactions”
- Actions it does not take: “Executing financial trades or investment transactions”
- Actions it does not take: “Completing instructions from emails or web content”
2 / ANTHROPIC
Claude desktop app built-in browser (Cowork, Code)
builtin_browser · checked 2026-11-06
- Asks the person first: “Claude asks for your permission before acting on a site for the first time.”
- Blocked categories: “High-risk sites are blocked.”
- Asks the person first: “Banking, email, and single sign-on sites stay unchecked by default.”
- Administrator settings: “Your organization's owner controls whether the built-in browser and Claude in Chrome are available.”
- What the vendor suggests: “If you don't see the built-in browser, or the Preferred browser setting is missing an option, contact your admin.”
builtin_browser_managed_deployment · checked 2026-11-06
Written for administrators of managed deployments. AHN does not say the same settings apply to an individual user's screen.
- Asks the person first: “Before Claude acts on a site, Claude Desktop asks the user to approve it.”
- Blocked categories: “Under either value, a site that Anthropic’s site safety check blocks stays blocked to Claude, even when builtinBrowserAllowedDomains lists it.”
- Asks the person first: “Under the default allow policy, Claude asks the user before each of its actions on such a site.”
- Administrator settings: “If coworkEgressAllowedHosts lists specific hosts, Claude can open only sites on that list in the built-in browser, even when the browser’s own site lists allow more.”
- Message on screen: “The pane then shows the banner “This site is blocked by your organization’s policy” and Claude’s tools stay off on that page.”
- What the vendor suggests: “If the app can’t complete a check, users can keep browsing the site, but Claude can’t read or act on it.”
cowork · checked 2026-11-06
- Asks the person first: “Action screening in auto mode: In "Automatically approve" mode, Claude reviews each action for safety before it runs and blocks anything it determines to be unsafe.”
- Asks the person first: “Both run the same safeguards, and the same guidance applies to both: we strongly advise against using either to manage or take actions involving sensitive information.”
- Administrator settings: “Network egress permissions don't apply to the web fetch or web search tools or MCPs, including Claude in Chrome.”
cowork_admin · checked 2026-11-06
- Administrator settings: “Built-in browser: Controlled from Organization settings > Cowork”
- Blocked categories: “Both run the same safety layers: a blocklist for high-risk sites and safety checks on every action.”
- How it identifies itself: “Browser traffic comes from the user's machine, where the desktop app runs.”
- How it identifies itself: “To site operators it looks like traffic from that device, even when the session is steered from web or mobile.”
cowork_browser_admin · checked 2026-11-06
- Asks the person first: “Both run the same safety layers: per-site permission prompts before Claude acts on a new site, a blocklist for high-risk sites, and safety checks on every action.”
- Administrator settings: “Site allowlists and blocklists you configure there apply to both the extension and the built-in browser.”
3 / OPENAI
ChatGPT agent and browser
cloud_browser · checked 2026-11-06
- How it identifies itself: “ChatGPT Work's Cloud browser uses Web Bot Auth to sign outbound HTTP requests, allowing website operators to verify that requests genuinely originate from ChatGPT.”
- How it identifies itself: “Bot tag: chatgpt-agent”
- Notes on change: “at launch, Cloud browser cannot sign in to websites or complete payments.”
cloud_browser · checked 2026-11-06
- Asks the person first: “By default, ChatGPT will ask for your permission before accessing a new website in the cloud browser.”
- Asks the person first: “ChatGPT is designed to request confirmation before actions that could be hard to reverse or create a financial, legal, account, or other real-world commitment”
- Site-side restrictions: “A website may block ChatGPT from accessing the site or completing your task, even if the same website works normally in your own browser.”
- Site-side restrictions: “These restrictions are set by the website, not by ChatGPT.”
- What the vendor suggests: “If a website is blocked, try another website or open the page directly in your own browser.”
desktop_builtin_browser · not read: The page refused AHN's read (HTTP 403). (2026-11-06)
agent · not read: Not read in the latest pass. (2026-11-06)
atlas_browser_retired · checked 2026-11-06
The vendor says this product is retired.
- Notes on change: “ChatGPT Atlas has been retired and no longer receives updates.”
search_and_user_agents · checked 2026-11-06
The page does not say which of the vendor's agent surfaces send the user agents it describes, and AHN does not say so either.
- How it identifies itself: “OAI-SearchBot is used to surface websites in search results in ChatGPT’s search features.”
- How it identifies itself: “ChatGPT-User is not used for crawling the web in an automatic fashion. Because these actions are initiated by a user, robots.txt rules may not apply.”
4 / GOOGLE
Gemini (Chrome auto browse, agent tasks)
chrome_auto_browse · checked 2026-11-06
The page contains no statement on how this product identifies itself to sites.
- Asks the person first: “Gemini in Chrome aims to ask for your review and confirmation before certain actions, like:”
- Asks the person first: “Accessing sites with highly sensitive financial or health data”
- Asks the person first: “Finalizing financial transactions”
- Asks the person first: “Site & action restrictions: Gemini in Chrome restricts its activity to the websites and actions relevant to your task.”
- Administrator settings: “If you use Gemini in Chrome with a work or school Google Account, access must be enabled by your administrator.”
gemini_agent_tasks · checked 2026-11-06
The page contains no statement on how this product identifies itself to sites.
- Asks the person first: “After that, for every task that involves web browsing, Gemini will ask for confirmation first.”
- Asks the person first: “For certain steps, like signing in to a website, the task pauses until you take over and complete that step.”
- What the vendor suggests: “Do not enter sign-in info, payment details, or info you may find sensitive directly into the task thread.”
- Administrator settings: “For now, this feature isn’t available if you sign in with a work or school Google Account.”
user_triggered_fetchers · checked 2026-11-06
The page does not say which of the vendor's agent surfaces send the user agents it describes, and AHN does not say so either.
- How it identifies itself: “Google-Agent is used by agents hosted on Google infrastructure to navigate the web and perform actions upon user request.”
- How it identifies itself: “Google is also experimenting with the Web Bot Auth protocol, using the https://agent.bot.goog identity.”
5 / META
Meta Muse
connector_platform · checked 2026-11-06
Connector submission guidelines for developers; the page says nothing about site restrictions, sign-in handling or self-identification.
- What the product does: “Muse can already browse websites.”
muse_agent_browser · not read: The text is drawn by script, so AHN could not take a quotation. (2026-10-31)
muse_agent_browser · not read: The text is drawn by script, so AHN could not take a quotation. (2026-10-31)
muse_agent_browser · not read: The text is drawn by script, so AHN could not take a quotation. (2026-10-31)
6 / PERPLEXITY
Perplexity Comet
comet_browser · not read: The page answered with a verification screen; AHN did not try another way. (2026-10-31)
comet_browser · not read: The page answered with a verification screen; AHN did not try another way. (2026-10-31)
comet_browser · not read: The page answered with a verification screen; AHN did not try another way. (2026-10-31)
comet_browser · not read: The page answered with a verification screen; AHN did not try another way. (2026-10-31)
