[BUG] Computer use permission card renders with only "Deny" — no Allow option (macOS desktop, Cowork)
Preflight Checklist
- [x] I have searched existing issues and this hasn't been reported yet
- [x] This is a single bug report (please file separate reports for different bugs)
- [x] I am using the latest version of Claude Code
What's Wrong?
The computer-use permission card ("Claude quiere usar Calendar" / "Claude wants to use Calendar") renders without any approve control. The only button present is "Denegar" (Deny).
As a result, every computer_request_access call resolves immediately as rejected and no application permission can ever be granted. The user is never given an option to accept.
The card renders as:
- Title: "Claude quiere usar Calendar"
- App row: Calendar icon + "Calendar", with a "Todo" (All) badge right-aligned
- Body text: "Claude trabajará en estas aplicaciones en segundo plano mientras sigues usando tu Mac."
- Controls: a single "Denegar" (⌘.) button. No Allow / Permitir button of any kind.
The "Todo" badge is not actionable — clicking it highlights it visually but grants nothing and opens no menu.
Reproduced 4/4 attempts across roughly 30 minutes, before and after each troubleshooting step below.
This is isolated to the approval card's rendering, not to device connectivity. In the same session computer_resolve_access returns valid desktop-verified identities, and the built-in browser opens and reads pages normally.
What Should Happen?
The permission card should offer an approve control alongside "Deny", as documented: "Claude asks for your permission before accessing each application. You'll see a prompt and must approve before Claude can interact with that app."
(https://support.claude.com/en/articles/14128542-let-claude-use-your-computer-in-cowork)
Clicking approve should add the app to the session allowlist so computer_app_* tools can act on it.
Error Messages/Logs
computer_resolve_access(["Calendar"]) — resolves correctly:
{"apps":[{"bundleId":"com.apple.iCal","displayName":"Calendar","tier":"full","isSentinel":false}],
"alreadyGranted":[],
"preferredModeDefault":"background",
"screenshotFiltering":"native"}
computer_request_access(...) — returns, every time, with no user-facing accept option:
User rejected mcp__remote-devices__computer_request_access
computer_list_granted_applications() — confirms nothing is granted:
{"allowedApps":[],"grantFlags":{"clipboardRead":false,"clipboardWrite":false,"systemKeyCombos":false}}
Steps to Reproduce
- On macOS, open the Claude desktop app (Cowork) with a session linked to the local machine.
- Confirm Settings -> Desktop app -> General -> Computer use (Beta) is fully enabled (see table below).
- In a chat, ask Claude to access a local macOS app — in my case Apple Calendar (
com.apple.iCal). - Claude calls
computer_resolve_access(["Calendar"]), which resolves correctly. - Claude calls
computer_request_access(...)with those entries verbatim. - The approval card appears in the chat — with only a "Denegar" button and no approve control.
- There is no way to grant the permission. The call returns as rejected.
Settings verified before and after (all correct, nothing disabled):
| Setting | State |
|---|---|
| Enable computer use | On |
| Show apps when Claude finishes | On |
| How Claude uses allowed apps | Background |
| Denied apps | Empty |
| Accessibility (macOS) | Granted |
| Screen Recording (macOS) | Granted |
Claude Model
Opus
Is this a regression?
Yes, this worked in a previous version
Last Working Version
Same desktop app build, working earlier the same morning (2026-09-09, before ~12:00 CEST)
Claude Code Version
N/A - not the CLI. Claude desktop app (Cowork) for macOS, updated to the latest available version on 2026-09-09; bug present both before and after that update.
Platform
Anthropic API
Operating System
macOS
Terminal/Shell
Terminal.app (macOS)
Additional Information
Regression context
This worked normally for months. On the morning of 2026-09-09 I granted app permissions without any issue in several other chats, in the same app and the same account. It then broke mid-morning with no configuration change on my side - the approve button simply disappeared from the card.
Troubleshooting already performed (none of it fixed the issue)
- Full quit (Cmd+Q) and relaunch - multiple times.
- Updated the desktop app to the latest available version.
- Full macOS TCC reset: System Settings -> Privacy & Security -> Accessibility, removed the Claude entry with "-" and re-added it with "+"; same for Screen Recording & System Audio; relaunched the app afterwards.
- Re-verified every computer-use setting in the app (all enabled, denied-apps list empty).
- Re-attempted the permission request after each of the above.
Behaviour was identical in every case: card renders with "Denegar" only.
Notes for triage
- The device bridge is healthy in the same session:
computer_resolve_accessreturns valid desktop-verified identities, and the built-in browser opens and reads pages normally. The failure is isolated to the approval card's rendering. - The app is not in the denied-apps list.
- I could not find any existing public issue with this exact symptom.
- UI language is Spanish; the card reads "Denegar" where "Permitir" should also appear.
Impact
Total block on macOS app access from Cowork - it affects any app, not just Calendar, since the failure is in the permission card itself. Recurring scheduled tasks that depend on this access are broken, and a full morning of work was lost with no user-side remedy available.
Screenshots
(attaching: the permission card showing only "Denegar", captured at 12:25 and 12:37 CEST; and the Computer use settings panel showing all toggles enabled with Accessibility and Screen Recording granted)
5 Comments
same here using version "1.49585.0" on windows 11
same here, German UI, macOS, Pro/Max
Additional data point (macOS, German UI, Pro/Max, 1.49585.0): the Allow button is missing only in newly created chats and projects started today. In older chats that existed before the regression, the approval card still renders "Allow for this session" and granting works. This is the opposite of what #93000 reports on Windows (old session broken, new session works), so the state seems to be tied to how the session was initialised rather than to session age. Accessibility and Screen Recording granted, app and macOS restarted, no change.
Confirming this on Windows, so it isn't macOS-specific or a localization issue.
Environment: Claude Desktop for Windows 1.49585.0, Electron 44.2.0, Node 24.20.0, win32 x64. Cowork cloud session linked to the local machine. Observed 2026-09-09.
Same symptom: the computer-use approval card renders its header, device name, app rows with tier badges, the "Your other windows will be hidden, then restored when Claude is done" notice, and a single Deny button with its
Ctrl .hint. No approve control is painted anywhere, and the card is not clipped — there is whitespace to the right of and below Deny.computer_resolve_accessreturns valid entries;computer_request_accesscomes backUser rejectedevery time;computer_list_granted_applicationsstays empty.New detail — the control mounts but does not paint. The approve control is present in the focus order. Tabbing through the card places a visible focus ring on blank space where nothing is drawn. Pressing Space on that ring does nothing; pressing Enter does nothing. So the element exists in the tree, takes focus, renders zero pixels, and does not activate. That points at a render/layout failure rather than logic correctly hiding an unavailable action.
Corroborating: in a request that included Cursor, that row's app icon also failed to render — a blank gray placeholder square where the icon belongs. Two separate visual elements failing to paint within the same card.
Ruled out on my side:
| Hypothesis | Test | Result |
|---|---|---|
| Restricted/sentinel app is the trigger | Requested Notepad alone (
tier: full,isSentinel: false) instead of Cursor (tier: click,isSentinel: true) | Still Deny-only || Malformed
willHide— mine contained duplicate bundleIds (ScreenSketch ×3, PowerShell ×2, WindowsTerminal ×2) | Minimal request:apps+reasononly, omittingwillHideandscreenshotFiltering| Still Deny-only || Duplicate entries generally | Retested when
willHidereturned only 2 clean entries | Still Deny-only || Computer use not enabled | Enabled it via the no-
appsprompt — that prompt's affirmative control rendered and worked | Still Deny-only || Account or organization policy | Folder-access consent prompts approved successfully, twice, same session | Not policy |
| Stale renderer / pending update | Version constant at 1.49585.0 across a bridge reconnect; no pending update | Not an update |
| Transient runtime state | Full OS reboot | Still Deny-only |
Working correctly in the same app and session: the "turn on computer use" prompt (no-
appsvariant) and the folder-access consent prompt both rendered working affirmative controls — folder access was approved twice and granted. Two of three consent surfaces in the same build and session are fine. Only the computer-use app-grant card is affected.Possible server-side origin. The original report notes the button disappeared mid-session on an unchanged build, having worked earlier the same morning. My Windows occurrence is the same calendar day. Two platforms, two builds, one day, and a reinstall/reboot fixing neither — that reads server-side rather than client-side.
Impact: computer use is completely unusable. No workaround found via mouse, keyboard, restart, or full reboot.
Same bug on Windows — worth noting, since this and #93135 are both labelled macOS and the troubleshooting so far has focused on TCC / Accessibility / Screen Recording. None of that applies here, so the cause isn't macOS-specific.
Reproduced on two Windows 11 machines, on two different app versions:
Roughly 3,000 builds apart, failing identically. Combined with #93135 being on 1.49585.0 on macOS, that's the same failure across two platforms and multiple client versions — which argues for a server-side change rather than a client regression.
Plan: Max, personal account, not under a business/Team org. (#93060 is on Anthropic API, #93135 on Max 20 — so it isn't entitlement-shaped either.)
One diagnostic I haven't seen in either thread: pressing Tab with the card focused moves focus out of the dialog entirely. So the Allow control isn't an unpainted or mis-styled button — it's absent from the focus order.
EnterandCtrl+Enterdo nothing. (Deny advertises aCtrl .shortcut; its counterpart has none.)A second permission dialog in the same session works fine:
device_request_folder_accessprompted normally and grantedC:\Users\<user>\DocumentsandC:\Users\<user>\Downloadswithout issue, minutes after a Notepadcomputer_request_accessrendered Deny-only. So it isn't the permission layer broadly — it's specifically the computer-use approval card.Also matching #93060:
computer_resolve_accessreturns correct identities and live running-process data, and the Claude in Chrome connector connects, navigates and reads pages normally. Bridge is healthy.Tested with Notepad (
isSentinel: false, tierfull) to rule out any system-level-app special casing — fails the same as Settings did.Also ruled out on this account: fresh Cowork conversations, full logout and re-login, and no apps in the denied list.
This was working a few days earlier on the same account.
Suggest broadening the platform label — it isn't macOS-only.