Claude computer use in production: isolate the desktop, log the clicks
Computer use is an interface of last resort. Sandbox it, constrain the goal, and prefer APIs or MCP when the system of record has one.
Computer use lets Claude operate a GUI: browser, desktop, internal thick clients that have no API. It is powerful and easy to romanticise. In production it is an interface of last resort. If Salesforce has an API, use MCP or tools. Do not click the UI because a demo looked like a human.
When the system of record truly has no API, computer use can still be the right seam. Treat it like RPA with a language model: sandbox, budget, logs, human review.
Production constraints
- Dedicated VM or container, not an engineer's laptop
- Network allow-list
- Step and time ceilings, same as any agent loop
- Screenshots and actions in the trace
- A human on submissions that spend money or change access. See human-in-the-loop.
Evals are screenshots plus outcomes
A golden set for computer use includes the start URL, the goal, and the expected end state. "It usually finds the button" is not a case. Pair with CI gates even if the runner is heavier than a JSON eval.
Prefer tools as soon as they exist
Every month of GUI automation is a month you should be asking for an API. Computer use can unblock a process. It should not become the architecture.
If this is the only way through a legacy screen, we will say so. If it is a shortcut around a perfectly good API, we will say that too. That honesty belongs in week zero of scope.
Related notes
Production systems
Claude Agent SDK Session Recovery: Resume, Fork, Compact, and Checkpoint Safely
Learn when to continue, resume, fork, compact, and checkpoint Claude Agent SDK sessions so long-running agents can recover safely.
Production systems
Why most Claude pilots never reach production
Most Claude pilots stall on integration, evaluation and cost, not prompting. Here is what actually blocks a production launch, and how to unblock it.
Production systems
MCP versus ad-hoc Claude tools: pick the contract, not the acronym
MCP is a protocol. The production question is whether Claude has a narrow, permissioned contract with your systems of record.