Delv
CHAT APPby Anthropic4.6

Claude Desktop

Anthropic's native Claude app for Mac and Windows. The reference MCP host — fullest spec coverage and zero-config for the official MCPs.

A
Safety & Trust

Delv Safety Grade: A

Score 82/100 · assessed 2026-04-19

Maintainer95
Permissions60
Supply chain85
Transparency70
Incidents100

Claude Desktop is Anthropic's official MCP host application, making it the most trusted first-party client in the ecosystem. As the reference implementation, it supports the full MCP specification including tools, resources, prompts, and sampling. The maintainer score is excellent given Anthropic's standing as a major AI vendor. However, the application itself is closed source with no public repository, which limits transparency despite good documentation. The permissions model is concerning: Claude Desktop can execute arbitrary MCP servers configured in its JSON file, and those servers inherit the app's full filesystem and network access. There are no sandboxing controls or permission prompts. Supply chain is solid via official distribution channels (direct download from claude.ai), though the closed-source nature and manual JSON configuration mean users must carefully vet each server they add. No known security incidents to date.

Green flags

  • Official Anthropic product, highest vendor trust
  • Reference MCP implementation, full spec coverage
  • Distributed via official channels with code signing
  • Active maintenance and clear documentation
  • No known security incidents since launch

Red flags

  • Closed source with no public repository or code review
  • MCP servers run with full app permissions, no sandboxing
  • Manual JSON config allows arbitrary command execution
  • No permission prompts or runtime controls for server capabilities

Permissions requested

Read filesWrite filesOutbound networkShell executeRead envAccess secrets
Assessed by Delv Editorial using public metadata. Grades are advisory and update as the ecosystem changes. They do not replace your own review of permissions and code before granting an agent access to sensitive systems.

MCP capabilities

  • Tools
  • Resources
  • Prompts
  • Sampling

Platforms

macOSWindows

Config location

~/Library/Application Support/Claude/claude_desktop_config.json (macOS) · %APPDATA%\Claude\claude_desktop_config.json (Windows)

Review

Claude Desktop is the reference implementation, which means two things: it supports the full MCP spec without compromise, and it sets the bar every other client tries to reach. I've been running it since the MCP beta and it remains the smoothest path from zero to working servers. Configuration lives in a single JSON file. On macOS that's `~/Library/Application Support/Claude/claude_desktop_config.json`, on Windows it's the equivalent AppData path. You list your servers, point to their commands, set environment variables if needed, restart the app. That's it. No plugin marketplace, no GUI wizard, just a config file that does what it says. The official servers (filesystem, GitHub, Postgres) work immediately because Anthropic tests against this client first. The chat interface itself is clean and fast. When a server exposes tools, they appear inline during conversations. Resources show up when relevant. Prompts can be invoked directly. Sampling works for agentic workflows where Claude needs to call itself recursively. Everything the protocol promises, this client delivers. I use it daily for local development. Typical workflow: filesystem server pointed at my project directory, a Postgres server for the dev database, maybe a Brave Search server when I need current information. Claude can read code, query tables, search the web, all without leaving the conversation. The latency is low enough that it feels like native tooling rather than a bolted-on integration. The rough edges are mostly about what it doesn't try to be. There's no IDE integration, so if you live in VS Code or Cursor you'll context-switch constantly. The config file is manual, which I prefer but some will find annoying. No server marketplace or discovery, you find servers on GitHub or Smithery and wire them yourself. The app is a chat interface, not a workbench, so complex multi-step workflows need scripting elsewhere. Stability has been solid. I've hit the occasional server crash when a poorly written MCP implementation misbehaves, but the client itself recovers gracefully. Logs are accessible if you need to debug, though the error messages could be more helpful when a server fails to start. If you want to understand what MCP can actually do, or you're building a server and need a reference client to test against, this is the obvious choice. It's also the best option if you prefer chat-first workflows and don't need deep IDE integration. For everyone else, the decision hinges on whether you want the canonical experience or something more opinionated.
Verdict

The reference client for a reason. If you want full MCP spec support and a no-nonsense chat interface, this is it. IDE-focused developers should look at Cline or Zed instead.

Good at

  • Complete MCP spec coverage: tools, resources, prompts, sampling all work
  • Simple JSON config, no GUI complexity or plugin marketplace friction
  • Official Anthropic servers work immediately, tested against this client first
  • Fast, stable chat interface with low-latency tool calls
  • Clean logs and graceful recovery when servers misbehave

Watch out

  • No IDE integration, constant context-switching if you code in VS Code or similar
  • Manual config file editing, no GUI for server discovery or setup
  • Chat-only interface limits complex multi-step workflows
  • No built-in server marketplace, you find and wire servers yourself
  • Error messages when servers fail to start could be more helpful