What happens when you publish a Claude artifact

The link takes the form claude.ai/public/artifacts followed by a UUID. It is stable: the same artifact keeps the same address, which is what makes the link shareable and also what makes it easy to collect.

Nothing about the URL is guessable. A UUID is not something anyone brute-forces. Exposure comes from the link being shared, not from being found by chance.

Fetching the URL without a browser returns a JavaScript shell rather than your content. The artifact itself is rendered afterwards, in a nested frame served from a separate content domain that Anthropic controls.

That separation is why a plain HTTP request cannot tell a live artifact from a deleted one: both return the same page in the same number of bytes. Only a browser that runs the JavaScript sees the difference, where a removed artifact renders a short Page not found.

Public artifact pages are served with a content security policy of frame-ancestors 'self'. No other website can put your artifact in an iframe, and the embed variant of the URL only widens that to Anthropic's own domains.

So an artifact spreads as a link, not as an embedded widget. Wherever you see one referenced, someone pasted the address.

Switch an artifact back to private and the public link stops resolving at once. Anyone who opens it afterwards gets a not-found page.

What it cannot do is reach copies. Screenshots, pasted text, a cached page in someone's browser, a crawler that read it last week: those are gone from your control the moment the link was public. Unpublishing is worth doing immediately, and it is not the same as never having published.