{"slug": "anthropic-makes-claude-codes-auto-mode-default-for-paid-users", "title": "Anthropic makes Claude Code’s auto mode default for paid users", "summary": "Anthropic is making Claude Code's auto mode the default for paid and enterprise users starting August 14, 2026, allowing the coding agent to execute more actions without manual approval. The company's internal data shows users approve 97% of permission prompts, while an Anthropic-controlled study found auto mode caught 89% of dangerous commands versus 13.6% by human reviewers. Analysts see tradeoffs, including potential latency and reduced human oversight.", "body_md": "Anthropic is making Claude Code’s auto mode the default for its paid and enterprise users, allowing the coding agent to execute more actions without requiring developers to approve each one.\n\n“Starting August 14, 2026, [auto mode](https://www.infoworld.com/article/4150226/claude-code-ai-tool-getting-auto-mode.html) becomes the default permission mode for new sessions on Pro, Max, and Team plans,” the company wrote in the coding agent’s [documentation](https://code.claude.com/docs/en/auto-mode-config), adding that the same change is planned for [Claude Enterprise](https://www.infoworld.com/article/4044166/anthropic-adds-claude-code-to-its-claude-enterprise-plans.html), API, and cloud platform users within the next month.\n\nThat essentially means developers using those plans will no longer have to manually approve every tool call or action [Claude Code](https://www.infoworld.com/article/4116598/anthropic-expands-claude-code-beyond-developer-tasks-with-cowork.html) wants to make while executing a task.\n\nInstead, each tool call is evaluated by an automated classifier designed to determine whether the action is safe to execute. Actions considered irreversible, destructive, or outside the agent’s environment can still be blocked, with Claude Code either attempting a safer approach or asking the developer for approval, the company wrote in a [blog post](https://claude.com/blog/auto-mode-default-in-claude-code).\n\n“If it can’t make progress — three blocks in a row, or twenty across a session — Claude Code falls back to manual approvals,” it explained.\n\nThis reduction in manual intervention, Anthropic further added, is intended to make the coding agent more suitable for long-running tasks as well as cut down on “permission fatigue” that it says has been threatening to reduce its security posture.\n\nAccording to its internal data, Claude Code users typically approve 97% of permission prompts, while only 3% are rejected. It also found that 49.5% of active CLI users had created a Bash allow-rule by June, while 62% had used “bypassPermissions” or selected “don’t ask again” for Bash.\n\nIn contrast, the default auto mode, in an Anthropic-controlled study involving 1,053 paid professional testers, caught 89% of deliberate dangerous commands compared to just 13.6% being detected by human reviewers.\n\nAnalysts too see auto mode as a step toward making coding agents more autonomous, but with tradeoffs.\n\n“Developers should see fewer permission pop-ups and spend less time watching Claude, meaning they can give it larger tasks and let it edit files, run tests, and execute routine commands with fewer interruptions. That way, developers can finish and ship more work using this mode because they aren’t constantly interrupted by approval windows,” said [Pareekh Jain](https://pareekh.com/about/), principal analyst at Pareekh Consulting.\n\nHowever, that same classifier in auto mode that reduces permission pop-ups could also result in more latency for routine or quick tasks, as trusted workflows also pass through it, adding an extra execution step, noted [Manoj Chandra Jha](https://www.linkedin.com/in/manoj-chandra-jha-b5ab0a13/), principal analyst at Nord-IQ Research.\n\nAnother tradeoff of reducing real-time approvals, according to [Amit Kumar Jena](https://www.linkedin.com/in/znamit/), AI development manager at IT consulting firm Kanerika, is that it could make it harder for enterprises to maintain effective human oversight as agents take on longer-running tasks. “Reviewing four hours of unattended agent output is a harder skill, and most teams haven’t built it,” Jena said.\n\nFor CIOs, though, auto mode can strengthen governance in software development.\n\nRather than policing individual developer actions, CIOs can define permission boundaries centrally and have the classifier enforce them across agent sessions, said Jha.\n\nThat makes the current opt-in period for Enterprise and API users particularly important, as CIOs can establish permission policies before auto mode becomes the default, Jha added.\n\nAt the same time, however, CIOs also need to understand the limits of those policies, Jena pointed out.\n\n“Auto mode has three levels of restrictions, with hard-deny rules blocking actions unconditionally, while soft-deny rules can be overridden by a developer’s allow rule. As a result, CIOs should use hard-deny or managed-settings rules for actions that must never be permitted,” he said.\n\nThose centralized policy controls, which Anthropic claims should make Claude Code more secure, according to analysts, change the security risk profile of the coding agent rather than eliminate risk.\n\nWhile the classifier and the policy controls reduce the risk of human failures or everyday risks, it also creates a single point of failure, Jain said.\n\nThat means if that single point has a blind spot or an attack manages to bypass it, the agent could still execute harmful actions without human approval or recognition, Jha echoed.\n\nThat said, Anthropic is not removing developers’ ability to control how Claude Code operates.\n\nUsers who have already set a different default may receive a one-time prompt asking whether they want to move to auto mode, while those who have pinned their existing preference will see no change. The company is also making the transition easier by absorbing the small amount of additional token usage generated by the classifier for Pro, Max, and Team users, with the change effective immediately.", "url": "https://wpnews.pro/news/anthropic-makes-claude-codes-auto-mode-default-for-paid-users", "canonical_source": "https://www.infoworld.com/article/4207959/anthropic-makes-claude-codes-auto-mode-default-for-paid-users.html", "published_at": "2026-08-11 12:32:46+00:00", "updated_at": "2026-08-11 12:38:16.448587+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-products", "ai-agents", "ai-safety"], "entities": ["Anthropic", "Claude Code", "Pareekh Jain", "Pareekh Consulting", "Manoj Chandra Jha", "Nord-IQ Research", "Amit Kumar Jena", "Kanerika"], "alternates": {"html": "https://wpnews.pro/news/anthropic-makes-claude-codes-auto-mode-default-for-paid-users", "markdown": "https://wpnews.pro/news/anthropic-makes-claude-codes-auto-mode-default-for-paid-users.md", "text": "https://wpnews.pro/news/anthropic-makes-claude-codes-auto-mode-default-for-paid-users.txt", "jsonld": "https://wpnews.pro/news/anthropic-makes-claude-codes-auto-mode-default-for-paid-users.jsonld"}}