Anthropic will make Claude Code’s Auto Mode the default for Pro, Max and Team users

Anthropic will make Auto Mode the default permission setting for new Claude Code sessions on Pro, Max and Team plans starting August 14, moving routine approval decisions from developers to a classifier that evaluates Claude's tool calls. In a controlled study of 1,053 paid professional testers, Auto Mode blocked 937 of 1,053 dangerous commands (89%), compared with 143 caught by human testers (13.6%). Enterprise, API, Amazon Bedrock, Google Cloud, Microsoft Foundry and AWS deployments remain opt-in while administrators review the change.

Anthropic will make Claude Code’s Auto Mode the default for Pro, Max and Team users - Auto Mode becomes the default for new Pro, Max and Team sessions on August 14, while Enterprise and API deployments remain opt-in for now. 1 https://claude.com/blog/auto-mode-default-in-claude-code - Anthropic says Auto Mode blocked 937 of 1,053 dangerous commands, compared with 143 caught by human testers. 1 https://claude.com/blog/auto-mode-default-in-claude-code - Users can switch permission modes, and administrators can pin a different default or disable Auto Mode through managed settings. 1 https://claude.com/blog/auto-mode-default-in-claude-code 2 https://code.claude.com/docs/en/auto-mode-config Anthropic will make Auto Mode the default permission setting for new Claude Code sessions on Pro, Max and Team plans starting August 14, moving routine approval decisions from developers to a classifier that evaluates Claude’s tool calls. Enterprise, API, Amazon Bedrock, Google Cloud, Microsoft Foundry and AWS deployments remain opt-in while administrators review the change. 1 https://claude.com/blog/auto-mode-default-in-claude-code Anthropic’s headline safety comparison comes from a controlled study of 1,053 paid professional testers. A dangerous command was substituted into a permission prompt during each session; testers caught 143 of the commands, or 13.6%, while Auto Mode blocked 937, or 89%. The test measured whether participants recognized a visibly dangerous command in a test environment, not how the system performs across live production codebases. 1 https://claude.com/blog/auto-mode-default-in-claude-code 4 https://the-decoder.com/anthropic-sets-claude-code-to-auto-mode-by-default-to-protect-developers-from-bad-approvals/ How the default works Auto Mode routes tool calls through a classifier designed to block actions that are irreversible, destructive or outside the user’s trusted environment. Anthropic says blocked actions generally trigger a safer retry or a request for approval; after three consecutive blocks or 20 total blocks in one session, Claude Code falls back to manual approvals. 1 https://claude.com/blog/auto-mode-default-in-claude-code 2 https://code.claude.com/docs/en/auto-mode-config The classifier is not a single static rule check. Anthropic’s technical account describes an input-layer probe for prompt-injection content and an output-layer transcript classifier that reviews user messages and tool calls. The deployed evaluation uses a fast first-stage filter followed by a more deliberate second stage when the first stage flags an action. 3 https://www.anthropic.com/engineering/claude-code-auto-mode Controls remain available The change does not remove manual review. Users can switch modes with Shift+Tab in the CLI or through the mode selector, while an existing user-set default remains unless the user accepts a one-time prompt to change it. Team administrators can set an organization-wide default or disable Auto Mode with managed settings. 1 https://claude.com/blog/auto-mode-default-in-claude-code 2 https://code.claude.com/docs/en/auto-mode-config Anthropic says the classifier adds a small number of tokens to each tool call but will no longer charge Pro, Max and Team users for that overhead. It still recommends human review for high-stakes production infrastructure because Auto Mode reduces risk without eliminating it. 1 https://claude.com/blog/auto-mode-default-in-claude-code Companies mentioned Further sources 1 Anthropic’s August 7, 2026 announcement sets Auto Mode as the default for new P… ↗ https://claude.com/blog/auto-mode-default-in-claude-code 2 Claude Code’s documentation describes Auto Mode’s classifier, default trust bou… ↗ https://code.claude.com/docs/en/auto-mode-config 3 Anthropic’s technical account explains the two-layer design, two-stage classifi… ↗ https://www.anthropic.com/engineering/claude-code-auto-mode 4 The Decoder independently reported the August 14 rollout and reproduced Anthrop… ↗ https://the-decoder.com/anthropic-sets-claude-code-to-auto-mode-by-default-to-protect-developers-from-bad-approvals/ The stories that matter, in one email. Free — unsubscribe anytime.