{"slug": "auto-mode-the-end-of-approve-approve-approve", "title": "Auto Mode — the end of approve, approve, approve", "summary": "Anthropic has introduced Auto Mode for Claude Code, a permission mode that allows Claude to execute actions without manual approval by running a background classifier that reviews each action before execution. The classifier, powered by Claude Sonnet 4.6, permits routine tasks like editing files and running builds while blocking dangerous actions such as `curl | bash` from untrusted URLs. Auto Mode is available on Team, Enterprise, or API plans with Claude Sonnet 4.6 or Opus 4.6.", "body_md": "You know the rhythm. Claude Code suggests an edit — you hit approve. It wants to run `dotnet build`\n\n— approve. Then `dotnet test`\n\n— approve. It reads a file — approve. Another edit — approve. A refactoring session turns into a clicking exercise.\n\nI've caught myself approving commands without even reading them. At that point, the permission system isn't protecting me. It's just slowing me down.\n\nAuto Mode fixes this.\n\nAuto Mode is a permission mode in Claude Code that lets Claude execute actions without asking you first. But unlike `--dangerously-skip-permissions`\n\n(which disables all safety checks), Auto Mode runs a background classifier that reviews every action before it executes.\n\nThink of it as a security guard who knows your project. It waves through your daily routines — editing files, running builds, executing tests — but stops anything that looks like it could do real damage. A `dotnet build`\n\n? Fine. A `curl | bash`\n\nfrom an untrusted URL? Blocked.\n\nThe classifier runs on Claude Sonnet 4.6 as a separate model call. It sees your conversation and the pending action, but not the raw tool results — so hostile content in a file or web page can't trick it into approving something dangerous.\n\nA typical .NET workflow with Claude Code goes like this: you ask Claude to refactor a service class, add unit tests, and run the test suite. That's easily 15-20 permission prompts in a session. Edit the interface, approve. Edit the implementation, approve. Create the test file, approve. Run `dotnet test`\n\n, approve. Fix a failing test, approve. Run tests again, approve.\n\nWith Auto Mode, that entire flow runs uninterrupted. Claude edits your files, runs `dotnet build`\n\n, executes `dotnet test`\n\n, reads the output, fixes what's broken, and runs the tests again. You watch the progress, review the results, and step in only when you disagree with the direction.\n\nThis is especially powerful for:\n\n`Read`\n\ncall. Auto Mode lets Claude explore freely.Auto Mode trusts your working directory and your repo's configured remotes. Everything else is treated as external until you tell it otherwise.\n\n**Allowed by default:**\n\n`dotnet build`\n\n, `dotnet test`\n\n)`.env`\n\nfiles and using credentials with their matching APIs**Blocked by default:**\n\n`curl | bash`\n\n)`main`\n\nThe blocked list is sensible. These are exactly the actions where you'd want a human in the loop — even if you were running the commands yourself.\n\nOne thing to keep straight: the classifier only judges what Claude runs in your terminal. When Claude [takes over your mouse and keyboard](https://renedekkers.nl/posts/computer-use-in-claude-code-your-ai-controls-your-screen/), approval works on a different track entirely — per app, per session, granted through macOS instead of your permission mode.\n\nAuto Mode requires a Team, Enterprise, or API plan (not Pro or Max), Claude Sonnet 4.6 or Opus 4.6, and the Anthropic API provider. If you're on an eligible plan, enable it with:\n\n```\nclaude --enable-auto-mode\n```\n\nAfter that, Auto Mode joins the `Shift+Tab`\n\ncycle. You press `Shift+Tab`\n\nto move through `default`\n\n→ `acceptEdits`\n\n→ `plan`\n\n→ `auto`\n\n. The status bar shows when Auto Mode is active.\n\nYou can also set it as your default mode in your settings:\n\n```\n{\n  \"permissions\": {\n    \"defaultMode\": \"auto\"\n  }\n}\n```\n\nIn VS Code, click the mode indicator at the bottom of the prompt box — Auto Mode appears once your admin has enabled it.\n\nAuto Mode isn't a black box. When the classifier blocks an action, you see a notification. Blocked actions appear in `/permissions`\n\nunder the \"Recently denied\" tab, where you can press `r`\n\nto retry with manual approval.\n\nIf the classifier blocks 3 actions in a row or 20 total in a session, Auto Mode pauses and Claude Code goes back to prompting. Approving a prompted action resumes Auto Mode. This is a safety net — if something is consistently getting blocked, there's probably a reason.\n\nIn practice, I rarely hit these limits. The classifier is good at understanding what's routine and what's risky. When it does block something, it's usually because I'm doing something genuinely unusual — like pushing to a remote I haven't used before.\n\nIf the classifier blocks actions that are routine for your team — say, deploying to a staging environment or writing to a specific S3 bucket — your admin can configure trusted infrastructure:\n\n```\n{\n  \"autoMode\": {\n    \"environment\": [\n      \"Trusted staging: deploy.staging.example.com\",\n      \"Trusted bucket: s3://our-staging-bucket\"\n    ]\n  }\n}\n```\n\nThis goes in your `settings.json`\n\n(not the shared project settings, for security). The classifier uses these hints to understand what's normal for your setup — the same file where the rest of your [harness configuration for a real .NET codebase](https://renedekkers.nl/posts/tuning-claude-code-for-a-real-dotnet-codebase/) lives.\n\nClaude Code gives you a spectrum of permission modes:\n\n| Mode | What it does | When to use it |\n|---|---|---|\n`default` |\nAsks for everything | Sensitive work, getting started |\n`acceptEdits` |\nAuto-approves file edits only | Quick iteration with manual build control |\n`plan` |\nRead-only, proposes changes without making them | Exploring before committing to changes |\n`auto` |\nAuto-approves with background safety checks | Long sessions, TDD, refactoring |\n`bypassPermissions` |\nNo checks at all | Isolated containers only |\n\nFor most .NET development, I switch between `acceptEdits`\n\nand `auto`\n\n. When I'm building a new feature and want to stay hands-on, `acceptEdits`\n\nis enough. When I'm in a refactoring session or running TDD cycles, Auto Mode saves me from clicking approve on the same `dotnet test`\n\ncommand for the fiftieth time. And when I want Claude to think about a change before it's allowed to make one, [plan mode](https://renedekkers.nl/posts/planning-mode-think-first-code-later/) is the opposite end of the same dial.\n\nBe clear about what Auto Mode isn't, though. It removes prompts; it doesn't add checks. A [hook that builds after every edit](https://renedekkers.nl/posts/claude-code-hooks-automatic-testing/) fires no matter which mode you're in — that's the layer that actually stops something, and it doesn't depend on you noticing.\n\nNext time you start a refactoring session or a TDD cycle, launch with `claude --enable-auto-mode`\n\nand press `Shift+Tab`\n\nuntil you see the auto indicator. Then give Claude something meaty — refactor a service, add tests for an untested class, rename a concept across your solution — and sit on your hands.\n\nDon't watch the stream. Go do something else for ten minutes and come back to the diff. `git diff`\n\nshows exactly what changed and `git checkout .`\n\nundoes all of it, so the downside is capped at those ten minutes.\n\nHere's what to check when you come back: how many of the commands it ran would you have approved without reading them? If the honest answer is \"nearly all of them\", you now know what those permission prompts were costing you. If a few made you nervous, that's worth knowing too — it tells you which corners of your repo need a guardrail before you hand over the wheel.\n\n*Originally published at renedekkers.nl.*", "url": "https://wpnews.pro/news/auto-mode-the-end-of-approve-approve-approve", "canonical_source": "https://dev.to/cloudconsultant/auto-mode-the-end-of-approve-approve-approve-2d43", "published_at": "2026-07-25 11:43:15+00:00", "updated_at": "2026-07-25 12:01:17.056993+00:00", "lang": "en", "topics": ["artificial-intelligence", "ai-tools", "ai-safety", "developer-tools"], "entities": ["Anthropic", "Claude Code", "Claude Sonnet 4.6", "Claude Opus 4.6"], "alternates": {"html": "https://wpnews.pro/news/auto-mode-the-end-of-approve-approve-approve", "markdown": "https://wpnews.pro/news/auto-mode-the-end-of-approve-approve-approve.md", "text": "https://wpnews.pro/news/auto-mode-the-end-of-approve-approve-approve.txt", "jsonld": "https://wpnews.pro/news/auto-mode-the-end-of-approve-approve-approve.jsonld"}}