llms.blog
AI Coding

Anthropic Makes Auto Mode Default in Claude Code for Pro, Max, and Team Plans

Starting August 14, 2026, Anthropic will switch Claude Code's default permission mode to Auto Mode for Pro, Max, and Team plan users, the company announced on its blog. The change replaces the manual approval prompt that has governed every Claude Code session since the CLI launched. What Auto Mode Does Auto Mode routes every tool call through a classifier that screens for irreversible, destructive, or externally-aimed actions. When the classifier blocks something, Claude attempts a safer alte

axc
axc
2 min
Anthropic Makes Auto Mode Default in Claude Code for Pro, Max, and Team Plans

Starting August 14, 2026, Anthropic will switch Claude Code's default permission mode to Auto Mode for Pro, Max, and Team plan users, the company announced on its blog. The change replaces the manual approval prompt that has governed every Claude Code session since the CLI launched.

What Auto Mode Does

Terminal showing AI classifier decision on command safety

Auto Mode routes every tool call through a classifier that screens for irreversible, destructive, or externally-aimed actions. When the classifier blocks something, Claude attempts a safer alternative or asks for permission. After repeated blocks, the session falls back to manual approval.

The classifier overhead — a small number of extra tokens per tool call — will no longer count against usage limits for Pro, Max, and Team plans. Enterprise customers will need to opt in; API users will receive the change once Auto Mode becomes default for those tiers.

Safety Data Behind the Switch

Anthropic cites three evaluations:

1. Controlled study (1,053 paid testers): Human reviewers caught 13.6% of dangerous commands. Auto Mode caught 89%. Human performance fell to roughly 5% after 50 prompts.

2. Internal red-teaming: Auto Mode stopped Claude from uploading confidential data to a public page and killed roughly 2,000 processes that would have disrupted ongoing GPU training jobs.

3. Independent audit by Trajectory Labs: 72 prompt-injection scenarios × 10 runs each = 720 attempts against Claude Fable 5, Opus 5, and Sonnet 5 in Auto Mode. Zero succeeded. For comparison, OpenAI's GPT-5.6 Sol in Codex Auto-Review mode allowed 5.83% of attacks through.

Productivity Impact

Teams using Auto Mode generated approximately 25% more pull requests, according to Anthropic's internal data. The company argues that reducing approval friction makes long-running agent work more practical, building on features like routines, voice mode, and the in-app Mac browser.

Caveats

Anthropic acknowledges the classifier does not eliminate risk. "For high-stakes changes to production infrastructure, we still recommend reviewing Claude's actions yourself," the blog post states. The company also notes that less frequent human intervention makes oversight harder to maintain — a paradox for teams relying heavily on Auto Mode.

Sources

Anthropic blog: Auto Mode Default in Claude Code — https://claude.com/blog/auto-mode-default-in-claude-code

The Decoder: Anthropic sets Claude Code to Auto Mode by default — https://the-decoder.com/anthropic-sets-claude-code-to-auto-mode-by-default-to-protect-developers-from-bad-approvals/

9to5Mac: PSA: Claude Code enabling auto mode as default next week — https://9to5mac.com/2026/08/07/psa-claude-code-enabling-auto-mode-as-default-next-week-anthropic-says/

Simon Willison: Auto mode is now the default in Claude Code — https://simonwillison.net/2026/Aug/8/auto-mode/

AI CodingAnthropicClaude CodeDeveloper Tools
ShareX (Twitter)LinkedIn

Written by

axc

More to read

  • Chunked and Fused Cross-Entropy: How Online Logit Tiling Slashes Large-Vocabulary VRAM Bottlenecks in LLM Training

    Chunked and Fused Cross-Entropy: How Online Logit Tiling Slashes Large-Vocabulary VRAM Bottlenecks in LLM Training As frontier large language models have scaled, tokenizer vocabularies have expanded substantially. Where early architectures such as LLaMA and Mistral relied on 32,000 subword tokens, contemporary models routinely employ vocabularies of 128,256 tokens (Llama 3), 152,064 tokens (Qwen 2.5), and 256,000 tokens (Gemma 2). Larger vocabularies compress text more densely, improve multilin

    1 min

  • Kakao Splits Into KakaoAI and KakaoX to Accelerate AI and Messenger Integration

    South Korean platform giant Kakao Corp. announced a corporate split that will separate its core operations into two independent publicly traded entities: KakaoAI and KakaoX. The restructuring, approved by Kakao's board of directors, aims to isolate and accelerate the company's artificial intelligence engineering and messaging ecosystem from its broader investment portfolio. Under the spin-off terms, existing shareholders will receive shares based on a net asset book value split ratio of 36% for

    1 min

  • US Warns 35 Partner Countries to Choose Between Pax Silica and China's WAICO AI Coalition

    The U.S. Department of State is preparing formal diplomatic notices instructing 35 partner nations to select between Washington's AI alliance and Beijing's competing framework. According to a draft cable reviewed by Reuters and reported by The Decoder and CNBC, the U.S. warns that countries joining China's newly established AI initiative will be excluded from the U.S.-led Pax Silica coalition. The diplomatic draft states: "To be part of everything is to be part of nothing. Signature of the Pax

    1 min