product updateAnthropic

Anthropic Sets Claude Code Auto Mode as Default Starting August 14

TL;DR

Anthropic will switch Claude Code's default permission setting to auto mode on August 14 for Pro, Max, and Team users. The company says its safety classifier caught 89% of dangerous commands in testing, compared to 13.6% for human reviewers, and will no longer charge extra tokens for the classifier itself.

3 min read
0

Anthropic will make auto mode the default permission setting in Claude Code starting August 14, 2026. The change applies to Pro, Max, and Team users unless a user or administrator has explicitly pinned a different setting.

Auto mode replaces Claude Code's traditional workflow of prompting users for approval before every tool call. Instead, a classifier evaluates each action in real time, checking for irreversible, destructive, or out-of-bounds behavior. If the classifier blocks an action, Claude attempts a safer alternative or asks for explicit permission. According to Anthropic, sessions that trigger repeated blocks automatically fall back to manual approval mode.

Anthropic is also eliminating a cost barrier tied to the feature. The company says it will no longer charge for the "small number of extra tokens per tool call" that the auto mode classifier consumes during evaluation — a change that removes a disincentive some users may have had toward enabling the feature.

The numbers behind the decision

Anthropic bases the rollout on an internal study of 1,053 paid Claude Code testers. According to the company, human reviewers manually approving tool calls caught only 13.6% of dangerous commands. The auto mode classifier caught 89% in the same conditions. Anthropic also claims human catch rates degraded further with fatigue, dropping to roughly 5% after 50 prompts in a session.

Anthropic reports that auto mode users at Team and Enterprise customers ship approximately 25% more pull requests than those on manual approval, framing the feature as a throughput gain in addition to a safety one.

Despite these figures, Anthropic is not claiming the classifier is foolproof. The company explicitly cautions that automated classifiers cannot eliminate risk entirely and recommends human review before applying changes to production systems.

Context: a different bet than OpenAI

The move contrasts with a decision at OpenAI, which reportedly opted out of enabling an equivalent auto mode by default for its most capable GPT-5.6 model, choosing manual approval as an added precaution. Anthropic's decision to push auto mode to all eligible users by default — rather than an opt-in — signals higher confidence in its classifier's reliability, or at least a higher tolerance for the residual risk following repeated blocks.

Auto mode builds on other Claude Code features Anthropic has shipped recently, including routines, voice mode, and an in-app browser for Mac, all aimed at supporting longer, less-supervised coding sessions.

What this means

Anthropic's own data suggests human review of AI-generated tool calls is not a reliable safety mechanism at scale — a 13.6% catch rate, falling to 5% with fatigue, is a weak backstop regardless of the classifier's performance. That reframes auto mode less as a convenience feature and more as a replacement for a safeguard that wasn't working. The 89% catch rate is still not 100%, and Anthropic's own caution about production changes suggests the company knows this. Users who rely on Claude Code for anything touching live infrastructure should treat auto mode as a productivity tool, not a substitute for their own review process, especially in the early days after the August 14 switch.

Related Articles

benchmark

Composio Benchmark: Claude Code Fastest Agent Framework, But Costs Nearly 3x More Than OpenCode

Composio benchmarked DeepSeek V4 Flash across four agent frameworks—Claude Code, Codex, OpenCode, and Oh My Pi—on 30 real-world tasks. Claude Code finished fastest at 122 seconds per task but cost $0.195, nearly three times OpenCode's $0.073, while Oh My Pi had the highest success rate at 17/30 but took 272 seconds per task.

product update

AWS Details Two Paths for Single-Region Claude Code Deployments on Amazon Bedrock

AWS published a technical guide detailing two methods for keeping Claude Code inference confined to a single AWS Region: Anthropic's newer Mantle endpoint and the classic Bedrock Invoke API with application inference profiles. The right path depends entirely on which Region compliance teams require.

product update

AWS Ships Six Agent Skills to Automate Amazon Bedrock's Automated Reasoning Policy Lifecycle

AWS published a suite of six Agent Skills that automate the full lifecycle of Amazon Bedrock Automated Reasoning policies—from rule extraction to deployment—directly from coding agents like Claude Code, Cursor, Kiro, and Codex. The skills wrap Bedrock's formal-logic verification APIs in structured workflows built on Anthropic's open Agent Skills format.

changelog

Anthropic Cuts False Positives in Fable 5's Biology Filter by 85%, Keeps Virology and Toxicology Blocked

Anthropic has cut false positives in Fable 5's biology safety classifier by roughly 85%, letting users ask about lab results, symptoms, and medical questions without being rerouted to the weaker Opus 5 model. Dual-use topics like virology, toxicology, and molecular design remain restricted, with Anthropic citing the difficulty of containing biological threats once released.

Comments

Loading...