product updateAnthropic

Anthropic Sets Claude Code Auto Mode as Default Starting August 14

TL;DR

Anthropic will switch Claude Code's default permission setting to auto mode on August 14 for Pro, Max, and Team users. The company says its safety classifier caught 89% of dangerous commands in testing, compared to 13.6% for human reviewers, and will no longer charge extra tokens for the classifier itself.

3 min read
0

Anthropic will make auto mode the default permission setting in Claude Code starting August 14, 2026. The change applies to Pro, Max, and Team users unless a user or administrator has explicitly pinned a different setting.

Auto mode replaces Claude Code's traditional workflow of prompting users for approval before every tool call. Instead, a classifier evaluates each action in real time, checking for irreversible, destructive, or out-of-bounds behavior. If the classifier blocks an action, Claude attempts a safer alternative or asks for explicit permission. According to Anthropic, sessions that trigger repeated blocks automatically fall back to manual approval mode.

Anthropic is also eliminating a cost barrier tied to the feature. The company says it will no longer charge for the "small number of extra tokens per tool call" that the auto mode classifier consumes during evaluation — a change that removes a disincentive some users may have had toward enabling the feature.

The numbers behind the decision

Anthropic bases the rollout on an internal study of 1,053 paid Claude Code testers. According to the company, human reviewers manually approving tool calls caught only 13.6% of dangerous commands. The auto mode classifier caught 89% in the same conditions. Anthropic also claims human catch rates degraded further with fatigue, dropping to roughly 5% after 50 prompts in a session.

Anthropic reports that auto mode users at Team and Enterprise customers ship approximately 25% more pull requests than those on manual approval, framing the feature as a throughput gain in addition to a safety one.

Despite these figures, Anthropic is not claiming the classifier is foolproof. The company explicitly cautions that automated classifiers cannot eliminate risk entirely and recommends human review before applying changes to production systems.

Context: a different bet than OpenAI

The move contrasts with a decision at OpenAI, which reportedly opted out of enabling an equivalent auto mode by default for its most capable GPT-5.6 model, choosing manual approval as an added precaution. Anthropic's decision to push auto mode to all eligible users by default — rather than an opt-in — signals higher confidence in its classifier's reliability, or at least a higher tolerance for the residual risk following repeated blocks.

Auto mode builds on other Claude Code features Anthropic has shipped recently, including routines, voice mode, and an in-app browser for Mac, all aimed at supporting longer, less-supervised coding sessions.

What this means

Anthropic's own data suggests human review of AI-generated tool calls is not a reliable safety mechanism at scale — a 13.6% catch rate, falling to 5% with fatigue, is a weak backstop regardless of the classifier's performance. That reframes auto mode less as a convenience feature and more as a replacement for a safeguard that wasn't working. The 89% catch rate is still not 100%, and Anthropic's own caution about production changes suggests the company knows this. Users who rely on Claude Code for anything touching live infrastructure should treat auto mode as a productivity tool, not a substitute for their own review process, especially in the early days after the August 14 switch.

Comments

Loading...