Anthropic will make auto mode the default setting in Claude Code for Pro, Max and Team plans starting Aug. 14, the company said in a blog post. Auto mode lets the coding agent take actions without stopping to ask a human to approve each one.

The company said every tool call runs through a classifier that blocks the action if it judges it irreversible, destructive or aimed outside the user's own environment. Certain actions, including data exfiltration, cannot be approved even in auto mode without switching back to manual permissions, according to Anthropic. The system also reverts to manual approval after three consecutive blocks or 20 blocks in one session.

Anthropic said testing with 1,053 paid users found auto mode caught 89% of actions the company judged harmful, compared with 13.6% caught when a human reviewed each permission prompt individually. The company also cited internal red teaming, penetration testing from Apollo Research and prompt injection evaluations from Trajectory Labs.

"The team and I use Auto mode exclusively, and have been for many months. I couldn't imagine going back to permission prompts," said Boris Cherny, who leads Claude Code at Anthropic, in comments reported by TechCrunch Sunday.

Independent developer Simon Willison, who wrote in 2025 that he expected a security disaster involving AI coding agents in 2026, said he would "dearly like to be proved wrong" but wants more independent confirmation of the safety numbers before trusting them. He said malicious third party packages remain a scenario he is not convinced auto mode can catch.

Enterprise accounts, the Claude API and cloud partner deployments stay opt in for now. Anthropic said it plans to extend the default to those tiers within a month.

For teams running Claude Code day to day, the change removes a source of friction but raises the cost of a single missed classification. Anyone who relies on permission prompts as a safety net should set explicit hard deny rules before Aug. 14, because after that date the new default's judgment calls apply automatically.