Anthropic is switching Claude Code‘s auto mode to the default setting for Pro, Max, and Team accounts from August 14. This change means the tool will execute commands without asking for human approval at every step, unless an action is flagged as irreversible, destructive, or aimed outside the user’s environment. The company previously tested this feature with paid users and reported that the automated system detected 89% of harmful actions compared to 13.6% during manual review. Boris Cherny, head of Claude Code, stated that the team uses the auto mode exclusively and cannot imagine returning to permission prompts. The update includes new safety layers such as prompt injection screening and customizable hard deny rules to stop data exfiltration.
The shift reduces friction for developers who find constant permission requests disruptive to workflow. However, removing the safety net of human oversight introduces new risks regarding unintended consequences or errors that might occur without immediate intervention. Users must trust the algorithmic judgment over their own vigilance when the system decides an action is safe to proceed.
* Auto mode is enabled by default for Pro, Max, and Team tiers
* The change goes live on 14 August 2026
* Manual review caught only 13.6% of harmful actions in testing
