Claude Code Will Make Auto Mode the Default on August 14

Auto mode is the default permission experience in Claude Code. Since August 14, 2026, new sessions for Pro, Max, and Team users start in auto mode unless a pinned or administrator-managed default says otherwise; Anthropic's permission-modes reference lists auto as the built-in default for those plans and default for Enterprise plans and Console API keys. (Claude by Anthropic; ClaudeDevs on X)

Auto mode is not a blanket permission bypass. Claude Code routes each tool call through a separate classifier that evaluates whether the action is irreversible, destructive, or aimed outside the user's environment. When the classifier blocks something, Claude can usually look for a safer path or ask the user to approve the action directly. (Claude by Anthropic)

What changes by plan

If you already pinned a default permission mode, Anthropic says nothing changes. A user who configured a different default may see a one-time prompt, while a Team administrator's managed default takes precedence. Users without a configured default will see an in-product notice as the new behavior arrives. (Claude by Anthropic; ClaudeDevs on X)

Update (September 6, 2026): the "remains opt-in" rows are still accurate, and the promised follow-on has not landed. The announcement said that "in the coming month, working with our cloud partners, we plan to make it the default across all of these and no longer charge for classifier overhead." As of September 6, the permission-modes reference still lists Enterprise plans, Claude Console API keys, Amazon Bedrock, Google Cloud's Agent Platform, Microsoft Foundry, and Claude Platform on AWS as starting in default mode, and states that on those surfaces "classifier calls count toward your token usage." Anthropic's Week 33 and Week 34 release digests carry no auto mode entry. One nuance the docs add: on Bedrock, Agent Platform, Foundry, and signed-in Claude apps gateway sessions, auto mode now "appears in the Shift+Tab cycle by default", but "appearing in the cycle doesn't change the permission mode." Available is not the same as default.

Who starts in auto mode now

Anthropic's permission-modes reference, checked September 6, 2026, decides the starting mode in this order: the --permission-mode flag, then permissions.defaultMode in a settings file, then the built-in default below.

Two further rules from the same page. If the built-in default selects auto but auto mode is unavailable to the session (a settings file turned it off, the model does not support it, or Anthropic has temporarily disabled it server-side), "Claude Code starts the session in Manual instead." And the first time the built-in default starts one of your sessions in auto mode, Claude Code shows a notice: "In a terminal, once, at the top of the session" and "In the VS Code extension, as a card on the new-conversation screen that stays until you dismiss it."

Availability is wider than the default. The docs list auto mode's requirements as "Plan: All plans"; on Team and Enterprise "auto mode is available by default" until an administrator sets permissions.disableAutoMode to "disable" in managed settings; and by provider it is "available by default on the Anthropic API, Claude Platform on AWS, Amazon Bedrock, Google Cloud's Agent Platform, Microsoft Foundry, and signed-in Claude apps gateway sessions." The model floor differs by provider: Opus 4.6 or later, Sonnet 4.6 or later, or a Fable model on the Anthropic API and Claude Platform on AWS; only Sonnet 5, Opus 4.7 or later, and the Fable models on Bedrock, Agent Platform, Foundry, and gateway sessions.

How auto mode makes permission decisions

The classifier runs on every tool call. It is intended to catch dangerous actions without forcing the user to review every routine read, edit, or test command. Anthropic says the classifier is designed to block data exfiltration, destructive operations, and actions that move work outside the user's environment. (Claude by Anthropic)

The mode has explicit fallback behavior. Claude Code switches back to manual approvals after three blocks in a row or twenty blocks across a session, according to Anthropic's write-up. Permission rules still run before the classifier, except for broad allow rules that would grant arbitrary code execution, such as python:*; those broad rules are set aside while auto mode is active so they cannot bypass the classifier. (Claude by Anthropic)

Auto mode also screens content returned from external sources for prompt-injection attempts. That safeguard is not a guarantee: Anthropic says the system relies on classification and does not eliminate risk, so high-stakes production changes still deserve direct review. (Claude by Anthropic)

The classifier is no longer charged on three plans

The classifier uses a small number of extra tokens per tool call. As of August 7, 2026, Anthropic says Claude Code users on Pro, Max, and Team plans are no longer charged for that classifier overhead. That is narrower than a promise of higher quotas: the announcement discusses classifier-token treatment, not a general increase to included usage or rate limits. (Claude by Anthropic; ClaudeDevs on X)

Anthropic says it plans to stop charging classifier overhead on Enterprise and the listed API and cloud-platform surfaces when auto mode becomes the default there in the coming month. Enterprise administrators are to be notified before that change. (Claude by Anthropic)

What administrators can control

Organizations do not have to accept one global behavior without controls. Anthropic documents a managed defaultMode setting for pinning the default, and disableAutoMode for turning auto mode off entirely. Administrators can also add hard-deny rules for actions that should never be approved automatically. (Claude by Anthropic)

The announcement describes a few examples of those boundaries: auto mode should deny attempts to send code or secrets to an external destination, inspect the destination of a git push or pull request, and account for the current repository state before a destructive command such as git reset --hard. Those checks are there to preserve context that a simple allowlist cannot see. (Claude by Anthropic)

How to switch back to manual review

In the CLI, press Shift+Tab to change modes. In the desktop app, use the mode dropdown. A pinned personal or managed setting may control the starting state, but Anthropic's documentation still describes mode switching as available to the user. (Claude by Anthropic)

For a cautious rollout, start auto mode on a repository where the test and deployment boundaries are clear. Keep hard-deny rules for production and data-export operations, and inspect the first few long-running sessions rather than treating the new default as an unattended approval to run anything.

What to expect on August 14

Update (September 6, 2026): what actually shipped. The rollout ran as described. For people on Pro, Max, or Team who had pinned a different default in ~/.claude/settings.json with no other settings file overriding it, the docs now say "Claude Code asks once, in the terminal or in the VS Code extension, whether to change the setting to auto mode. If you decline, your setting stays as it is." Four post-launch changelog entries are worth knowing if a session did not behave as this article predicted:

The immediate change is behavioral rather than a new model or a new command: a fresh Claude Code session on Pro, Max, or Team will be more willing to continue through routine tool calls without pausing for a prompt. The classifier becomes the review layer, manual mode remains available, and existing pinned or administrator-managed defaults continue to win. (Claude by Anthropic)

The broader implication is that Anthropic is making longer-running Claude Code work the default workflow while keeping a safety boundary around destructive and out-of-environment actions. Teams should update internal guidance before the date, decide which repositories are appropriate for auto mode, and verify that managed settings express the exceptions they care about.

Bottom line

Claude Code auto mode becomes the default for new Pro, Max, and Team sessions on August 14, 2026. It uses a per-tool-call classifier instead of asking for every permission decision, falls back to manual review after repeated blocks, and no longer charges those three plans for classifier overhead. The practical choice for teams is not simply “on or off”: set managed defaults and hard denies for sensitive work, then use auto mode where fewer interruptions are worth the trade-off. (Claude by Anthropic) (Updated September 6, 2026: the switch took effect on August 14 as announced; Enterprise, Console API keys, and the cloud integrations still start in manual mode per Anthropic's permission-modes reference, and the "coming month" extension to those surfaces has not been documented.)

Corrections and Updates

September 6, 2026: the switch happened on schedule, and the docs now record it as the built-in default.

Sources

• Claude by Anthropic, “Auto mode is now the default in Claude Code for Pro, Max, and Team plans” (August 7, 2026): https://claude.com/blog/auto-mode-default-in-claude-code (re-checked September 6, 2026; the body still reads "Starting on August 14, new sessions on Pro, Max, and Team plans will run in auto mode" and "For Enterprise users and users who access Claude Code via the Claude API, auto mode remains opt-in for now")
• Anthropic, Claude Code docs, "Choose a permission mode": https://code.claude.com/docs/en/permission-modes (checked September 6, 2026; source for the built-in default table, the Manual fallback when auto mode is unavailable, the first-session notice, the one-time switch prompt, the availability requirements by plan, organization, provider, and model, and the classifier billing note for Enterprise, API, and cloud accounts)
• Anthropic, Claude Code release digest, "Week 32, August 3-7, 2026": https://code.claude.com/docs/en/whats-new/2026-w32 (checked September 6, 2026; source for "Starting August 14, auto mode is the default permission mode for new sessions on Pro, Max, and Team plans"; the Week 33 and Week 34 digests, checked the same day, carry no auto mode entry)
• Anthropic, Claude Code changelog: https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md (checked September 6, 2026; source for the 2.1.236, 2.1.243, and 2.1.251 entries in the post-launch table)
• Verification status of the three ClaudeDevs posts cited below, September 6, 2026: x.com returns a JavaScript shell without the post text to non-browser clients, so the posts could not be re-read. Nothing on this page rests on them alone; every claim they support is also in the Anthropic blog post or the docs above.
• ClaudeDevs on X, “Starting August 14, auto mode will be the default permission mode in Claude Code” (August 7, 2026): https://x.com/ClaudeDevs/status/2085794862608318627
• ClaudeDevs on X, “Auto mode runs a classifier on every tool call” (August 7, 2026): https://x.com/ClaudeDevs/status/2085794868102889473