Learn one feature at a time
Auto means
fewer interruptions.
Learn what Auto mode does, why it may be selected already, and how to use it with clear boundaries.
What Auto does
Auto uses a classifier to review actions in the background. It can allow Claude to edit and run commands without a separate approval each time. It is different from bypassing permission checks, and it is not a promise that every action is safe.
Anthropic began making Auto the default for Pro, Max, and Team sessions in August 2026. A pinned default or other session conditions can keep a different mode. Always read the active indicator.
Try a small task first
Our recommendation: use a practice branch with no production secrets. Name the exact outcome, excluded areas, and checks. Review the result before increasing the scope.
On this practice branch, correct the spelling in README.md only. Do not change code, install packages, commit, push, or publish. Show the diff and confirm whether any other files changed.Auto can push without asking
Auto can approve a push to the current repository, including its default branch, without a prompt. Deploy-named branches, sensitive content, permission rules, and remote branch protections can change that decision. A “do not push” instruction is read from the transcript and can disappear during compaction.
To ask before common push commands, merge this rule into your existing settings rather than replacing the whole file:
{"permissions":{"ask":["Bash(git push *)"]}}Use deny instead of ask to block matching invocations. This matches command text, not every way to push: git -C . push, other tools, or wrappers may take a different path. Protect important branches at the repository host and limit credentials for a firm boundary.
After 3 blocks in a row or 20 total classifier blocks, Auto pauses and prompts again. Approving that prompted action resumes Auto; review it before accepting.
Make the boundary concrete
- Limit connected access: grant only what this task needs.
- Keep a recovery point: know which changes can be restored.
- Read the result: inspect changed files and actual test evidence.
- Switch when needed: use Plan when you want discussion before implementation.
The selector is beside the prompt in web and Desktop. In the CLI, check the status bar after changing modes with Shift+Tab. Availability varies. Compare all six modes.
References
- Anthropic. (n.d.-f). Choose a permission mode. Retrieved September 24, 2026, from https://code.claude.com/docs/en/permission-modes
- Anthropic. (n.d.-l). Configure permissions. Retrieved September 24, 2026, from https://code.claude.com/docs/en/permissions
- Phillippi, C. (2026, August 7). Auto mode is now the default in Claude Code for Pro, Max, and Team plans. https://claude.com/blog/auto-mode-default-in-claude-code
Was this chapter useful?
Report an errorVotes are shared only if you enable optional measurement in Privacy & Preferences.