Claude Code Auto Mode (Permissions)

A permission mode released in research preview March 2026 as a safer alternative to –dangerously-skip-permissions (aka bypass permissions). Instead of asking for each tool call or blindly allowing everything, a classifier reviews every tool call for risky actions (deletes, sensitive data writes, prompt injection) and blocks them while allowing safe actions through. Sessions run slightly more expensive because of the per-call classification, but enable long-running tasks without babysitting.

Key points

Launched March 2026 in research preview, team plans only at launch
Middle ground between default ask-before-edits and dangerously-skip-permissions
Per-tool-call classifier screens for destructive actions and prompt injection
Slightly higher token cost due to classification overhead
Enabled with claude –enable-auto-mode or via shift-tab in VS Code
Risky actions are blocked and Claude must try a different approach
Team admins must enable auto-mode organisation-wide

Related entities

Related concepts

Context Management

Source references

^[src-004] Nate Herk cluster — Nate Herk — Claude Code cluster (21 videos)

– Videos referenced: pkSxISewcw8

Robin Cartier perspective

This page is part of Robin Cartier's working AI knowledge graph: a practical research layer for production AI, recommendation systems, experimentation, GEO, and agentic web readiness.

The useful next step is to connect this concept back to applied product leadership and operating models.

Recommended next

Keep reading from this thread

From 500 indexed pages and articles.