Claude Code Auto Mode: Safer Alternative to Skipping Permissions
What Auto Mode Does
Auto mode provides a middle path between Claude Code's default conservative permissions (which require approval for every file write and bash command) and the risky --dangerously-skip-permissions flag. It lets you run longer tasks with fewer interruptions while introducing less risk than skipping all permissions.
How It Works
Before each tool call runs, a classifier reviews it for potentially destructive actions like mass deleting files, sensitive data exfiltration, or malicious code execution. Actions deemed safe proceed automatically, while risky ones get blocked, redirecting Claude to take a different approach. If Claude insists on taking actions that are continually blocked, it eventually triggers a permission prompt to the user.
Limitations and Considerations
Auto mode reduces risk compared to --dangerously-skip-permissions but doesn't eliminate it entirely. The classifier may still allow some risky actions if user intent is ambiguous or if Claude lacks enough context about your environment. It may also occasionally block benign actions. Auto mode may have a small impact on token consumption, cost, and latency for tool calls.
Getting Started
Auto mode is available in Claude Code as a research preview for Claude Team users today, with rollout to Enterprise and API users coming soon. It works with both Claude Sonnet 4.6 and Opus 4.6.
For developers: Run claude --enable-auto-mode to enable auto mode, then cycle to it with Shift+Tab. On Desktop and in the VS Code extension, first toggle auto mode on in Settings → Claude Code, then select it from the permission mode drop-down in a session.
For admins: Auto mode will soon be available for all Claude Code users on Enterprise, Team, and Claude API plans. To disable it for the CLI and VS Code extension, set "disableAutoMode": "disable" in your managed settings. Auto mode is disabled by default on the Claude desktop app, and can be toggled on using Organization Settings → Claude Code.
📖 Read the full source: HN AI Agents
👀 See Also
Qwen 3.6 27B Quantization Benchmark: Q4_K_M Beats Q8_0 on Practical Tradeoffs
Evaluated Qwen 3.6 27B across BF16, Q4_K_M, and Q8_0 GGUF quants on HumanEval, HellaSwag, and BFCL. Q4_K_M delivers near-BF16 scores with 48% less RAM, 1.45x speed, and 68.8% smaller file size.
Open-source tool enables Claude to control Unreal Engine directly
soft-ue-cli is a Python tool with a C++ plugin that allows Claude Code and Claude Desktop to execute commands in Unreal Engine without editor interaction, featuring 60+ operations including blueprint editing, actor spawning, and performance profiling.
Snip: Open-source tool reduces Claude Code token usage with YAML filters
Snip is a Go-based tool that sits between Claude Code and the shell, filtering verbose command output through declarative YAML pipelines to reduce token usage by 60-90%. It includes 16 composable pipeline actions and works with multiple AI coding agents.
CodeLedger: Open-source Claude Code plugin tracks token usage and background agents
CodeLedger is an open-source MCP server plugin for Claude Code that automatically tracks token usage across projects, identifies background agents, and provides cost optimization recommendations based on analysis of local JSONL session files.