Claude Code Auto Mode: Safer Alternative to Skipping Permissions
What Auto Mode Does
Auto mode provides a middle path between Claude Code's default conservative permissions (which require approval for every file write and bash command) and the risky --dangerously-skip-permissions flag. It lets you run longer tasks with fewer interruptions while introducing less risk than skipping all permissions.
How It Works
Before each tool call runs, a classifier reviews it for potentially destructive actions like mass deleting files, sensitive data exfiltration, or malicious code execution. Actions deemed safe proceed automatically, while risky ones get blocked, redirecting Claude to take a different approach. If Claude insists on taking actions that are continually blocked, it eventually triggers a permission prompt to the user.
Limitations and Considerations
Auto mode reduces risk compared to --dangerously-skip-permissions but doesn't eliminate it entirely. The classifier may still allow some risky actions if user intent is ambiguous or if Claude lacks enough context about your environment. It may also occasionally block benign actions. Auto mode may have a small impact on token consumption, cost, and latency for tool calls.
Getting Started
Auto mode is available in Claude Code as a research preview for Claude Team users today, with rollout to Enterprise and API users coming soon. It works with both Claude Sonnet 4.6 and Opus 4.6.
For developers: Run claude --enable-auto-mode to enable auto mode, then cycle to it with Shift+Tab. On Desktop and in the VS Code extension, first toggle auto mode on in Settings → Claude Code, then select it from the permission mode drop-down in a session.
For admins: Auto mode will soon be available for all Claude Code users on Enterprise, Team, and Claude API plans. To disable it for the CLI and VS Code extension, set "disableAutoMode": "disable" in your managed settings. Auto mode is disabled by default on the Claude desktop app, and can be toggled on using Organization Settings → Claude Code.
📖 Read the full source: HN AI Agents
👀 See Also
Four Claude Code Hooks Enforce Voice and Tone Consistency in AI-Written Copy
A developer built a system using four Claude Code hooks to prevent AI-generated copy from drifting off-brand. The system gates editing of copy files (.tsx, .md) until a reviewer agent validates content against a VOICE-AND-TONE.md guide.
Foreman: Open Source Slack Bot for Remote Control of Local Claude Code
Foreman is a free, open source Slack bot that provides remote control for locally running Claude Code instances. It allows developers to send tasks to Claude from their phone while maintaining full local access to filesystem, tools, and environment.
AI Trading Agent with Risk Guardrails for Educational Investing
A developer built an AI-powered trading assistant that connects Claude to a brokerage account with a risk engine between the AI and money. The system includes safety checks like blocking trades that exceed 50% of portfolio allocation, automatic shutdown at 3% daily loss, and a kill switch at 20% drawdown.
Researcher Builds Veracity-Checking Skill for Claude Code, Finds Hallucinations in Own Documentation
A researcher built a Claude Code skill called /veracity-tweaked-555 that decomposes documents into atomic claims and verifies each via web search using 16 parallel agents across 4 waves. When self-audited, the skill scored 62/100 due to fabricated statistics and inflated claims in its own documentation.