Anthropic, Configure auto mode

Worauf sich diese Seite beruft, wörtlich, abgerufen am 12.10.2026:

• The classifier is a second gate that runs after the permissions systembestätigt 10.11.2026
• Deny and explicit ask rules are evaluated before the classifier and still block or prompt.bestätigt 10.11.2026
• The classifier reads the same CLAUDE.md content Claude itself loadsbestätigt 10.11.2026
• Content-scoped ask rules like the ones below are evaluated before the classifier and always force a permission prompt, even in auto modebestätigt 10.11.2026
• Actions like pushing to your company’s source-control org or writing to a team cloud bucket are blocked until you add them to autoMode.environmentbestätigt 10.11.2026
• Press r to approve the action and let Claude retry it.bestätigt 10.11.2026
• send a message once Claude finishes to let Claude retry the actionbestätigt 10.11.2026
• Approving an action doesn’t add a permission rule.bestätigt 10.11.2026
• The tab requires Claude Code v2.1.246 or later, and it appears only when auto mode is available to your session.bestätigt 10.11.2026
• saves every change you make on the tab to ~/.claude/settings.jsonbestätigt 10.11.2026
• The classifier doesn’t read autoMode from project settingsbestätigt 10.11.2026
• so a checked-in repo or a build step could otherwise inject its own allow rulesbestätigt 10.11.2026
• The classifier reads them as natural-language rules.bestätigt 10.11.2026
• The default entries are spliced in at that positionbestätigt 10.11.2026
• The hosts, buckets, and command names from the commands Claude ran in your recent sessions in this project, never your messagesbestätigt 10.11.2026
• If you accept the draft, Claude Code writes it to ~/.claude/settings.jsonbestätigt 10.11.2026
• /auto-mode-setup is available on Pro, Max, Ultra, Team, and Enterprise plans and with a Claude Console API key.bestätigt 10.11.2026
• In a cloud session, the command prints /auto-mode-setup isn't available in this environment.bestätigt 10.11.2026
• hard_deny rules block unconditionally.bestätigt 10.11.2026
• General requests don’t count as explicit intent.bestätigt 10.11.2026
• you discard the built-in rules for that sectionbestätigt 10.11.2026
• a developer-added allow entry can override an organization soft_deny entrybestätigt 10.11.2026
• use permissions.deny in managed settings, which blocks the action before the classifier is consulted and can’t be overriddenbestätigt 10.11.2026
• Set autoMode.classifyAllShell to true to suspend every Bash and PowerShell allow rule while auto mode is activebestätigt 10.11.2026
• This trades latency for coveragebestätigt 10.11.2026
• claude auto-mode critique reviews them and flags entries that are ambiguous, redundant, or likely to cause false positivesbestätigt 10.11.2026
• is the name of the rule the classifier matchedbestätigt 10.11.2026
• state that intent in your next message and let Claude retrybestätigt 10.11.2026
• means Claude Code blocked the call without a verdict from the classifierbestätigt 10.11.2026
• add a PermissionDenied hookbestätigt 10.11.2026
• By default, narrow Bash and PowerShell allow rules such as Bash(npm test) stay in effect in auto mode.bestätigt 10.11.2026
• On a Pro, Max, Ultra, or Team plan, you need v2.1.228 or later, or v2.1.233 or later on native Windows.bestätigt 10.11.2026
• On an Enterprise plan or with a Claude Console API key, you need v2.1.283 or later.bestätigt 10.11.2026
• Otherwise, you don’t need to send anything: Claude continues now and may retry it.bestätigt 10.11.2026
• You can’t approve an action from the tab when its row can’t show all of its command or input, or when the action has no rowbestätigt 10.11.2026