Key Takeaways
- Claude Code will soon automate permission handling in coding sessions.
- Includes prompt injection safeguards with admin options to restrict use.
- IT teams must weigh coding productivity against increased costs and security risks.
Anthropic is bringing a new "auto mode" to Claude Code, its AI-powered command-line coding tool, in a research preview launching no earlier than March 11. The feature allows Claude to autonomously decide whether an action — like editing a file or running a command — requires user approval, rather than prompting developers at every step.
Currently, developers who want uninterrupted coding sessions often bypass permissions entirely, a workaround Anthropic has explicitly called risky. Auto mode is designed as a safer middle ground: Claude uses its own judgment to approve low-risk actions automatically while flagging higher-risk ones.
Anthropic still recommends running it in isolated environments, and warns that the additional reasoning required will increase token consumption, cost, and response latency.
For IT and security teams, the feature ships with prompt injection safeguards — protections against malicious content in files or command outputs that could hijack Claude's actions. Organizations can also disable auto mode entirely through MDM or file-based OS policies, giving admins centralized control before rollout.
Feature Breakdown
| Capability | Description |
|---|---|
| Auto mode | Automates permission decisions during coding sessions |
| Prompt injection safeguards | Additional security measures against injection attacks |
| Admin controls | MDM/OS-level policies to disable feature organization-wide |
| CLI enablement | Activated via 'claude --enable-auto-mode' command |
Anthropic: Recent Developments
Anthropic has grown dramatically in the last year. The company raised $3.5 billion in a Series E round in March 2025, $13 billion Series F led by ICONIQ in September 2025 and most recently, $30 billion in a Series G round in February 2026, bringing its valuation to $380 billion.
Revenue has followed a similar trajectory — from roughly $1 billion in annualized run rate in early 2025 to approximately $20 billion by early March 2026, per Bloomberg.
Product momentum has accelerated alongside the funding. Notable releases included Google opening Workspace to Claude in April 2025, a Claude Code Slack integration in December 2025 and the Cowork desktop automation tool in January 2026. In February 2026, Apple integrated the Claude Agent SDK into Xcode 26.3 and Anthropic launched Claude Sonnet 4.6 with improved coding and a 1-million-token context window.
Claude Code itself has exceeded $2.5 billion in run-rate revenue.
Not all developments have been positive. In early March 2026, three U.S. cabinet agencies — State, Treasury and Health & Human Services — directed staff to stop using Claude and switch to OpenAI and Google products, following a dispute over military-use guardrails.
AI Coding Context
AI coding tools now support multi-agent workflows that span the full software development lifecycle, with autonomous agents handling complex, multi-step tasks with minimal human intervention.
More than half of software professionals report AI-powered coding tools boosting their productivity, with some reporting gains as high as 74%. However, without adequate human oversight, automated code generation can become outdated or inaccurate — making features like auto mode's configurable controls increasingly important as adoption grows.