Definition
A permission mode is the Claude Code setting that decides which actions Claude may take in a session without asking you first.
Also called: Claude Code permission mode, defaultMode, accept edits mode, plan mode.
| Mode | Runs without asking | Typical use |
|---|---|---|
default (shown as Manual) | reads only | reviewing every action |
acceptEdits | reads, file edits and common filesystem commands | iterating on code you're reviewing |
plan | reads; Claude proposes a plan before editing | exploring before changing anything |
auto | most actions, checked by a classifier model | long tasks with fewer prompts |
dontAsk | only pre-approved tools; anything else is denied | locked-down scripts and CI |
bypassPermissions | everything | isolated containers and VMs only |
Press ⇧⇥ (Shift+Tab) to cycle modes in the terminal, pass --permission-mode <mode> at launch, or set permissions.defaultMode in a settings file. Allow and deny rules sit on top of the mode; deny rules block in every mode, even bypassPermissions. A headless claude -p run starts in default, where nobody can answer a prompt, so choose the mode and allowed tools up front. Codex's counterpart is its sandbox modes plus an approval policy.
In Pairbar
The composer's Mode chip sets Claude's permission mode for a new chat; “Bypass permissions” is never remembered for the next one. Workflow steps use explicit modes so your own defaultMode and allow rules never widen them: Read-only and Can run commands run with --permission-mode default plus tool allow and deny lists, and Can edit files with --permission-mode acceptEdits --allowedTools Bash. See Permissions.
Frequently asked questions
- How do I change the permission mode in Claude Code?
- Press Shift+Tab during a session to cycle modes, start with
claude --permission-mode <mode>, or setpermissions.defaultModein settings. - Is bypassPermissions safe?
- Anthropic recommends it only in isolated containers or VMs, because Claude can then act without asking. Deny rules still apply.
- What mode does `claude -p` use?
- It starts in
default(Manual) unless you pass--permission-mode. Since nobody can answer a prompt, pre-approve tools or pick a mode that fits the job.
Related
- GuideChoose the right permission level for each workflow stepThe three step permission levels, the exact Claude Code flags and Codex sandboxes they map to, their caveats and when to use each.
- GlossaryCodex sandbox modesThe settings that limit what Codex's commands can touch: read-only, workspace-write (the usual default) or danger-full-access.
- GlossaryHeadless modeRunning Claude Code (`claude -p`) or Codex (`codex exec`) from a command or script, with no interactive interface.
- DocsWorkflowsScheduled prompts, check-ins on a chat, run history, limits