always_allow, always_ask, and Now auto: Claude's Managed Agents Grows a Middle Option
Anthropic's claude-api skill documents a new auto permission policy for Managed Agents that runs low-risk tool calls, denies high-risk ones automatically, and pauses for human approval only when the risk is indeterminate.
What it is
An update to Anthropic's claude-api Claude Agent Skill documenting a third Managed Agents permission policy alongside always_allow and always_ask.
What it does
The `auto` policy evaluates each tool call and produces one of three outcomes: it runs, it's denied as high-risk with an error tool result while the session keeps going, or it pauses for approval when the evaluation is indeterminate. The commit documents the new `evaluated_permission` and `evaluation` fields on tool-use events and explicitly warns this is not a substitute for a human checkpoint. See the commit for the config example.
Why it matters
Unattended Managed Agents deployments previously had to choose between blanket auto-approval or halting on every ambiguous call; a graded middle policy lets low-risk work continue while genuinely uncertain actions still get a human in the loop.