Cowork’s Manual vs Auto vs Skip in 2026: What Each Won’t Do

Auto safety-checks every action, refuses to delete files or make schedules, and costs more usage. Skip checks nothing. The decision table.

Cowork has three permission modes now, not two. Most rollout guides still describe two, and the old labels — “Ask before acting” and “Act without asking” — are gone.

That matters because the mode you pick is the single dial that decides whether your agent nags you into rubber-stamping everything, quietly blocks a hijacked instruction on its own, or runs across your files with nothing watching it at all. Here is the decision, on one screen, before the detail.

Manual — asks before every action; you are the only safety check; approves nothing on its own; baseline usage cost. Best for new connectors, money, outbound messages, and files you can’t lose.

Auto — never stops to ask, but safety-checks every action and blocks, reroutes, or escalates anything unsafe; refuses to auto-approve the sensitive actions (deleting files, granting folder access, or creating schedules); costs more usage. Best for a scoped, trusted connector set you want to run unattended.

Skip — never asks and never checks; nothing watches what it does; baseline cost. Best only for fully trusted, low-consequence work you’re supervising in real time.

Every figure here comes from Anthropic’s own Get started with Cowork article and the Cowork architecture overview. Now the part the table…