Privacy
AutoMode has no server, no account and no telemetry. Its judge calls go through your own Claude login. Every file it keeps, and how long it stays.
AutoMode runs on your machine. It has no server and no account, and it collects no telemetry. Nobody, including the authors, receives your data from AutoMode.
What leaves your machine
AutoMode has no network code of its own. Its model calls go through Claude Code, on your own Claude login, to the same provider as the rest of your session and under the same terms.
- The judges. For each prompt, AutoMode calls Haiku to pick a route. The call holds your prompt text, a short part of the last reply, and state lines about the session.
- Compaction. When AutoMode compacts a chat on Haiku, the chat text goes to that model.
- Delegated reads. With
delegation: on, eachextractcall sends the named files and one question to Haiku. It is off by default, and it reads only files your Read permissions allow. - The workflow agents. They run as ordinary Claude Code subagents.
What AutoMode stores
Everything is in ~/.claude/plugins/data/automode/, on your machine.
| Data | Holds | Kept for |
|---|---|---|
learned-<project hash>.json | Route learning: task ids, tier and model labels, outcomes, times. No prompt text. | Until you delete it. It keeps the last 200 tasks. |
records/ | Routing decisions and outcomes: ids, labels, tokens, costs. No prompt text. | Until you delete it. A file rotates at 10 MB. |
guardian/ | Guardian events: ids, labels, numbers and the paths of saved outputs. | 30 days |
checkpoints/ | The task state for a handoff after /clear: the first 500 characters of your request, file paths, check commands, the git branch and the changed files. | 7 days |
outputs/ | The full text of long tool outputs that the guardian shortened. | 3 days |
first-prefix.json, calibration.json | Prompt cache sizes per project, and your own calibration. | Until you delete them. |
The guardian removes secret-shaped text from checkpoints and from check commands before it stores them. Files in outputs/ hold the raw output, so they can hold whatever the command printed. AutoMode sets the guardian's records and checkpoints to owner-only access where the system allows it.
With debugLog on, AutoMode also writes judge-log.jsonl in the plugin folder. It is off by default.
Remove your data
Delete ~/.claude/plugins/data/automode/. To stop AutoMode from recording decisions, set "recordDecisions": false in your config.json.
Last updated on
Review it before you install it
Every mods API call AutoMode makes, and why: what it reads and writes, the four commands it runs, the calls it never makes, and how to check it yourself.
Organizations and managed settings
AutoMode where an organization manages Claude Code: which hooks the built-in guard skips, what still works, and how to run it as an organization mod.