Act on this, mostly signal

Claude auto mode uses email connectors despite Always ask

What to do

Review which connectors auto mode can reach, and remove any you do not need.

Why

One author found Fastmail was used despite the Always ask setting, which Anthropic says is expected.

What the research found

Author found Claude auto mode uses connectors (here Fastmail) despite their "Always ask" setting, which Anthropic says is expected; the author removed the connector. Engineers using email connectors should review auto-mode exposure.

Claims and how well the evidence supports them

Claude auto mode can use connectors even when their permissions are set to Always ask 96%
Anthropic said this behavior is expected 98%
Email connectors can expose sensitive data such as 2FA codes to prompt injection 93%

Evidence

blog.baldassari.me https://blog.baldassari.me/auto-mode-can-use-connectors

Actionability rated high.