GitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, available in public preview. Services and agents built with the GitHub Copilot SDK can now make requests on behalf of an organization without relying on a signed-in user's credentials. This workload-owned identity helps agents and automated services operate reliably at larger scale without tying their authentication or usage to individual users. Developers can give a GitHub App the read-only Copilot Requests organization permission, install the app on an organization, and pass a short-lived installation access token to the Copilot SDK. Usage is attributed and billed to the organization that owns the installation. The organization's model policies, budgets, and spending controls apply. Organization owners can review which apps have access, identify app-attributed usage in AI usage CSV reports using the app_client_id field, and stop an app's access by suspending or uninstalling it. To get started, see server-to-server authentication for the GitHub Copilot SDK and managing GitHub App access to your organization's Copilot . copilot Share Copied Shared Related Posts Oct.26 Release GitHub Copilot assisted permissions generally available copilot Oct.26 Release GPT-6.1 Terra in GitHub Copilot copilot Oct.23 Improvement Usage metrics API adds usage from tools like OpenCode account management copilot enterprise management tools ... +2 Oct.23 Improvement Turn notifications into code with GitHub Copilot in Teams client apps copilot ... +1 Oct.22 Release GitHub Copilot in Visual Studio — September update copilot Oct.22 Improvement Custom skills, agents, and MCP servers in usage metrics API account management copilot enterprise management tools ... +2 Oct.22 Improvement Global default for Copilot features generally available copilot enterprise management tools ... +1 Oct.22 Improvement <a data-targets="reactive-line-state.link" href="https://github.blog/changelog/2026-10-22-industry-comparisons-in-the-copilot-
GitHub Copilot: supports server-to-server authentication
Released · GitHub / Microsoft