Developers building services and agents with the GitHub Copilot SDK can now make requests on behalf of an organization without a signed-in user’s credentials. Server-to-server authentication is available in public preview for GitHub Apps installed on organizations, allowing automation to authenticate independently of an individual user.
Setup requires the read-only Copilot Requests organization permission, an app installation on the organization, and a short-lived installation access token passed to the SDK. Usage is attributed and billed to the organization that owns the installation, with its model policies, budgets and spending controls applied.
Organization owners can track app-attributed usage through the app_client_id field in AI usage CSV reports. They can stop access by suspending or uninstalling the app.
Choose a sign-in method or comment as a guest below.