{"slug": "github-copilot-supports-server-to-server-authentication", "title": "GitHub Copilot supports server-to-server authentication", "summary": "GitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, released in public preview, letting services and agents built with the GitHub Copilot SDK make requests on behalf of an organization without a signed-in user's credentials. Developers grant a GitHub App the read-only `Copilot Requests` organization permission, install it on an organization, and pass a short-lived installation access token to the Copilot SDK, with usage attributed and billed to the owning organization under its model policies, budgets and spending controls. Organization owners can review which apps have access, identify app-attributed usage in AI usage CSV reports via the `app_client_id` field, and revoke access by suspending or uninstalling an app.", "body_md": "# GitHub Copilot supports server-to-server authentication\n\nGitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, available in public preview. Services and agents built with the GitHub Copilot SDK can now make requests on behalf of an organization without relying on a signed-in user’s credentials. This workload-owned identity helps agents and automated services operate reliably at larger scale without tying their authentication or usage to individual users.\n\nDevelopers can give a GitHub App the read-only `Copilot Requests` organization permission, install the app on an organization, and pass a short-lived installation access token to the Copilot SDK. Usage is attributed and billed to the organization that owns the installation. The organization’s model policies, budgets, and spending controls apply.\n\nOrganization owners can review which apps have access, identify app-attributed usage in AI usage CSV reports using the `app_client_id` field, and stop an app’s access by suspending or uninstalling it.\n\nTo get started, see [server-to-server authentication for the GitHub Copilot SDK](https://docs.github.com/copilot/how-tos/copilot-sdk/auth/server-to-server-tokens) and [managing GitHub App access to your organization’s Copilot](https://docs.github.com/copilot/how-tos/administer-copilot/manage-for-organization/manage-app-copilot-access).", "url": "https://wpnews.pro/news/github-copilot-supports-server-to-server-authentication", "canonical_source": "https://github.blog/changelog/2026-10-27-github-copilot-supports-server-to-server-authentication", "published_at": "2026-10-27 21:36:55+00:00", "updated_at": "2026-10-27 22:13:58.630432+00:00", "lang": "en", "topics": ["ai-agents", "developer-tools", "ai-products", "artificial-intelligence"], "entities": ["GitHub", "GitHub Copilot", "GitHub Copilot SDK", "GitHub Apps"], "also_reported_by": [], "alternates": {"html": "https://wpnews.pro/news/github-copilot-supports-server-to-server-authentication", "markdown": "https://wpnews.pro/news/github-copilot-supports-server-to-server-authentication.md", "text": "https://wpnews.pro/news/github-copilot-supports-server-to-server-authentication.txt", "jsonld": "https://wpnews.pro/news/github-copilot-supports-server-to-server-authentication.jsonld"}}