GitHub Copilot supports server-to-server authentication for GitHub Apps, in public preview

GitHub says services and agents built with the Copilot SDK can now make requests on behalf of an organization through a GitHub App, without relying on a signed-in user's credentials. The feature is in public preview.

• How it works: a developer gives a GitHub App the read-only Copilot Requests organization permission, installs it on an organization, and passes a short-lived installation access token to the Copilot SDK.
• Billing and controls: usage is attributed and billed to the organization that owns the installation, and the organization's model policies, budgets and spending controls apply.
• Oversight: organization owners can review which apps have access, identify app-attributed usage in AI usage CSV reports through the app_client_id field, and stop an app's access by suspending or uninstalling it.