Managing GitHub Copilot cloud agent in your enterprise

Enable members of your enterprise to use Copilot cloud agent and control the repositories where it is available.

Who can use this feature?

Enterprise owners

Copilot cloud agent is available with the GitHub Copilot Pro, GitHub Copilot Pro+, GitHub Copilot Business and GitHub Copilot Enterprise plans. The agent is available in all repositories stored on GitHub, except repositories owned by managed user accounts and where it has been explicitly disabled.
Sign up for Copilot

In this article

Note

For an introduction to Copilot cloud agent, see About GitHub Copilot cloud agent.

Prerequisites

Enabling Copilot cloud agent for your Copilot subscribers

Copilot cloud agent and use of third-party MCP servers are blocked by default for users to whom you have assigned a Copilot license. You can allow members to use these features from the AI Controls tab for your enterprise. See Managing policies and features for GitHub Copilot in your enterprise.

  • On the "Agents" page, click Copilot cloud agent, then select Enabled everywhere or Let organizations decide.
  • On the "MCP" page, for the "MCP servers in Copilot" policy, select Enabled everywhere or Let organizations decide.

Next steps

  • If you selected Enabled everywhere, tell organization owners that Copilot cloud agent is enabled for all members. By default, the agent will be available in all repositories, but it is possible to opt out some or all repositories.
  • If you selected Let organizations decide, discuss member enablement with organization owners.

For more information, see Adding GitHub Copilot cloud agent to your organization.

Disabling Copilot cloud agent in your repositories

Copilot policies, like the "Copilot cloud agent" and "MCP servers on GitHub.com" policies described above, affect only the users you assign a Copilot license to.

If there are GitHub Copilot Pro+ users with access to your enterprise's repositories, they will be able to use Copilot cloud agent and will not be restricted by your policies.

You can choose to stop anyone using the agent in some or all of your repositories using organization-level settings. For more information, see Adding GitHub Copilot cloud agent to your organization.

Alternatively, you can disable the agent for all repositories owned by your enterprise.

  1. Navigate to your enterprise. For example, from the Enterprises page on GitHub.com.
  2. At the top of the page, click AI controls.
  3. In the "Installed Agents" section, click Copilot cloud agent.
  4. In the "Copilot cloud agent" section, next to "Block Copilot cloud agent in all repositories owned by ENTERPRISE-NAME", click the toggle.