Extremos de API REST para controles de IA empresariales

Get model policies for agent apps

Use this endpoint to retrieve Copilot model policies for agent apps. The response shows which model settings can be changed and which are controlled by enterprise policy.

For models whose settings can be changed, the response shows the configured setting or optional if no setting has been configured. For models controlled by enterprise policy, it shows the enterprise setting or the applicable default. These settings do not necessarily determine whether an individual user can access a model.

Enterprise owners and users with the read_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the read:enterprise scope to use this endpoint.

Tokens de acceso granulares para "Get model policies for agent apps"

Este punto de conexión funciona con los siguientes tipos de token pormenorizados:

El token pormenorizado debe tener el siguiente conjunto de permisos:

"Enterprise AI controls" enterprise permissions (read)

Parámetros para "Get model policies for agent apps"

Encabezados
Nombre, Tipo, Descripción
`accept` string Setting to `application/vnd.github+json` is recommended.

Parámetros de ruta
Nombre, Tipo, Descripción
`enterprise` string Obligatorio The slug version of the enterprise name.

Códigos de estado de respuesta HTTP para "Get model policies for agent apps"

código de estado	Descripción
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`503`	Service unavailable

Ejemplos de código para "Get model policies for agent apps"

Si accede a GitHub en GHE.com, reemplace api.github.com por el subdominio dedicado de la empresa en api.SUBDOMAIN.ghe.com.

Ejemplos de solicitud

Select the example type

get/enterprises/{enterprise}/copilot/apps/model-policies

curl -L \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/copilot/apps/model-policies

OK

Status: 200

{
  "models": [
    {
      "model_name": "gpt-5.6-sol",
      "display_name": "OpenAI GPT-5.6 Sol",
      "policy_state": "optional",
      "enterprise_policy_state": "delegate_to_teams_and_apps",
      "editable": true
    }
  ]
}

Update model policies for enterprise apps

Use this endpoint to set Copilot model policies for agent apps. Set a model to enabled to configure an apps policy, or to optional to remove the stored apps policy for that model. Locked models cannot be updated.

Returns the apps policy state representation, including enterprise policy and editability. These states are not a final access decision for a user.

Enterprise owners and users with the write_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the admin:enterprise scope to use this endpoint.

Tokens de acceso granulares para "Update model policies for enterprise apps"

Este punto de conexión funciona con los siguientes tipos de token pormenorizados:

El token pormenorizado debe tener el siguiente conjunto de permisos:

"Enterprise AI controls" enterprise permissions (write)

Parámetros para "Update model policies for enterprise apps"

Encabezados
Nombre, Tipo, Descripción
`accept` string Setting to `application/vnd.github+json` is recommended.

Parámetros de ruta
Nombre, Tipo, Descripción
`enterprise` string Obligatorio The slug version of the enterprise name.

Nombre, Tipo, Descripción

models array of objects Obligatorio

Properties of models

Nombre, Tipo, Descripción
`model_name` string Obligatorio
`policy_state` string Obligatorio Use `optional` to remove the apps policy. Puede ser uno de los siguientes: `enabled`, `disabled`, `optional`

Códigos de estado de respuesta HTTP para "Update model policies for enterprise apps"

código de estado	Descripción
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`422`	Validation failed, or the endpoint has been spammed.
`503`	Service unavailable

Ejemplos de código para "Update model policies for enterprise apps"

Si accede a GitHub en GHE.com, reemplace api.github.com por el subdominio dedicado de la empresa en api.SUBDOMAIN.ghe.com.

Ejemplo de solicitud

patch/enterprises/{enterprise}/copilot/apps/model-policies

curl -L \
  -X PATCH \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/copilot/apps/model-policies \
  -d '{"models":[{"model_name":"gpt-5.6-sol","policy_state":"enabled"}]}'

OK

Status: 200

{
  "models": [
    {
      "model_name": "gpt-5.6-sol",
      "display_name": "OpenAI GPT-5.6 Sol",
      "policy_state": "enabled",
      "enterprise_policy_state": "delegate_to_teams_and_apps",
      "editable": true
    }
  ]
}

Get feature policies for an enterprise

Note

This endpoint is in public preview and is subject to change.

Use this endpoint to retrieve the Copilot default availability policy for new features and clients for an enterprise. A policy state of delegate_to_organizations means each organization sets its own default.

Enterprise owners and users with the read_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the read:enterprise scope to use this endpoint.

Tokens de acceso granulares para "Get feature policies for an enterprise"

Este punto de conexión funciona con los siguientes tipos de token pormenorizados:

El token pormenorizado debe tener el siguiente conjunto de permisos:

"Enterprise AI controls" enterprise permissions (read)

Parámetros para "Get feature policies for an enterprise"

Encabezados
Nombre, Tipo, Descripción
`accept` string Setting to `application/vnd.github+json` is recommended.

Parámetros de ruta
Nombre, Tipo, Descripción
`enterprise` string Obligatorio The slug version of the enterprise name.

Códigos de estado de respuesta HTTP para "Get feature policies for an enterprise"

código de estado	Descripción
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found

Ejemplos de código para "Get feature policies for an enterprise"

Si accede a GitHub en GHE.com, reemplace api.github.com por el subdominio dedicado de la empresa en api.SUBDOMAIN.ghe.com.

Ejemplo de solicitud

get/enterprises/{enterprise}/copilot/feature-policies

curl -L \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/copilot/feature-policies

OK

Status: 200

{
  "default_availability": {
    "policy_state": "enabled"
  }
}

Update feature policies for an enterprise

Note

This endpoint is in public preview and is subject to change.

Use this endpoint to update the Copilot default availability policy for new features and clients for an enterprise. Use delegate_to_organizations to let each organization set its own default. Enterprises without organizations cannot use delegate_to_organizations.

Changing this policy does not change any Copilot feature or client policy that has already been set.

Enterprise owners and users with the write_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the admin:enterprise scope to use this endpoint.

Tokens de acceso granulares para "Update feature policies for an enterprise"

Este punto de conexión funciona con los siguientes tipos de token pormenorizados:

El token pormenorizado debe tener el siguiente conjunto de permisos:

"Enterprise AI controls" enterprise permissions (write)

Parámetros para "Update feature policies for an enterprise"

Encabezados
Nombre, Tipo, Descripción
`accept` string Setting to `application/vnd.github+json` is recommended.

Parámetros de ruta
Nombre, Tipo, Descripción
`enterprise` string Obligatorio The slug version of the enterprise name.

Nombre, Tipo, Descripción

default_availability object Obligatorio

Properties of default_availability

Nombre, Tipo, Descripción
`policy_state` string Obligatorio The enterprise default policy applied to newly released Copilot features and clients. `delegate_to_organizations` is only accepted for enterprises that manage Copilot through organizations. Puede ser uno de los siguientes: `enabled`, `disabled`, `delegate_to_organizations`

Códigos de estado de respuesta HTTP para "Update feature policies for an enterprise"

código de estado	Descripción
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`422`	Validation failed, or the endpoint has been spammed.

Ejemplos de código para "Update feature policies for an enterprise"

Si accede a GitHub en GHE.com, reemplace api.github.com por el subdominio dedicado de la empresa en api.SUBDOMAIN.ghe.com.

Ejemplo de solicitud

patch/enterprises/{enterprise}/copilot/feature-policies

curl -L \
  -X PATCH \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/copilot/feature-policies \
  -d '{"default_availability":{"policy_state":"enabled"}}'

OK

Status: 200

{
  "default_availability": {
    "policy_state": "enabled"
  }
}

Get model policies for an enterprise

Use this endpoint to retrieve Copilot model policies for an enterprise. For enterprises that manage Copilot through organizations, delegated models use the policy state of delegate_to_organizations.

Enterprise owners and users with the read_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the read:enterprise scope to use this endpoint.

Tokens de acceso granulares para "Get model policies for an enterprise"

Este punto de conexión funciona con los siguientes tipos de token pormenorizados:

El token pormenorizado debe tener el siguiente conjunto de permisos:

"Enterprise AI controls" enterprise permissions (read)

Parámetros para "Get model policies for an enterprise"

Encabezados
Nombre, Tipo, Descripción
`accept` string Setting to `application/vnd.github+json` is recommended.

Parámetros de ruta
Nombre, Tipo, Descripción
`enterprise` string Obligatorio The slug version of the enterprise name.

Códigos de estado de respuesta HTTP para "Get model policies for an enterprise"

código de estado	Descripción
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`503`	Service unavailable

Ejemplos de código para "Get model policies for an enterprise"

Si accede a GitHub en GHE.com, reemplace api.github.com por el subdominio dedicado de la empresa en api.SUBDOMAIN.ghe.com.

Ejemplo de solicitud

get/enterprises/{enterprise}/copilot/model-policies

curl -L \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/copilot/model-policies

OK

Status: 200

{
  "default_availability": {
    "policy_state": "enabled"
  },
  "models": [
    {
      "model_name": "gpt-5.6-sol",
      "display_name": "OpenAI GPT-5.6 Sol",
      "policy_state": "enabled"
    }
  ]
}

Update model policies for an enterprise

Use this endpoint to update Copilot model policies for an enterprise. For enterprises that manage Copilot through organizations, use delegate_to_organizations to delegate a model or default availability. Enterprises without organizations cannot use delegate_to_organizations.

Enterprise owners and users with the write_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the admin:enterprise scope to use this endpoint.

Tokens de acceso granulares para "Update model policies for an enterprise"

Este punto de conexión funciona con los siguientes tipos de token pormenorizados:

El token pormenorizado debe tener el siguiente conjunto de permisos:

"Enterprise AI controls" enterprise permissions (write)

Parámetros para "Update model policies for an enterprise"

Encabezados
Nombre, Tipo, Descripción
`accept` string Setting to `application/vnd.github+json` is recommended.

Parámetros de ruta
Nombre, Tipo, Descripción
`enterprise` string Obligatorio The slug version of the enterprise name.

Nombre, Tipo, Descripción

default_availability object

Properties of default_availability

Nombre, Tipo, Descripción
`policy_state` string Obligatorio `delegate_to_organizations` is only accepted for enterprises that manage Copilot through organizations. Puede ser uno de los siguientes: `enabled`, `disabled`, `delegate_to_organizations`

models array of objects

Properties of models

Nombre, Tipo, Descripción
`model_name` string Obligatorio
`policy_state` string Obligatorio `delegate_to_organizations` is only accepted for enterprises that manage Copilot through organizations. Puede ser uno de los siguientes: `enabled`, `disabled`, `delegate_to_teams_and_apps`, `delegate_to_organizations`

Códigos de estado de respuesta HTTP para "Update model policies for an enterprise"

código de estado	Descripción
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`422`	Validation failed, or the endpoint has been spammed.
`503`	Service unavailable

Ejemplos de código para "Update model policies for an enterprise"

Si accede a GitHub en GHE.com, reemplace api.github.com por el subdominio dedicado de la empresa en api.SUBDOMAIN.ghe.com.

Ejemplo de solicitud

patch/enterprises/{enterprise}/copilot/model-policies

curl -L \
  -X PATCH \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/copilot/model-policies \
  -d '{"default_availability":{"policy_state":"enabled"},"models":[{"model_name":"gpt-5.6-sol","policy_state":"enabled"}]}'

OK

Status: 200

{
  "default_availability": {
    "policy_state": "enabled"
  },
  "models": [
    {
      "model_name": "gpt-5.6-sol",
      "display_name": "OpenAI GPT-5.6 Sol",
      "policy_state": "enabled"
    }
  ]
}

Get model policies for an enterprise team

Use this endpoint to retrieve Copilot model policy states for an enterprise team, along with the corresponding enterprise-level policies. The response shows which model policies the team can update based on enterprise policy and the available team policy controls.

For models the team can update, the response shows the team’s configured value or optional if the team has not set one. For locked models, it shows the enterprise’s explicit value or the applicable default availability for eligible models. These states are not a final access decision for a user.

Enterprise owners and users with the read_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the read:enterprise scope to use this endpoint.

Tokens de acceso granulares para "Get model policies for an enterprise team"

Este punto de conexión funciona con los siguientes tipos de token pormenorizados:

El token pormenorizado debe tener el siguiente conjunto de permisos:

"Enterprise AI controls" enterprise permissions (read)

Parámetros para "Get model policies for an enterprise team"

Encabezados
Nombre, Tipo, Descripción
`accept` string Setting to `application/vnd.github+json` is recommended.

Parámetros de ruta
Nombre, Tipo, Descripción
`enterprise` string Obligatorio The slug version of the enterprise name.
`team_id` integer Obligatorio The unique identifier of the team.

Códigos de estado de respuesta HTTP para "Get model policies for an enterprise team"

código de estado	Descripción
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`503`	Service unavailable

Ejemplos de código para "Get model policies for an enterprise team"

Si accede a GitHub en GHE.com, reemplace api.github.com por el subdominio dedicado de la empresa en api.SUBDOMAIN.ghe.com.

Ejemplos de solicitud

Select the example type

get/enterprises/{enterprise}/teams/{team_id}/copilot/model-policies

curl -L \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/teams/TEAM_ID/copilot/model-policies

OK

Status: 200

{
  "models": [
    {
      "model_name": "gpt-5.6-sol",
      "display_name": "OpenAI GPT-5.6 Sol",
      "policy_state": "optional",
      "enterprise_policy_state": "delegate_to_teams_and_apps",
      "editable": true
    }
  ]
}

Update model policies for an enterprise team

Use this endpoint to update Copilot model policies for an enterprise team. Only editable model policies can be updated.

Set a model to enabled to configure a team policy, or to optional to clear the team’s policy for that model. Locked models cannot be updated.

The response contains the same policy state information as the corresponding GET endpoint, including enterprise policies and whether each model policy can be updated. These states do not necessarily determine whether an individual user can access a model.

Enterprise owners and users with the write_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the admin:enterprise scope to use this endpoint.

Tokens de acceso granulares para "Update model policies for an enterprise team"

Este punto de conexión funciona con los siguientes tipos de token pormenorizados:

El token pormenorizado debe tener el siguiente conjunto de permisos:

"Enterprise AI controls" enterprise permissions (write)

Parámetros para "Update model policies for an enterprise team"

Encabezados
Nombre, Tipo, Descripción
`accept` string Setting to `application/vnd.github+json` is recommended.

Parámetros de ruta
Nombre, Tipo, Descripción
`enterprise` string Obligatorio The slug version of the enterprise name.
`team_id` integer Obligatorio The unique identifier of the team.

Nombre, Tipo, Descripción

models array of objects Obligatorio

Properties of models

Nombre, Tipo, Descripción
`model_name` string Obligatorio
`policy_state` string Obligatorio Use `optional` to remove the team's policy. Puede ser uno de los siguientes: `enabled`, `disabled`, `optional`

Códigos de estado de respuesta HTTP para "Update model policies for an enterprise team"

código de estado	Descripción
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`422`	Validation failed, or the endpoint has been spammed.
`503`	Service unavailable

Ejemplos de código para "Update model policies for an enterprise team"

Si accede a GitHub en GHE.com, reemplace api.github.com por el subdominio dedicado de la empresa en api.SUBDOMAIN.ghe.com.

Ejemplo de solicitud

patch/enterprises/{enterprise}/teams/{team_id}/copilot/model-policies

curl -L \
  -X PATCH \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/teams/TEAM_ID/copilot/model-policies \
  -d '{"models":[{"model_name":"gpt-5.6-sol","policy_state":"enabled"}]}'

OK

Status: 200

{
  "models": [
    {
      "model_name": "gpt-5.6-sol",
      "display_name": "OpenAI GPT-5.6 Sol",
      "policy_state": "enabled",
      "enterprise_policy_state": "delegate_to_teams_and_apps",
      "editable": true
    }
  ]
}