企业 AI 管控的 REST API 端点 - GitHub Enterprise Cloud Docs

Get model policies for agent apps

Use this endpoint to retrieve Copilot model policies for agent apps. The response shows which model settings can be changed and which are controlled by enterprise policy.

For models whose settings can be changed, the response shows the configured setting or optional if no setting has been configured. For models controlled by enterprise policy, it shows the enterprise setting or the applicable default. These settings do not necessarily determine whether an individual user can access a model.

Enterprise owners and users with the read_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the read:enterprise scope to use this endpoint.

“Get model policies for agent apps”的细粒度访问令牌

此端点支持以下精细令牌类型:

细粒度令牌必须具有以下权限集:

"Enterprise AI controls" enterprise permissions (read)

“”Get model policies for agent apps 的参数

标头
名称, 类型, 说明
`accept` string Setting to `application/vnd.github+json` is recommended.

路径参数
名称, 类型, 说明
`enterprise` string 必须 The slug version of the enterprise name.

“Get model policies for agent apps”的 HTTP 响应状态代码

状态代码	说明
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`503`	Service unavailable

“Get model policies for agent apps”的代码示例

如果你在 GHE.com 上访问 GitHub，请将 api.github.com 替换为企业的专用子域，位于 api.SUBDOMAIN.ghe.com。

请求示例

Select the example type

get/enterprises/{enterprise}/copilot/apps/model-policies

curl -L \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/copilot/apps/model-policies

OK

Status: 200

{
  "models": [
    {
      "model_name": "gpt-5.6-sol",
      "display_name": "OpenAI GPT-5.6 Sol",
      "policy_state": "optional",
      "enterprise_policy_state": "delegate_to_teams_and_apps",
      "editable": true
    }
  ]
}

Update model policies for enterprise apps

Use this endpoint to set Copilot model policies for agent apps. Set a model to enabled to configure an apps policy, or to optional to remove the stored apps policy for that model. Locked models cannot be updated.

Returns the apps policy state representation, including enterprise policy and editability. These states are not a final access decision for a user.

Enterprise owners and users with the write_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the admin:enterprise scope to use this endpoint.

“Update model policies for enterprise apps”的细粒度访问令牌

此端点支持以下精细令牌类型:

细粒度令牌必须具有以下权限集:

"Enterprise AI controls" enterprise permissions (write)

“”Update model policies for enterprise apps 的参数

标头
名称, 类型, 说明
`accept` string Setting to `application/vnd.github+json` is recommended.

路径参数
名称, 类型, 说明
`enterprise` string 必须 The slug version of the enterprise name.

名称, 类型, 说明

models array of objects 必须

Properties of models

名称, 类型, 说明
`model_name` string 必须
`policy_state` string 必须 Use `optional` to remove the apps policy. 可以是以下选项之一: `enabled`, `disabled`, `optional`

“Update model policies for enterprise apps”的 HTTP 响应状态代码

状态代码	说明
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`422`	Validation failed, or the endpoint has been spammed.
`503`	Service unavailable

“Update model policies for enterprise apps”的代码示例

如果你在 GHE.com 上访问 GitHub，请将 api.github.com 替换为企业的专用子域，位于 api.SUBDOMAIN.ghe.com。

请求示例

patch/enterprises/{enterprise}/copilot/apps/model-policies

curl -L \
  -X PATCH \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/copilot/apps/model-policies \
  -d '{"models":[{"model_name":"gpt-5.6-sol","policy_state":"enabled"}]}'

OK

Status: 200

{
  "models": [
    {
      "model_name": "gpt-5.6-sol",
      "display_name": "OpenAI GPT-5.6 Sol",
      "policy_state": "enabled",
      "enterprise_policy_state": "delegate_to_teams_and_apps",
      "editable": true
    }
  ]
}

Get feature policies for an enterprise

Note

This endpoint is in public preview and is subject to change.

Use this endpoint to retrieve the Copilot default availability policy for new features and clients for an enterprise. A policy state of delegate_to_organizations means each organization sets its own default.

Enterprise owners and users with the read_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the read:enterprise scope to use this endpoint.

“Get feature policies for an enterprise”的细粒度访问令牌

此端点支持以下精细令牌类型:

细粒度令牌必须具有以下权限集:

"Enterprise AI controls" enterprise permissions (read)

“”Get feature policies for an enterprise 的参数

标头
名称, 类型, 说明
`accept` string Setting to `application/vnd.github+json` is recommended.

路径参数
名称, 类型, 说明
`enterprise` string 必须 The slug version of the enterprise name.

“Get feature policies for an enterprise”的 HTTP 响应状态代码

状态代码	说明
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found

“Get feature policies for an enterprise”的代码示例

如果你在 GHE.com 上访问 GitHub，请将 api.github.com 替换为企业的专用子域，位于 api.SUBDOMAIN.ghe.com。

请求示例

get/enterprises/{enterprise}/copilot/feature-policies

curl -L \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/copilot/feature-policies

OK

Status: 200

{
  "default_availability": {
    "policy_state": "enabled"
  }
}

Update feature policies for an enterprise

Note

This endpoint is in public preview and is subject to change.

Use this endpoint to update the Copilot default availability policy for new features and clients for an enterprise. Use delegate_to_organizations to let each organization set its own default. Enterprises without organizations cannot use delegate_to_organizations.

Changing this policy does not change any Copilot feature or client policy that has already been set.

Enterprise owners and users with the write_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the admin:enterprise scope to use this endpoint.

“Update feature policies for an enterprise”的细粒度访问令牌

此端点支持以下精细令牌类型:

细粒度令牌必须具有以下权限集:

"Enterprise AI controls" enterprise permissions (write)

“”Update feature policies for an enterprise 的参数

标头
名称, 类型, 说明
`accept` string Setting to `application/vnd.github+json` is recommended.

路径参数
名称, 类型, 说明
`enterprise` string 必须 The slug version of the enterprise name.

名称, 类型, 说明

default_availability object 必须

Properties of default_availability

名称, 类型, 说明
`policy_state` string 必须 The enterprise default policy applied to newly released Copilot features and clients. `delegate_to_organizations` is only accepted for enterprises that manage Copilot through organizations. 可以是以下选项之一: `enabled`, `disabled`, `delegate_to_organizations`

“Update feature policies for an enterprise”的 HTTP 响应状态代码

状态代码	说明
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`422`	Validation failed, or the endpoint has been spammed.

“Update feature policies for an enterprise”的代码示例

如果你在 GHE.com 上访问 GitHub，请将 api.github.com 替换为企业的专用子域，位于 api.SUBDOMAIN.ghe.com。

请求示例

patch/enterprises/{enterprise}/copilot/feature-policies

curl -L \
  -X PATCH \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/copilot/feature-policies \
  -d '{"default_availability":{"policy_state":"enabled"}}'

OK

Status: 200

{
  "default_availability": {
    "policy_state": "enabled"
  }
}

Get model policies for an enterprise

Use this endpoint to retrieve Copilot model policies for an enterprise. For enterprises that manage Copilot through organizations, delegated models use the policy state of delegate_to_organizations.

Enterprise owners and users with the read_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the read:enterprise scope to use this endpoint.

“Get model policies for an enterprise”的细粒度访问令牌

此端点支持以下精细令牌类型:

细粒度令牌必须具有以下权限集:

"Enterprise AI controls" enterprise permissions (read)

“”Get model policies for an enterprise 的参数

标头
名称, 类型, 说明
`accept` string Setting to `application/vnd.github+json` is recommended.

路径参数
名称, 类型, 说明
`enterprise` string 必须 The slug version of the enterprise name.

“Get model policies for an enterprise”的 HTTP 响应状态代码

状态代码	说明
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`503`	Service unavailable

“Get model policies for an enterprise”的代码示例

如果你在 GHE.com 上访问 GitHub，请将 api.github.com 替换为企业的专用子域，位于 api.SUBDOMAIN.ghe.com。

请求示例

get/enterprises/{enterprise}/copilot/model-policies

curl -L \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/copilot/model-policies

OK

Status: 200

{
  "default_availability": {
    "policy_state": "enabled"
  },
  "models": [
    {
      "model_name": "gpt-5.6-sol",
      "display_name": "OpenAI GPT-5.6 Sol",
      "policy_state": "enabled"
    }
  ]
}

Update model policies for an enterprise

Use this endpoint to update Copilot model policies for an enterprise. For enterprises that manage Copilot through organizations, use delegate_to_organizations to delegate a model or default availability. Enterprises without organizations cannot use delegate_to_organizations.

Enterprise owners and users with the write_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the admin:enterprise scope to use this endpoint.

“Update model policies for an enterprise”的细粒度访问令牌

此端点支持以下精细令牌类型:

细粒度令牌必须具有以下权限集:

"Enterprise AI controls" enterprise permissions (write)

“”Update model policies for an enterprise 的参数

标头
名称, 类型, 说明
`accept` string Setting to `application/vnd.github+json` is recommended.

路径参数
名称, 类型, 说明
`enterprise` string 必须 The slug version of the enterprise name.

名称, 类型, 说明

default_availability object

Properties of default_availability

名称, 类型, 说明
`policy_state` string 必须 `delegate_to_organizations` is only accepted for enterprises that manage Copilot through organizations. 可以是以下选项之一: `enabled`, `disabled`, `delegate_to_organizations`

models array of objects

Properties of models

名称, 类型, 说明
`model_name` string 必须
`policy_state` string 必须 `delegate_to_organizations` is only accepted for enterprises that manage Copilot through organizations. 可以是以下选项之一: `enabled`, `disabled`, `delegate_to_teams_and_apps`, `delegate_to_organizations`

“Update model policies for an enterprise”的 HTTP 响应状态代码

状态代码	说明
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`422`	Validation failed, or the endpoint has been spammed.
`503`	Service unavailable

“Update model policies for an enterprise”的代码示例

如果你在 GHE.com 上访问 GitHub，请将 api.github.com 替换为企业的专用子域，位于 api.SUBDOMAIN.ghe.com。

请求示例

patch/enterprises/{enterprise}/copilot/model-policies

curl -L \
  -X PATCH \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/copilot/model-policies \
  -d '{"default_availability":{"policy_state":"enabled"},"models":[{"model_name":"gpt-5.6-sol","policy_state":"enabled"}]}'

OK

Status: 200

{
  "default_availability": {
    "policy_state": "enabled"
  },
  "models": [
    {
      "model_name": "gpt-5.6-sol",
      "display_name": "OpenAI GPT-5.6 Sol",
      "policy_state": "enabled"
    }
  ]
}

Get model policies for an enterprise team

Use this endpoint to retrieve Copilot model policy states for an enterprise team, along with the corresponding enterprise-level policies. The response shows which model policies the team can update based on enterprise policy and the available team policy controls.

For models the team can update, the response shows the team’s configured value or optional if the team has not set one. For locked models, it shows the enterprise’s explicit value or the applicable default availability for eligible models. These states are not a final access decision for a user.

Enterprise owners and users with the read_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the read:enterprise scope to use this endpoint.

“Get model policies for an enterprise team”的细粒度访问令牌

此端点支持以下精细令牌类型:

细粒度令牌必须具有以下权限集:

"Enterprise AI controls" enterprise permissions (read)

“”Get model policies for an enterprise team 的参数

标头
名称, 类型, 说明
`accept` string Setting to `application/vnd.github+json` is recommended.

路径参数
名称, 类型, 说明
`enterprise` string 必须 The slug version of the enterprise name.
`team_id` integer 必须 The unique identifier of the team.

“Get model policies for an enterprise team”的 HTTP 响应状态代码

状态代码	说明
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`503`	Service unavailable

“Get model policies for an enterprise team”的代码示例

如果你在 GHE.com 上访问 GitHub，请将 api.github.com 替换为企业的专用子域，位于 api.SUBDOMAIN.ghe.com。

请求示例

Select the example type

get/enterprises/{enterprise}/teams/{team_id}/copilot/model-policies

curl -L \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/teams/TEAM_ID/copilot/model-policies

OK

Status: 200

{
  "models": [
    {
      "model_name": "gpt-5.6-sol",
      "display_name": "OpenAI GPT-5.6 Sol",
      "policy_state": "optional",
      "enterprise_policy_state": "delegate_to_teams_and_apps",
      "editable": true
    }
  ]
}

Update model policies for an enterprise team

Use this endpoint to update Copilot model policies for an enterprise team. Only editable model policies can be updated.

Set a model to enabled to configure a team policy, or to optional to clear the team’s policy for that model. Locked models cannot be updated.

The response contains the same policy state information as the corresponding GET endpoint, including enterprise policies and whether each model policy can be updated. These states do not necessarily determine whether an individual user can access a model.

Enterprise owners and users with the write_enterprise_ai_controls permission can use this endpoint.

OAuth app tokens and personal access tokens (classic) need the admin:enterprise scope to use this endpoint.

“Update model policies for an enterprise team”的细粒度访问令牌

此端点支持以下精细令牌类型:

细粒度令牌必须具有以下权限集:

"Enterprise AI controls" enterprise permissions (write)

“”Update model policies for an enterprise team 的参数

标头
名称, 类型, 说明
`accept` string Setting to `application/vnd.github+json` is recommended.

路径参数
名称, 类型, 说明
`enterprise` string 必须 The slug version of the enterprise name.
`team_id` integer 必须 The unique identifier of the team.

名称, 类型, 说明

models array of objects 必须

Properties of models

名称, 类型, 说明
`model_name` string 必须
`policy_state` string 必须 Use `optional` to remove the team's policy. 可以是以下选项之一: `enabled`, `disabled`, `optional`

“Update model policies for an enterprise team”的 HTTP 响应状态代码

状态代码	说明
`200`	OK
`401`	Requires authentication
`403`	Forbidden
`404`	Resource not found
`422`	Validation failed, or the endpoint has been spammed.
`503`	Service unavailable

“Update model policies for an enterprise team”的代码示例

如果你在 GHE.com 上访问 GitHub，请将 api.github.com 替换为企业的专用子域，位于 api.SUBDOMAIN.ghe.com。

请求示例

patch/enterprises/{enterprise}/teams/{team_id}/copilot/model-policies

curl -L \
  -X PATCH \
  -H "Accept: application/vnd.github+json" \
  -H "Authorization: Bearer <YOUR-TOKEN>" \
  -H "X-GitHub-Api-Version: 2026-03-10" \
  https://api.github.com/enterprises/ENTERPRISE/teams/TEAM_ID/copilot/model-policies \
  -d '{"models":[{"model_name":"gpt-5.6-sol","policy_state":"enabled"}]}'

OK

Status: 200

{
  "models": [
    {
      "model_name": "gpt-5.6-sol",
      "display_name": "OpenAI GPT-5.6 Sol",
      "policy_state": "enabled",
      "enterprise_policy_state": "delegate_to_teams_and_apps",
      "editable": true
    }
  ]
}