# GitHub Copilot SDK gains organisation-owned server-to-server authentication for agents GitHub's October 27 public preview lets installed GitHub Apps use short-lived installation tokens to make Copilot SDK requests as an organisation, rather than borrowing an employee's sign-in. Organisational billing, model policies and spending controls still apply. GitHub Apps can now authenticate Copilot SDK workloads without a user's credentials. Organisation admins control installation permissions, usage attribution and budgets. - Status: Active - Published: 2026-10-28T16:40:49+13:00 - Updated: 2026-10-28T16:40:49+13:00 - Categories: Artificial Intelligence, Web Development, SaaS, AI Coding, SaaS Operations, Developer Tools - Tags: agent authentication, billing, Copilot SDK, GitHub, GitHub Apps, GitHub Copilot, service identity - Canonical HTML: https://beyondthe.news/dossiers/github-copilot-sdk-server-to-server-github-app-organization-auth-preview-2026 ## What changed On October 27, 2026, GitHub opened public-preview server-to-server authentication for the Copilot SDK. A GitHub App installed on an organisation with the read-only Copilot Requests organisation permission can obtain a short-lived installation access token and pass it to the SDK. Requests are attributed and billed to the owning organisation, not a particular developer account. Organisation model restrictions, budgets and spending controls apply. Owners can inspect installed apps, use the app_client_id field in AI usage CSVs, and suspend or uninstall apps to revoke access. ## Why it matters Long-running agents and backend services have often relied on a developer's personal authentication, creating brittle ownership and audit trails when employees leave or tokens expire. App installation identities make access attributable to a workload and easier to govern at organisation scope. However, an app token is still powerful operational authority, and this is a public preview rather than a mature general-availability contract. ## Workload identity instead of borrowed user credentials The service creates a GitHub App, requests the organisation-level read-only Copilot Requests permission, installs it on an organisation and supplies a short-lived installation access token to the Copilot SDK. The request no longer needs a logged-in user's personal token. This is a Copilot SDK authentication path, not a general permission to read arbitrary private repositories or mutate their contents. ## Billing, model controls and audit Usage is billed to the organisation owning the installation and remains subject to its model policies, budgets and spending limits. GitHub's AI usage CSV exposes app_client_id for attribution. Owners can review apps with access and suspend or uninstall them. Teams should separately govern any other GitHub App repository permissions their agent needs. ## Production safeguards and limits Use short-lived installation tokens, keep signing credentials outside logs, scope installations and permissions to the minimum necessary, and record requests per app. Test token refresh, rate limits, budget exhaustion, app suspension and model policy rejection. GitHub labels the feature public preview; pricing and API compatibility should be monitored as it evolves. ## What this does not do A read-only Copilot Requests permission allows model requests but does not automatically grant repository access, tool execution rights or permission to deploy. Copilot's separate local sandbox and assisted approval settings remain distinct controls. A backend service should not assume its model-generated actions are safe just because authentication is organisation-owned. ## Key details - Announced October 27, 2026; public preview. - GitHub App requires read-only Copilot Requests organisation permission. - SDK uses short-lived installation access token, not a signed-in user token. - Usage attributed and billed to organisation; model policy and budget controls apply. - AI usage CSV includes app_client_id; owners can suspend/uninstall app. ## Builder takeaways - Use an organisation-installed GitHub App for unattended Copilot SDK workloads instead of personal credentials. - Keep Copilot Requests separate from repository permissions and action execution controls. - Track app_client_id usage, spending and revocation tests. - Avoid assuming public-preview interfaces or limits are stable. ## What to watch - GA release, supported SDK versions and installation-token behaviour. - Organisation-level rate limits and app-level budget controls. - Independent reports of service identity reliability and governance failure modes. ## Uncertainties - Feature is public preview; supported versions, limits and future terms may change. - No independent production-scale reliability or security audit was established. - Announcement does not guarantee all Copilot agent or CLI workflows support app authentication. ## Sources - [GitHub Copilot supports server-to-server authentication](https://github.blog/changelog/2026-10-27-github-copilot-supports-server-to-server-authentication/) — GitHub Changelog · primary_announcement · 2026-10-27T00:00:00+13:00. Public preview, permission, installation-token, billing and usage attribution. - [GitHub Copilot SDK source repository](https://github.com/github/copilot-sdk) — GitHub · primary_source_code. Implementation and examples; no independent audit claim.