--- title: GitHub Copilot supports server-to-server authentication description: GitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, in public preview. Services and agents built with the... canonical: https://daily.dev/posts/github-copilot-supports-server-to-server-authentication-zexkmjrnw twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: GitHub Copilot supports server-to-server authentication | daily.dev og:description: GitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, in public preview. Services and agents built with the... og:url: https://daily.dev/posts/github-copilot-supports-server-to-server-authentication-zexkmjrnw og:image: https://api.daily.dev/og/posts/ZeXkmJRnW.png og:image:alt: GitHub Copilot supports server-to-server authentication og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GitHub Copilot supports server-to-server authentication **[GitHub Changelog](https://daily.dev/sources/github_updates)** · 1 min read · 0 upvotes · 0 comments ## Summary GitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, in public preview. Services and agents built with the Copilot SDK can make requests on behalf of an organization without a signed-in user's credentials. Developers grant a GitHub App the read-only 'Copilot Requests' organization permission, install it, and pass a short-lived installation access token to the SDK. Usage gets billed to the organization, and the org's model policies, budgets, and spending controls apply. Owners can track app-attributed usage via the app_client_id field in AI usage CSV reports and revoke access by suspending or uninstalling the app. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I authenticate a GitHub App to use the GitHub Copilot SDK without a user login? Grant the GitHub App the read-only 'Copilot Requests' organization permission, install the app on the organization, and pass a short-lived installation access token to the Copilot SDK. This server-to-server authentication, available in public preview, lets services and agents make requests on behalf of an organization without relying on a signed-in user's credentials. _Building agents with the Copilot SDK? Track auth changes like this one on daily.dev._ ### Who gets billed when a GitHub App uses the Copilot SDK with server-to-server authentication? Usage is attributed and billed to the organization that owns the app's installation, not to an individual user. The organization's existing model policies, budgets, and spending controls apply to that usage, and owners can identify app-attributed usage in AI usage CSV reports using the app_client_id field. _Teams managing Copilot spend across org apps can follow billing changes on daily.dev._ ## Similar posts on daily.dev - [Copilot CLI no longer needs a personal access token in GitHub Actions](https://daily.dev/posts/copilot-cli-no-longer-needs-a-personal-access-token-in-github-actions-tkqt02whe) · GitHub Changelog · 0 upvotes · 0 comments - [Build an agent into any app with the GitHub Copilot SDK](https://daily.dev/posts/build-an-agent-into-any-app-with-the-github-copilot-sdk-xmlnll6ld) · GitHub Blog · 57 upvotes · 0 comments - [GitHub adds new Copilot features as usage-based billing takes effect](https://daily.dev/posts/github-adds-new-copilot-features-as-usage-based-billing-takes-effect-khyqnwsy7) · InfoWorld · 0 upvotes · 0 comments - [GitHub Copilot CLI Reaches General Availability](https://daily.dev/posts/github-copilot-cli-reaches-general-availability-kwflfu4u5) · InfoQ · 0 upvotes · 0 comments --- Tags: [#ai-agents](https://daily.dev/tags/ai-agents), [#github](https://daily.dev/tags/github), [#authentication](https://daily.dev/tags/authentication) [View this post on daily.dev](https://daily.dev/posts/github-copilot-supports-server-to-server-authentication-zexkmjrnw) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"GitHub Copilot supports server-to-server authentication","url":"https://daily.dev/posts/github-copilot-supports-server-to-server-authentication-zexkmjrnw","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/github-copilot-supports-server-to-server-authentication-zexkmjrnw"},"datePublished":"2026-10-27T21:52:34.581Z","dateModified":"2026-10-27T21:53:54.964Z","description":"GitHub Copilot now supports server-to-server authentication for GitHub Apps installed on organizations, in public preview. Services and agents built with the...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7e8577c6287118db52aacbd83e810ab9?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/7e8577c6287118db52aacbd83e810ab9?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"GitHub Changelog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"GitHub Changelog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/15004b7835da4d89b02b115871f0f6dc","url":"https://daily.dev/sources/github_updates"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/github-copilot-supports-server-to-server-authentication-zexkmjrnw","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"ai-agents,github,authentication","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"GitHub Changelog","item":"https://daily.dev/sources/github_updates"},{"@type":"ListItem","position":3,"name":"GitHub Copilot supports server-to-server authentication"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/github-copilot-supports-server-to-server-authentication-zexkmjrnw#faq","mainEntity":[{"@type":"Question","name":"How do I authenticate a GitHub App to use the GitHub Copilot SDK without a user login?","acceptedAnswer":{"@type":"Answer","text":"Grant the GitHub App the read-only 'Copilot Requests' organization permission, install the app on the organization, and pass a short-lived installation access token to the Copilot SDK. This server-to-server authentication, available in public preview, lets services and agents make requests on behalf of an organization without relying on a signed-in user's credentials. Building agents with the Copilot SDK? Track auth changes like this one on daily.dev."}},{"@type":"Question","name":"Who gets billed when a GitHub App uses the Copilot SDK with server-to-server authentication?","acceptedAnswer":{"@type":"Answer","text":"Usage is attributed and billed to the organization that owns the app's installation, not to an individual user. The organization's existing model policies, budgets, and spending controls apply to that usage, and owners can identify app-attributed usage in AI usage CSV reports using the app_client_id field. Teams managing Copilot spend across org apps can follow billing changes on daily.dev."}}]} ```