GitHub Copilot adds server-to-server auth for org apps and agents

GitHub says Copilot now supports server-to-server authentication for GitHub Apps installed on organisations, in public preview. Services and agents built with the Copilot SDK can call Copilot on behalf of an organisation using a short-lived installation access token, without a signed-in user's credentials. Developers give the app the read-only Copilot Requests organisation permission; usage is billed to the installing organisation and follows that org's model policies, budgets and spending controls. Owners can spot app-attributed usage via the app_client_id field in AI usage CSV reports and stop access by suspending or uninstalling the app.