---
title: "Get Copilot cloud agent configuration for a repository"
method: GET
path: "/repos/{owner}/{repo}/copilot/cloud-agent/configuration"
tags: ["copilot"]
---

# Get Copilot cloud agent configuration for a repository

`GET /repos/{owner}/{repo}/copilot/cloud-agent/configuration`

> [!NOTE]
> This endpoint is in public preview and is subject to change.

Gets the Copilot cloud agent configuration for a repository, including MCP server
configuration, enabled review tools, Actions workflow approval settings, and firewall
configuration.

OAuth app tokens and personal access tokens (classic) need the `repo` scope to use this endpoint.

## Path parameters

- `owner` string, required
- `repo` string, required

## Response `200`

Response

- object
  - `mcp_configuration` object, nullable, required — The user-supplied MCP server configuration for the repository, as a free-form JSON object. This will be set to `null` if no configuration has been set. The shape of a valid MCP configuration may evolve over time, so this property is intentionally not strictly typed. Clients should not assume a fixed schema.
  - `enabled_tools` object, required — The enabled review tools for Copilot cloud agent.
    - `codeql` boolean, required — Whether the CodeQL tool is enabled for the Copilot cloud agent.
    - `copilot_code_review` boolean, required — Whether the Copilot code review tool is enabled for the Copilot cloud agent.
    - `secret_scanning` boolean, required — Whether the secret scanning tool is enabled for the Copilot cloud agent.
    - `dependency_vulnerability_checks` boolean, required — Whether the dependency vulnerability checks tool is enabled for the Copilot cloud agent.
  - `require_actions_workflow_approval` boolean, required — Whether Actions workflow approval is required for Copilot cloud agent pull requests.
  - `is_firewall_enabled` boolean, required — Whether the firewall is enabled.
  - `is_firewall_recommended_allowlist_enabled` boolean, required — Whether the firewall recommended allowlist is enabled.
  - `custom_allowlist` string[], required — A list of custom allowlist entries, as hosts or URLs, that the firewall will allow the Copilot cloud agent to access.
  - `is_automations_enabled` boolean, required — Whether automations are enabled in this repository. When true, users can create automations that automatically run agents on a schedule or in response to events like new issues or updated pull requests.
  - `require_write_access_for_automation_triggers` boolean, required — Whether write access is required for automation triggers. When true, automations will only run if the user triggering the event has write access to the repository. When false, users can create automations that listen for events triggered by users without write access.

## Other responses

- `401` — Requires authentication
- `403` — Forbidden
- `404` — Resource not found
- `500` — Internal Error

---

[API](https://skmtc.net/github/apis/github-v3-rest-api.md) · [All operations](https://skmtc.net/github/apis/github-v3-rest-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/github/github-v3-rest-api/versions/a367f7028301/schema)