---
title: "Get Copilot cloud agent configuration for a repository"
method: GET
path: "/repos/{owner}/{repo}/copilot/cloud-agent/configuration"
tags: ["copilot"]
---

# Get Copilot cloud agent configuration for a repository

`GET /repos/{owner}/{repo}/copilot/cloud-agent/configuration`

> [!NOTE]
> This endpoint is in public preview and is subject to change.

Gets the Copilot cloud agent configuration for a repository, including MCP server
configuration, enabled review tools, Actions workflow approval settings, and firewall
configuration.

OAuth app tokens and personal access tokens (classic) need the `repo` scope to use this endpoint.

## Path parameters

- `owner` string, required
- `repo` string, required

## Response `200`

Response

- object
  - `mcp_configuration` object, nullable, required — The user-supplied MCP server configuration for the repository, as a free-form JSON object. This will be set to `null` if no configuration has been set. The shape of a valid MCP configuration may evolve over time, so this property is intentionally not strictly typed. Clients should not assume a fixed schema.
  - `enabled_tools` object, required — The enabled review tools for Copilot cloud agent.
    - `codeql` boolean, required — Whether the CodeQL tool is enabled for the Copilot cloud agent.
    - `copilot_code_review` boolean, required — Whether the Copilot code review tool is enabled for the Copilot cloud agent.
    - `secret_scanning` boolean, required — Whether the secret scanning tool is enabled for the Copilot cloud agent.
    - `dependency_vulnerability_checks` boolean, required — Whether the dependency vulnerability checks tool is enabled for the Copilot cloud agent.
  - `require_actions_workflow_approval` boolean, required — Whether Actions workflow approval is required for Copilot cloud agent pull requests.
  - `is_firewall_enabled` boolean, required — Whether the firewall is enabled.
  - `is_firewall_recommended_allowlist_enabled` boolean, required — Whether the firewall recommended allowlist is enabled.
  - `custom_allowlist` string[], required — A list of custom allowlist entries, as hosts or URLs, that the firewall will allow the Copilot cloud agent to access.

## Other responses

- `401` — Requires authentication
- `403` — Forbidden
- `404` — Resource not found
- `500` — Internal Error

## Changes

- **2026-05-15** (2022-11-28) `78c4b7d08f97` — 1 info
  - endpoint added

[Change history](https://skmtc.dev/github/apis/enterprise-cloud/changes/repos/:owner/:repo/copilot/cloud-agent/configuration/get.md)

---

[API](https://skmtc.dev/github/apis/enterprise-cloud.md) · [All operations](https://skmtc.dev/github/apis/enterprise-cloud/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/github/enterprise-cloud/revisions/00a3fe4953d7/schema)