GitHub Copilot · OAuth Scopes

GitHub Copilot OAuth Scopes

OAuth 2.0 searched

GitHub Copilot publishes 5 OAuth 2.0 scopes via the authorizationCode flow. Scopes are the fine-grained permissions an application requests at authorization time to act against the GitHub Copilot API on a user’s behalf.

Tokens are issued from https://github.com/login/oauth/access_token.

This index is generated from the provider’s OpenAPI security definitions (and, where available, its documented scope reference) and refreshes on every APIs.io network build. Browse every provider’s scopes at scopes.apis.io.

AgentsAIArtificial IntelligenceCode GenerationCode ReviewCoding AgentCustom InstructionsDeveloper ToolsExtensionsIDEMachine LearningMCPMetricsModel Context ProtocolProductivity

Scopes: 5 Flows: authorizationCode Method: searched

OAuth endpoints

Authorization URL
https://github.com/login/oauth/authorize

Token URL
https://github.com/login/oauth/access_token

Flows
authorizationCode

Scopes (5)

Scope	Description	Flows
manage_billing:copilot	Manage Copilot billing and seat assignments — required for adding/removing users or teams from Copilot subscriptions and viewing billing information.	authorizationCode
read:org	Read organization membership and settings — sufficient (alongside manage_billing:copilot) for read operations such as viewing Copilot billing, seats, and metrics.	authorizationCode
admin:org	Full organization administration — alternative to manage_billing:copilot for write operations (adding/removing users or teams from Copilot subscriptions).	authorizationCode
read:enterprise	Read enterprise data — required for enterprise-level Copilot usage metrics reports.	authorizationCode
copilot	Copilot scope covering Copilot content-exclusion and related settings on fine-grained/classic tokens.	authorizationCode

📄 Provider scope reference: https://docs.github.com/en/rest/copilot/copilot-user-management

Source

OAuth Scopes

generated: '2026-06-20'
method: searched
source: openapi/github-copilot-openapi.yml
docs: https://docs.github.com/en/rest/copilot/copilot-user-management
schemes:
- name: OAuthToken
  source: openapi/github-copilot-openapi.yml
  flows:
  - flow: authorizationCode
    authorizationUrl: https://github.com/login/oauth/authorize
    tokenUrl: https://github.com/login/oauth/access_token
scopes:
- scope: manage_billing:copilot
  description: >-
    Manage Copilot billing and seat assignments — required for adding/removing
    users or teams from Copilot subscriptions and viewing billing information.
  flows:
  - authorizationCode
  sources:
  - openapi/github-copilot-openapi.yml
  - https://docs.github.com/en/rest/copilot/copilot-user-management
- scope: read:org
  description: >-
    Read organization membership and settings — sufficient (alongside
    manage_billing:copilot) for read operations such as viewing Copilot billing,
    seats, and metrics.
  flows:
  - authorizationCode
  sources:
  - openapi/github-copilot-openapi.yml
  - https://docs.github.com/en/rest/copilot/copilot-user-management
- scope: admin:org
  description: >-
    Full organization administration — alternative to manage_billing:copilot for
    write operations (adding/removing users or teams from Copilot subscriptions).
  flows:
  - authorizationCode
  sources:
  - https://docs.github.com/en/rest/copilot/copilot-user-management
- scope: read:enterprise
  description: Read enterprise data — required for enterprise-level Copilot usage metrics reports.
  flows:
  - authorizationCode
  sources:
  - openapi/github-copilot-openapi.yml
- scope: copilot
  description: >-
    Copilot scope covering Copilot content-exclusion and related settings on
    fine-grained/classic tokens.
  flows:
  - authorizationCode
  sources:
  - openapi/github-copilot-openapi.yml
notes: >-
  Fine-grained personal access tokens use the "GitHub Copilot Business" (read)
  and organization "Administration" permissions instead of the classic OAuth
  scopes above. See https://docs.github.com/en/rest/copilot/copilot-user-management
  for the per-endpoint permission matrix.