Connect GitHub Copilot CLI to Agent Authority

Connect GitHub Copilot CLI to SecureAuth Agent Authority so every MCP tool call is checked and audited

When you finish, every MCP tool call GitHub Copilot CLI makes is checked against your policies and recorded in the audit log. GitHub Copilot CLI reaches your approved tools through one SecureAuth Agent Authority gateway URL, and each developer signs in as themselves.

Setup

  1. Add the MCP server. Add the following to ~/.copilot/mcp-config.json:

    {
      "mcpServers": {
        "secureauth": {
          "type": "http",
          "url": "https://your-gateway-url/gateway/mcp"
        }
      }
    }
  2. Start Copilot CLI.

    copilot
  3. Authenticate. A browser window will open for sign-in on first MCP tool use.

    The agent is auto-registered on first connect.

Connecting to just one MCP? To stay under an agent's tool limit, point the URL at a single MCP — /gateway/mcp/{slug} instead of /gateway/mcp. Grab the exact URL from the resource's detail page; see Scope a connection.

Next steps

  • Create a policy – control which tools Copilot CLI can call.
  • Monitor activity – watch its tool calls appear in the dashboard and audit log.
  • Audit log – filter and search every tool call Copilot CLI makes.

On this page