Sandbox
Configure isolation and inspect the access Copilot receives.
On for this machine
Effective policy
What Copilot can access with the current configuration
Sandbox on 1 writable root 12 readable paths Network on
Working directory
/Users/digitarald/Developer/vscodeRead/WriteNetwork
Outbound and local networkAllowedDev-tool access
npm detectedAllowedGeneral
Allow sandbox bypass
Copilot can request approval to run a command outside the sandbox.
Sandbox MCP servers
Run MCP servers inside the sandbox.
Sandbox language servers Managed
Run language servers inside the sandbox.
Authentication
Authenticate Git
Inject credentials for authenticated HTTPS Git operations.
Authenticate GitHub CLI
Export GH_TOKEN for gh commands.
Allow macOS Keychain access
Expose credentials stored in the macOS Keychain.
Filesystem
Specific paths override broader grants.
Include working directory
Grant read/write access to the working directory and repository metadata.
Allow dev-tool access
Grant toolchains access to configuration, registries, and caches.
Network
Allow outbound connections
Let sandboxed processes reach the internet.
Allow local network
Let processes reach localhost and the local network.