Agent Customizations - Copilot

Sandbox

Limit what agent processes can access on this machine.

Learn more
Sandbox is onShell commands, MCP servers, and language servers run inside the sandbox.

General

Allow sandbox bypass
Let Copilot request approval to run a command outside the sandbox.
Sandbox MCP servers
Run MCP servers inside the sandbox.
Sandbox language servers Managed
Run language servers inside the sandbox.

Authentication

Authenticate Git
Inject credentials for authenticated HTTPS Git operations.
Authenticate GitHub CLI
Export GH_TOKEN so gh works without keychain access.
Allow macOS Keychain access
Let sandboxed commands use credentials stored in the macOS Keychain.

Filesystem

More specific paths take precedence over broader paths.

Include working directory
Grant read/write access to the current working directory and repository metadata.
Allow dev-tool access
Grant access to toolchains, package registries, configuration, and shared build caches.
PathAccess

Network

Allow outbound connections
Let sandboxed processes reach hosts on the internet.
Allow local network
Let sandboxed processes reach localhost and other hosts on the local network.
HTTP proxyRoute sandboxed traffic through a proxy.

Effective policy

Computed from your settings, automatic grants, the current session, and managed policy.

Read/Write/Users/digitarald/Developer/vscode
Read-only~/.copilot/session-state/b281de30.../events.jsonl
Read/Write~/.copilot/session-state/b281de30.../files