GitHub Copilot model policy API: companies can now control which AI models developers use

GitHub made its Copilot model policy API generally available on 19 October 2026, letting enterprises set which AI models each organisation, team or agent app may use. Here is what AI coding tool governance means for buyers of software.

On 19 October 2026 GitHub announced a Copilot model policy API. Enterprise and organisation administrators can now read and change, through code, which AI models are available in Copilot. The read and update endpoints are generally available at four levels: the whole enterprise, enterprise teams, agent apps, and individual organisations.

What changed

Until now, controlling which models developers could pick generally meant clicking through settings screens. An API means a company can set a policy once, apply it across hundreds of teams, and check that it has not drifted. GitHub describes two ways to delegate: control can sit with each organisation, or with enterprise teams and agent apps.

The context

Copilot has been adding models quickly, and GitHub has also flagged that some models were deprecated on 19 October, with more to follow in mid-November. We covered the rapid model additions in an earlier signal on choice overload. Both facts point the same way: the model your developers used last month may not exist next month, and nobody wants that decision made ad hoc.

GitHub’s post does not say which plans the API needs and says nothing about pricing, so check before assuming it applies to you.

So what

The interesting point for buyers is governance, not the API. Model choice affects cost, quality, and where your code and data are processed. Large organisations are now building central control over it. If you are commissioning software, expect to be asked, and ask your supplier in return: which AI models touch our code, who approved them, and what happens when one is retired?

A supplier who can answer that clearly is running AI development as a managed process. That is how we approach AI-assisted development at BuildApps, and starting a project is the way to test it.

← All research

More research.

GitHub's Copilot metrics now count OpenCode and Claude Code traffic: who really uses which AI coding tool

On 23 October 2026 GitHub added a per-tool breakdown to the Copilot usage metrics API, so tools such as OpenCode and Claude Code are counted even without editor telemetry. It shows how mixed the AI coding tool stack inside software teams has become.

Read ›

GitHub Copilot retires Claude Opus 5 and GPT-5.6 Terra on 16 November: the model-churn bill for buyers

GitHub has announced that Claude Opus 4.8, Claude Opus 5 and GPT-5.6 Terra leave every Copilot experience on 16 November 2026. For anyone commissioning AI-assisted development, model retirement is now a monthly event to plan around.

Read ›

GitHub Copilot now benchmarks how 'agent-first' your developers are against your industry

On 22 October 2026 GitHub added opt-in industry comparisons to its Copilot impact dashboard, ranking firms by share of agent-first developers and by the merge rate of agentic pull requests. Here is how to read the numbers when you are buying software.

Read ›

Apple's new bait-and-switch rule 2.5.19: what it means for AI-built and fast-shipped apps

On 16 October 2026 Apple updated its App Review Guidelines: apps that change after approval can be removed from the App Store and the Developer Program, and AI-generated intimate imagery is now explicitly covered. Here is what founders commissioning an iOS app should check.

Read ›

GitHub Copilot agentic autofix is generally available: AI now fixes security alerts, and bills for it

GitHub made agentic autofix for code scanning alerts generally available on 15 October 2026. Copilot can now fix up to 25 security alerts in one pull request, using AI credits your supplier or your team pays for.

Read ›

GitHub AI Scan for pull requests goes GA: AI security checks for PHP, Terraform and Dockerfiles

GitHub's AI Scan for pull requests became generally available on 15 October 2026, checking languages the standard scanner misses. Findings are advisory and cannot block a merge, which matters when you buy software.

Read ›

Start a project

Building with AI? Let's talk.

Tell us what you are building. We'll give you an honest view of the right approach.

Start a projectSee our work