Now liveThe Skillselion MCP - thousands of ranked skills, loaded into your agent mid-task. No install.Get it →
intellectronica avatar

Copilot Sdk

  • 488 installs
  • 281 repo stars
  • Updated April 25, 2026
  • intellectronica/agent-skills

copilot-sdk is a Claude Code skill that guides developers implementing Copilot SDK features, authentication, and tool wiring so agents can embed Microsoft and GitHub Copilot capabilities into custom applications and auto

About

copilot-sdk is an AI & Agent Building skill from intellectronica/agent-skills for embedding Microsoft and GitHub Copilot SDK capabilities into custom software. The skill covers SDK feature setup, authentication configuration, and tool wiring so autonomous agents can invoke Copilot-backed completions, chat, or action endpoints from application code. Developers reach for copilot-sdk when building internal dev tools, IDE extensions, or agent orchestrators that must integrate official Copilot APIs rather than raw OpenAI calls alone. It targets SDK-level integration work spanning auth, session management, and tool registration across multiple implementation steps.

  • Covers Copilot SDK setup and integration patterns
  • Wires auth and programmatic copilot access
  • Supports custom agent and app embedding
  • Bridges LLM assistance into product workflows
  • Targets builder-focused SDK implementation tasks

Copilot Sdk by the numbers

  • 488 all-time installs (skills.sh)
  • +9 installs in the week ending Aug 2, 2026 (Skillselion tracking)
  • Ranked #1,796 of 16,546 AI & Agent Building skills by installs in the Skillselion catalog
  • Data as of Aug 2, 2026 (Skillselion catalog sync)
npx skills add https://github.com/intellectronica/agent-skills --skill copilot-sdk

Add your badge

Show developers this skill is listed on Skillselion. Paste this into your README.

Listed on Skillselion
Installs488
repo stars281
Last updatedApril 25, 2026
Repositoryintellectronica/agent-skills

How do you embed Copilot SDK in custom apps?

Implement Copilot SDK features, auth, and tool wiring so agents can embed Microsoft/GitHub copilot capabilities into custom apps and autonomous workflows.

Who is it for?

Developers building agent apps or dev tools that must embed official Microsoft or GitHub Copilot SDK features with authenticated tool access.

Skip if: Teams needing only generic OpenAI or Anthropic API calls without Microsoft Copilot SDK licensing or integration requirements.

When should I use this skill?

A developer asks to integrate Copilot SDK, wire Copilot auth, or register tools for a GitHub or Microsoft Copilot agent host.

What you get

Copilot SDK integration code, auth configuration, registered agent tools, and working Copilot-backed endpoints in the host application.

  • SDK integration module
  • Auth configuration
  • Registered agent tools

Files

SKILL.mdMarkdownGitHub ↗

GitHub Copilot SDK

Overview

The GitHub Copilot SDK exposes the same Copilot CLI agent runtime over JSON-RPC, so apps can drive Copilot programmatically instead of building their own orchestration layer.

Status: Public preview SDKs: Node.js/TypeScript, Python, Go, .NET, Java Architecture: Application -> SDK client -> JSON-RPC -> Copilot CLI

How to use this skill

When helping with the Copilot SDK:

1. Prefer the official docs index and the language-specific README over memory. 2. Treat the top-level SDK README plus docs/ as the source of truth for shared behavior. 3. Call out preview status when stability or breaking changes matter. 4. Avoid hardcoding model lists when runtime discovery via listModels() is available. 5. Watch for stale guidance around permissions, lifecycle methods, and event names.

Current source of truth

Core SDK docs

Language-specific docs

Copilot CLI and GitHub Docs

Recipes and examples

---

High-value facts

Authentication and prerequisites

  • A GitHub Copilot subscription is required for normal SDK use.
  • BYOK is supported and does not require GitHub Copilot authentication.
  • Node.js, Python, and .NET bundle the Copilot CLI automatically.
  • Go can use an installed CLI or embed/bundle one with the go tool bundler workflow.
  • Java currently lives in github/copilot-sdk-java and expects the CLI to be installed separately.
  • Azure Managed Identity / Entra auth is supported as a documented BYOK pattern by passing short-lived bearer tokens from DefaultAzureCredential.

Permissions

  • The SDK uses a deny-by-default permission model.
  • In practice, create/resume flows should provide an explicit permission handler such as:
  • TypeScript: approveAll
  • Python: PermissionHandler.approve_all
  • Go: copilot.PermissionHandler.ApproveAll
  • .NET: PermissionHandler.ApproveAll
  • Java: PermissionHandler.APPROVE_ALL

Session lifecycle

  • Preferred cleanup method: disconnect()
  • Deprecated cleanup method: destroy()
  • To resume sessions reliably, provide your own sessionId when creating them.
  • BYOK provider configuration must be provided again when resuming because keys are not persisted.

Transport and deployment

  • Default transport is stdio with an SDK-managed CLI process.
  • You can connect to an external headless CLI server via cliUrl.
  • Current external server docs use:
copilot --headless --port 4321

Models

  • Do not hardcode model support unless the user specifically needs a fixed list.
  • Prefer client.listModels() and the official supported-models page.
  • reasoningEffort exists for models that support it.

---

Installation

SDKInstall
Node.js / TypeScriptnpm install @github/copilot-sdk
Pythonpip install github-copilot-sdk
Gogo get github.com/github/copilot-sdk/go
.NETdotnet add package GitHub.Copilot.SDK
JavaMaven/Gradle package com.github:copilot-sdk-java

Setup and deployment choices

Pick the setup that matches the application shape:

  • Local CLI - simplest path for personal tools and development.
  • Bundled CLI - ship a CLI binary with your app for desktop/distributable tooling.
  • Backend services - run the CLI in headless mode and connect with cliUrl.
  • Scaling and multi-tenancy - shared CLI vs CLI-per-user, shared storage, and session locking.
  • Azure Managed Identity - use BYOK with short-lived bearer tokens instead of static API keys when Azure auth is the real requirement.

Quick start pattern

Use the same mental model in every language:

1. Create/start the client. 2. Create a session with a permission handler. 3. Register event handlers before send() if you need streaming or progress. 4. Send with send() or sendAndWait(). 5. Wait for session.idle or the returned final message. 6. disconnect() the session and stop/dispose the client.

TypeScript example

import { CopilotClient, approveAll } from "@github/copilot-sdk";

const client = new CopilotClient();
await client.start();

const session = await client.createSession({
  model: "gpt-5",
  streaming: true,
  onPermissionRequest: approveAll,
});

session.on("assistant.message_delta", (event) => {
  process.stdout.write(event.data.deltaContent ?? "");
});

await session.sendAndWait({ prompt: "What is 2+2?" });

await session.disconnect();
await client.stop();

---

Core capabilities to remember

Client and session APIs

Common operations across SDKs:

  • Client lifecycle: start(), stop(), forceStop()
  • Session lifecycle: createSession(), resumeSession(), disconnect()
  • Messaging: send(), sendAndWait(), abort(), getMessages()
  • Discovery: listModels(), listSessions(), getStatus() / ping()

Events and streaming

  • Final assistant output arrives in assistant.message.
  • Streaming text arrives in assistant.message_delta.
  • session.idle is the reliable "turn complete" signal.
  • The event system now includes reasoning, tool progress, permission, elicitation, sub-agent, and skill events.

See references/event-system.md.

Custom tools

  • Node uses defineTool(...) with Zod or raw JSON Schema.
  • Python uses @define_tool with Pydantic models.
  • Go prefers DefineTool(...).
  • .NET uses AIFunctionFactory.Create(...).
  • Overriding built-ins always requires explicit opt-in:
  • TypeScript: overridesBuiltInTool: true
  • Python: overrides_built_in_tool=True
  • Go: OverridesBuiltInTool = true
  • .NET: AdditionalProperties["is_override"] = true
  • Custom tools can also opt into skipPermission.

Custom agents, MCP, hooks, and skills

  • customAgents lets you define sub-agents per session.
  • mcpServers attaches local or remote MCP servers.
  • Hooks provide control points such as onPreToolUse, onPostToolUse, onUserPromptSubmitted, and lifecycle/error hooks.
  • Skills are loaded with skillDirectories; disable selectively with disabledSkills.

See references/cli-agents-mcp.md.

Attachments, commands, and interaction

  • Sessions can send file, directory, and image attachments.
  • Image input supports both file and blob attachments, and vision should be checked through model capabilities.
  • In-flight messaging supports mode: "immediate" for steering and mode: "enqueue" for queueing.
  • The SDK can register custom slash commands.
  • Apps can answer user questions with onUserInputRequest.
  • Rich UI prompts are available through elicitation handlers and session.ui when the connected client supports them.

Telemetry and observability

  • The SDK supports OpenTelemetry configuration through TelemetryConfig.
  • Trace context propagation is built in, with Node using an explicit onGetTraceContext callback for outbound propagation.

Persistence and long-running work

  • Use a stable sessionId for resumable sessions.
  • Use infiniteSessions for long-running workflows that may need compaction.
  • Session state is stored under ~/.copilot/session-state/ unless configuration overrides it.

SDK vs. CLI-only features

  • The SDK exposes programmatic surfaces for sessions, models, plans, mode switching, workspace files, custom agents, hooks, MCP, skills, and telemetry.
  • Many terminal UX features remain CLI-only, such as most slash-command workflows, interactive pickers, and export/share commands.
  • When translating a CLI workflow into app code, check the compatibility guide before assuming a slash command has an SDK equivalent.

---

Language conventions

ConceptTypeScriptPythonGo.NETJava
Create sessioncreateSession()create_session()CreateSession()CreateSessionAsync()createSession()
Resume sessionresumeSession()resume_session()ResumeSession()ResumeSessionAsync()resumeSession()
Final contentevent.data.contentevent.data.content*event.Data.Contentevt.Data.Contentevent.getData().content()
Delta contentevent.data.deltaContentevent.data.delta_content*event.Data.DeltaContentevt.Data.DeltaContentevent.getData().deltaContent()
Skills fieldskillDirectoriesskill_directoriesSkillDirectoriesSkillDirectoriessetSkillDirectories(...)

---

Common gotchas

  • The SDK is public preview, so older examples drift quickly.
  • Hardcoded model tables get stale; prefer runtime discovery.
  • destroy() still appears in older examples but disconnect() is the current method.
  • A missing permission handler causes confusion fast; treat it as required for real sessions.
  • assistant.message and assistant.message_delta use event.data.*, not top-level event.content.
  • Streaming/event subscriptions should be attached before send().
  • Session resumption without a caller-provided sessionId is awkward to operationalize.

---

Local reference files in this skill

  • references/working-examples.md - current starter examples, including tools and resume patterns
  • references/event-system.md - event names, lifecycle, and language access patterns
  • references/cli-agents-mcp.md - custom agents, skills, MCP, headless CLI, and config locations
  • references/troubleshooting.md - common failures, debug logging, auth, permissions, and transport issues

Related skills

FAQ

What does copilot-sdk help developers implement?

copilot-sdk helps developers implement Copilot SDK features, authentication, and tool wiring so custom applications and autonomous workflows can embed Microsoft and GitHub Copilot capabilities through official SDK APIs.

How is copilot-sdk different from generic LLM integration?

copilot-sdk focuses on official Microsoft and GitHub Copilot SDK auth, feature flags, and tool registration rather than calling standalone OpenAI or Anthropic REST endpoints without Copilot licensing.

AI & Agent Buildingagentsautomationllm

This week in AI coding

Five minutes, every Monday - the tools, releases and tactics for developers.

unsubscribe anytime.