KnownFix — GitHub Copilot CLI known issues

[GitHub Copilot CLI] High CPU and repeated "gh auth token" failures when not signed in (worse without gh)

Mon, 26 Oct 2026 07:49:42 +0000

When Copilot CLI runs without a usable GitHub credential, the background auth probe copilotruntime::auth::gh (i.e. gh auth token) is retried in a tight loop with no backoff. I hit this in a normal interactive session using a BYOK provider…

Workaround (quoted from issue body): Signing in (`/login`) or exporting `COPILOT_GITHUB_TOKEN` / a fine-grained PAT stops the loop; installing `gh` only lowers the severity.

Severity (auto): medium · 0 reactions · 0 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] CLI 1.0.103: persistent session-lock timeouts and unresponsive tasks amid host event acknowledgement failures

Sun, 25 Oct 2026 15:55:58 +0000

A long-lived Copilot CLI session becomes largely unresponsive. Opening/refreshing tasks shows: The process stays alive, and some nested tool activity continues, but the UI/event reader repeatedly fails to acquire the session lock. macOS…

Severity (auto): medium · 0 reactions · 2 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Windows: Entra broker token cache stays 0 bytes after MCP sign-in, so every new process re-prompts

Thu, 22 Oct 2026 18:48:08 +0000

After I sign in through the Microsoft Entra account broker for an HTTP MCP server, the token cache file stays empty. Every new process shows the account picker again. A /restart in the same process does not prompt…

Severity (auto): medium · 0 reactions · 1 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Interactive autopilot stops after 600s while a background subagent is still running (regression in 1.0.102)

Wed, 21 Oct 2026 21:43:57 +0000

Since 1.0.102, interactive autopilot stops whenever a background subagent runs for more than 600 seconds. The subagent is still working normally when this happens. The CLI shows: A common pattern is for the main agent to start a background…

Workaround (quoted from issue body): In 1.0.102 the native runtime adds new autopilot continuation logic, and the stop message and `autopilot_background_timeout` warning first appear there. - Workaround: `export COPILOT_TASK_WAIT_TIMEOUT_SECONDS=3600` (or higher) before launching. - The limit can't be turned off.

Severity (auto): high · 0 reactions · 1 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Startup reports disabled MCP servers as “blocked by policy” and repeats the warnings

Wed, 21 Oct 2026 19:45:45 +0000

Copilot CLI displays organization-policy warnings at startup even though every configured third-party MCP server is explicitly disabled through disabledMcpServers in the user settings. The same pair of warnings appears twice during…

Severity (auto): medium · 1 reactions · 0 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Voice server segfaults (signal 11) on WSL2 after updating to 1.0.100; /voice stuck on 'Fetching voice models'

Mon, 19 Oct 2026 22:28:49 +0000

After updating to Copilot CLI 1.0.100 (which also pulled a new voice runtime), voice input no longer works on WSL2. The voice server process segfaults (signal 11) a few seconds after starting, so /voice stays on "Fetching voice models" and…

Severity (auto): medium · 2 reactions · 4 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] ACP mode: MCP OAuth token is never persisted after successful sign-in — every new session re-opens the browser

Mon, 19 Oct 2026 15:49:22 +0000

In ACP mode (copilot --acp), the OAuth token for a remote HTTP MCP server is never written to disk or the OS keychain after a successful sign-in. Each new ACP session (for example, each new thread in an ACP client) starts unauthenticated…

Severity (auto): medium · 1 reactions · 2 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] P3 - container-runtime/copilot-runtime-bazel-cache-memory-usage-vs-limits-dotcom on catalog_service:copilot-runtime-bazel-cache,kube_cluster:dotcom-3-gc-cus-02,kube_container_name:copilot-runtime-bazel-cache,kube_deployment:copilot-r... - 2026-10-18T14:11Z

Sun, 18 Oct 2026 14:12:15 +0000

Source: [[P3] [Triggered] container-runtime/copilot-runtime-bazel-cache-memory-usage-vs-limits-dotcom on…

Severity (auto): critical · 0 reactions · 1 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] P3 - container-runtime/copilot-runtime-bazel-cache-memory-usage-vs-limits-dotcom on catalog_service:copilot-runtime-bazel-cache,kube_cluster:dotcom-2-gc-cus-02,kube_container_name:copilot-runtime-bazel-cache,kube_deployment:copilot-r... - 2026-10-16T17:35Z

Fri, 16 Oct 2026 17:36:15 +0000

Source: [[P3] [Triggered] container-runtime/copilot-runtime-bazel-cache-memory-usage-vs-limits-dotcom on…

Severity (auto): critical · 0 reactions · 1 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] P3 - container-runtime/copilot-runtime-bazel-cache-memory-usage-vs-limits-dotcom on catalog_service:copilot-runtime-bazel-cache,kube_cluster:dotcom-1-gc-cus-02,kube_container_name:copilot-runtime-bazel-cache,kube_deployment:copilot-r... - 2026-10-16T17:32Z

Fri, 16 Oct 2026 17:33:16 +0000

Source: [[P3] [Triggered] container-runtime/copilot-runtime-bazel-cache-memory-usage-vs-limits-dotcom on…

Severity (auto): critical · 0 reactions · 1 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] 1.0.98: Copilot Enterprise account routed to api.business.githubcopilot.com — 401 on model catalog, 'Authentication failed' despite valid token

Fri, 16 Oct 2026 10:22:29 +0000

Copilot CLI 1.0.98 (installed via official gh.io/copilot-install script, Linux x64, headless — no system keychain, token stored in plaintext ~/.copilot/config.json) Auth via copilot login --device-code on github.com (not a GHEC…

Severity (auto): medium · 0 reactions · 1 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] /restart fails when the CLI was launched with --new-session-id

Thu, 15 Oct 2026 01:21:02 +0000

Launching the CLI with --new-session-id and then running /restart fails every time: By the time this surfaces the foreground session has already been shut down, so the restart is not recoverable. copilot --new-session-id…

Severity (auto): low · 0 reactions · 1 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Windows: runaway MCP OAuth initialization opens repeated browser sessions; Maximum update depth exceeded

Tue, 13 Oct 2026 18:20:28 +0000

Running copilot interactively on Windows causes repeated OAuth browser sessions during initialization. Browser sessions keep opening until the user terminates Copilot. This prevents normal startup and authentication. Existing CLI logs…

Severity (auto): medium · 1 reactions · 0 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] `--agent ` selection is dropped ~1s after startup (race with sign-in / MCP reload)

Mon, 12 Oct 2026 15:17:03 +0000

When starting the CLI with --agent , the custom agent is selected and then silently deselected ~1 s later, before any user input. The banner shows Selected custom agent: my-agent, then MCP Servers reloaded: 1 server connected, and the…

Workaround (quoted from issue body): Frequency (automated pty launches, no input, 15 s each): dropped 5/6 with a user-level agent (`--agent my-agent`), 4/6 with a plugin agent (`--agent myplugin:my-agent`). - When MCP startup failed (`Failed to start MCP Servers: session not found`), the agent was never dropped, which points to the…

Severity (auto): medium · 0 reactions · 2 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Windows: CLI crashes (0xc0000005 in msalruntime.dll) on first Entra account-broker sign-in for MCP server - interactive WAM called with no parent window

Thu, 08 Oct 2026 17:28:39 +0000

On Windows, the first Microsoft Entra account broker (WAM) sign-in for a remote MCP server on the built-in Entra fast-path list (here https://sentinel.microsoft.com/mcp/data-exploration) hard-crashes the CLI process with an access…

Severity (auto): high · 1 reactions · 1 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Rust rewrite regression on macOS: all native HTTPS requests fail with "bad certificate format" when com.apple.SecurityServer is not reachable (sandboxes)

Thu, 08 Oct 2026 15:15:15 +0000

Starting with 1.0.93, Copilot CLI on macOS can't connect to its API when it runs inside a sandbox that denies the Mach service com.apple.SecurityServer. Sandboxes such as nono deny this service so the agent can't read keychain secrets…

Severity (auto): high · 1 reactions · 0 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Windows: MCP Entra sign-in fails with "this server's advertised scopes could not be safely validated for the account broker"

Tue, 06 Oct 2026 22:44:28 +0000

On Windows, authenticating to an Entra ID–protected MCP server (Microsoft's hosted Azure DevOps MCP server, https://mcp.dev.azure.com/{org} , server type http ) fails on every fresh interactive sign-in attempt with: Authentication failed…

Severity (auto): medium · 12 reactions · 3 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Assisted permissions regression

Tue, 06 Oct 2026 18:01:33 +0000

Recently assisted permissions mode has been requiring my approval for too many commands. This is mostly just a feeling that something has changed so sorry for being vague, but for example this powershell command to find files in the…

Severity (auto): high · 1 reactions · 3 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Regression (1.0.88 → 1.0.89): MCP OAuth authorization page opens on every ACP session instead of the challenge being resolved silently

Tue, 29 Sep 2026 10:12:55 +0000

An OAuth-protected HTTP MCP server that has a valid, unexpired access token in ~/.copilot/mcp-oauth-config is answered with HTTP 401 on every new --acp session, and the CLI responds by opening the OAuth authorization page again. Because…

Severity (auto): high · 2 reactions · 2 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Bundled ripgrep aborts with jemalloc 'Unsupported system page size' on 16KB-page ARM64 kernels (Asahi Linux)

Sun, 27 Sep 2026 15:22:33 +0000

The ripgrep binary bundled with the Copilot CLI ( /ripgrep/bin/linux-arm64/rg) statically links jemalloc built assuming a 4KB page size. On a kernel configured with a 16KB page size — the default on Asahi Linux (Linux-on-Apple-Silicon) —…

Workaround (quoted from issue body): Replacing the bundled `rg` at each cached version's `ripgrep/bin/linux-arm64/rg` with the system's dynamically-linked `rg` resolves the crash locally, but is undone on every CLI update since it re-fetches the broken bundle.

Severity (auto): medium · 0 reactions · 2 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Every hour I get Authorization error. Your credentials may be expired or invalid

Sat, 26 Sep 2026 00:52:02 +0000

Every hour or so I'm getting Authorization error. Your credentials may be expired or invalid. (Request ID: ) Run /login to sign in again. Running /login does finish successfully but does not remedy the issue. Nor does mcp reload. GitHub…

Severity (auto): critical · 2 reactions · 3 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Built-in Slack MCP integration requests full scope superset even when only read tools are exposed

Tue, 22 Sep 2026 12:51:56 +0000

When authenticating the built-in Slack MCP server ( mcp.slack.com ) via Copilot CLI, the generated OAuth consent URL requests the full superset of Slack scopes — including write scopes ( chat:write , files:write , channels:write …

Severity (auto): medium · 5 reactions · 1 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Cloud agent: the built-in Playwright MCP session is already closed at the first tool call, and recovery reports it as browser OAuth required

Tue, 22 Sep 2026 08:58:55 +0000

Split out of #4378, which carries two faults. The registry policy 401 in that issue has a cause and a workaround. This one does not, and it survives that workaround. In a Copilot cloud agent session on a GHEC data residency tenant (…

Severity (auto): medium · 1 reactions · 2 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Process-local auth token stops refreshing; all prompts fail until restart

Tue, 22 Sep 2026 05:49:46 +0000

A long-running Copilot CLI process permanently loses authentication. After the failure, every normal prompt and /ask immediately returns an authorization error. Running /login does not recover the process. Restarting and resuming the same…

Severity (auto): medium · 0 reactions · 13 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Non-interactive MCP tool call hangs after progress notification until idle timeout

Sat, 19 Sep 2026 18:43:00 +0000

In non-interactive Copilot CLI, an already-discovered Azure MCP tool call can hang after delivering its initial progress notification. No tool result is delivered, and the MCP WebSocket closes five minutes later with idle timeout. The…

Severity (auto): high · 0 reactions · 3 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Desktop app: sessions die minutes after spawn — "GitHub credential registration is no longer available for this session" makes the github-mcp-server catalog stale and fatal

Fri, 18 Sep 2026 20:03:30 +0000

GitHub Copilot desktop app 1.1.22 (commit c3daa01), macOS arm64, bundled CLI 1.0.84-5 (server mode, stdio, Rust JSON-RPC engine) Single github.com account signed in to the app; gh auth status (bundled gh 2.98.0, using the app-exported…

Severity (auto): critical · 4 reactions · 6 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Azure MCP server fails sending HTTP request

Tue, 15 Sep 2026 09:40:38 +0000

This broke overnight. We've been using the same Azure MCP registry for months fine. Copilot CLI Rust runtime fails with BrokenPipe when validating Azure API Center MCP registry. GitHub Copilot CLI 1.0.83 cannot validate MCP servers against…

Severity (auto): medium · 10 reactions · 5 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Automatic managed-settings refresh breaks IDE MCP reload and disables /allow-all

Tue, 15 Sep 2026 02:45:45 +0000

In a long-running Copilot CLI session connected to Visual Studio Code, an automatic managed-settings refresh can fail while reloading the dynamically contributed IDE MCP server: After this failure, the session enters a fail-closed…

Severity (auto): medium · 4 reactions · 4 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Windows: plugin update fails with "Access is denied (os error 5)" while VS Code is running (Copilot extension holds watcher handles on installed-plugins)

Sat, 11 Jul 2026 19:18:47 +0000

copilot plugin update (and the same flow triggered from the GitHub Copilot desktop app) fails on Windows with: The git fetch/checkout of the marketplace clone succeeds every time (the clone under %LOCALAPPDATA%\copilot\marketplaces\…

Severity (auto): high · 25 reactions · 3 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] HTTP MCP server with Bearer token fails OAuth discovery instead of falling back to headers auth

Mon, 04 May 2026 07:20:56 +0000

When an HTTP MCP server is configured in .mcp.json with "type": "http" and "headers": { "Authorization": "Bearer " }, the CLI attempts OAuth discovery (/.well-known/oauth-authorization-server ) and fails with: MCPOAuthError: Failed to…

Workaround (quoted from issue body): Manually enabling the server via /mcp enable bypasses OAuth discovery and connects successfully using the Bearer token.

Severity (auto): medium · 11 reactions · 2 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Support MCP resources/read primitive

Tue, 03 Mar 2026 13:57:56 +0000

MCP servers can expose data through the resources primitive (resources/list, resources/read). This is one of the three core MCP primitives alongside tools and prompts. Currently, Copilot CLI only supports MCP tools. When an MCP tool…

Severity (auto): medium · 14 reactions · 2 comments · more GitHub Copilot CLI issues

[GitHub Copilot CLI] Copilot app blocked by macOS Gatekeeper under corporate security policy

Wed, 14 Jan 2026 22:24:40 +0000

Everytime after upgrading copilot cli through HomeBrew the following message appears: Apple could not verify “copilot” is free of malware that may harm your Mac or compromise your privacy. Afterwards, to get it working correctly, I need to…

Severity (auto): medium · 23 reactions · 8 comments · more GitHub Copilot CLI issues