Known breaks in GitHub Copilot CLI from github.com/github/copilot-cli, with quoted workarounds and fixed-in versions where they exist.
Type the version you're about to install (or just upgraded to). Lists tracked issues that mention it. Same data as /api/issues/copilot-cli.json.
Pulled from public GitHub issues updated in the last 45 days and filtered for always-on problems: install and update breakage, crashes and hangs, gateway/daemon trouble, auth, and headless setups. Ranked by engagement, weighted toward always-on, self-hosting, install/update, crash, auth, MCP and daemon problems (cosmetic desktop-UI issues are down-weighted). Workarounds and "fixed in" versions are quoted only when the issue or its top comments state them. Severity is an automatic estimate from labels, keywords, and engagement, not an official rating. Last refresh: Oct 26, 2026 6:18 AM ET.
copilot plugin update (and the same flow triggered from the GitHub Copilot desktop app) fails on Windows with: The git fetch/checkout of the marketplace clone succeeds every time (the clone under %LOCALAPPDATA%\copilot\marketplaces\…
On Windows, authenticating to an Entra ID–protected MCP server (Microsoft's hosted Azure DevOps MCP server, https://mcp.dev.azure.com/{org} , server type http ) fails on every fresh interactive sign-in attempt with: Authentication failed…
In 0.0.389 we added support for Remote MCP Servers protected by OAuth that support the DCR (Dynamic Client Registration) standard. DCR allows an OAuth client to register itself with an OAuth server "just in time" instead of requiring the…
Everytime after upgrading copilot cli through HomeBrew the following message appears: Apple could not verify “copilot” is free of malware that may harm your Mac or compromise your privacy. Afterwards, to get it working correctly, I need to…
When an HTTP MCP server is configured in .mcp.json with "type": "http" and "headers": { "Authorization": "Bearer " }, the CLI attempts OAuth discovery (/.well-known/oauth-authorization-server ) and fails with: MCPOAuthError: Failed to…
Manually enabling the server via /mcp enable bypasses OAuth discovery and connects successfully using the Bearer token.
This broke overnight. We've been using the same Azure MCP registry for months fine. Copilot CLI Rust runtime fails with BrokenPipe when validating Azure API Center MCP registry. GitHub Copilot CLI 1.0.83 cannot validate MCP servers against…
After updating to Copilot CLI 1.0.100 (which also pulled a new voice runtime), voice input no longer works on WSL2. The voice server process segfaults (signal 11) a few seconds after starting, so /voice stays on "Fetching voice models" and…
MCP servers can expose data through the resources primitive (resources/list, resources/read). This is one of the three core MCP primitives alongside tools and prompts. Currently, Copilot CLI only supports MCP tools. When an MCP tool…
GitHub Copilot desktop app 1.1.22 (commit c3daa01), macOS arm64, bundled CLI 1.0.84-5 (server mode, stdio, Rust JSON-RPC engine) Single github.com account signed in to the app; gh auth status (bundled gh 2.98.0, using the app-exported…
Immediately after installing the latest macOS security update and rebooting, all Copilot CLI sessions—both newly started sessions and resumed existing sessions—became unable to process prompts. GitHub Copilot CLI 1.0.90-3. macOS Golden…
The Figma hosted MCP server (https://mcp.figma.com/mcp) authenticates and initializes successfully, but the CLI never registers its tools. The CLI's discovery probe receives -32601 Method not found, records it as a fatal server failure…
Update to a newer CLI build that supports Figma's `2026-07-28` MCP protocol handshake.
In ACP mode (copilot --acp), the OAuth token for a remote HTTP MCP server is never written to disk or the OS keychain after a successful sign-in. Each new ACP session (for example, each new thread in an ACP client) starts unauthenticated…
A long-lived Copilot CLI session becomes largely unresponsive. Opening/refreshing tasks shows: The process stays alive, and some nested tool activity continues, but the UI/event reader repeatedly fails to acquire the session lock. macOS…
When authenticating the built-in Slack MCP server ( mcp.slack.com ) via Copilot CLI, the generated OAuth consent URL requests the full superset of Slack scopes — including write scopes ( chat:write , files:write , channels:write …
An OAuth-protected HTTP MCP server that has a valid, unexpired access token in ~/.copilot/mcp-oauth-config is answered with HTTP 401 on every new --acp session, and the CLI responds by opening the OAuth authorization page again. Because…
A long-running Copilot CLI process permanently loses authentication. After the failure, every normal prompt and /ask immediately returns an authorization error. Running /login does not recover the process. Restarting and resuming the same…
In a long-running Copilot CLI session connected to Visual Studio Code, an automatic managed-settings refresh can fail while reloading the dynamically contributed IDE MCP server: After this failure, the session enters a fail-closed…
After I sign in through the Microsoft Entra account broker for an HTTP MCP server, the token cache file stays empty. Every new process shows the account picker again. A /restart in the same process does not prompt…
Copilot CLI displays organization-policy warnings at startup even though every configured third-party MCP server is explicitly disabled through disabledMcpServers in the user settings. The same pair of warnings appears twice during…
Since 1.0.102, interactive autopilot stops whenever a background subagent runs for more than 600 seconds. The subagent is still working normally when this happens. The CLI shows: A common pattern is for the main agent to start a background…
In 1.0.102 the native runtime adds new autopilot continuation logic, and the stop message and `autopilot_background_timeout` warning first appear there. - Workaround: `export COPILOT_TASK_WAIT_TIMEOUT_SECONDS=3600` (or higher) before launching. - The limit can't be turned off.
Copilot CLI v0.0.421 hangs indefinitely when launched from directories with Nix flake-based development environments managed by direnv. The bash tool fails to execute any commands, timing out with Invalid shell ID errors. Analysis of the…
On Windows, the first Microsoft Entra account broker (WAM) sign-in for a remote MCP server on the built-in Entra fast-path list (here https://sentinel.microsoft.com/mcp/data-exploration) hard-crashes the CLI process with an access…
Running copilot interactively on Windows causes repeated OAuth browser sessions during initialization. Browser sessions keep opening until the user terminates Copilot. This prevents normal startup and authentication. Existing CLI logs…
When starting the CLI with --agent , the custom agent is selected and then silently deselected ~1 s later, before any user input. The banner shows Selected custom agent: my-agent, then MCP Servers reloaded: 1 server connected, and the…
Frequency (automated pty launches, no input, 15 s each): dropped 5/6 with a user-level agent (`--agent my-agent`), 4/6 with a plugin agent (`--agent myplugin:my-agent`). - When MCP startup failed (`Failed to start MCP Servers: session not found`), the agent was never dropped, which points to the…
When using a BYOK provider with a short-lived bearer credential (e.g. an Entra ID / Azure AD OAuth access token, an AWS STS token, or any OIDC JWT), the Copilot CLI reads COPILOTPROVIDERAPIKEY (and any custom headers) once at process…
export COPILOT_PROVIDER_TYPE=azure export COPILOT_PROVIDER_BASE_URL=https://my-apim.azure-api.us/openai export COPILOT_MODEL=gpt-5.1 ### CLI runs this to get a token, and re-runs it automatically before expiry / on 401: export COPILOT_PROVIDER_API_KEY_COMMAND='az account get-access-token --scope…
Source: [[P3] [Triggered] container-runtime/copilot-runtime-bazel-cache-memory-usage-vs-limits-dotcom on…
Source: [[P3] [Triggered] container-runtime/copilot-runtime-bazel-cache-memory-usage-vs-limits-dotcom on…
Source: [[P3] [Triggered] container-runtime/copilot-runtime-bazel-cache-memory-usage-vs-limits-dotcom on…
Recently assisted permissions mode has been requiring my approval for too many commands. This is mostly just a feeling that something has changed so sorry for being vague, but for example this powershell command to find files in the…
In non-interactive Copilot CLI, an already-discovered Azure MCP tool call can hang after delivering its initial progress notification. No tool result is delivered, and the MCP WebSocket closes five minutes later with idle timeout. The…
Tools with no input parameters use an empty JSON Schema for their Input Schema. This causes Copilot CLI to reject the tool entirely and fail on any prompt when the MCP server is connected. 0.0.365 Commit: 76d0881 To have an MCP tool with…
Issue #411 was closed as "notplanned" in Oct 2025, but the bug is still present and getting worse — it now blocks the CLI from running any shell command at all on Windows machines that ship only with Windows PowerShell 5.1…
Split out of #4378, which carries two faults. The registry policy 401 in that issue has a cause and a workaround. This one does not, and it survives that workaround. In a Copilot cloud agent session on a GHEC data residency tenant (…
Starting with 1.0.93, Copilot CLI on macOS can't connect to its API when it runs inside a sandbox that denies the Mach service com.apple.SecurityServer. Sandboxes such as nono deny this service so the agent can't read keychain secrets…
Launching the CLI with --new-session-id and then running /restart fails every time: By the time this surfaces the foreground session has already been shut down, so the restart is not recoverable. copilot --new-session-id…
When Copilot CLI runs without a usable GitHub credential, the background auth probe copilotruntime::auth::gh (i.e. gh auth token) is retried in a tight loop with no backoff. I hit this in a normal interactive session using a BYOK provider…
Signing in (`/login`) or exporting `COPILOT_GITHUB_TOKEN` / a fine-grained PAT stops the loop; installing `gh` only lowers the severity.
Every hour or so I'm getting Authorization error. Your credentials may be expired or invalid. (Request ID: ) Run /login to sign in again. Running /login does finish successfully but does not remedy the issue. Nor does mcp reload. GitHub…
Since 1.0.89, every new interactive session shows this error twice right after startup: Failed to read model provider attribution: Error: Not authenticated Sign-in completes about 3 seconds later and chat/model requests work normally. It…
The ripgrep binary bundled with the Copilot CLI ( /ripgrep/bin/linux-arm64/rg) statically links jemalloc built assuming a 4KB page size. On a kernel configured with a 16KB page size — the default on Asahi Linux (Linux-on-Apple-Silicon) —…
Replacing the bundled `rg` at each cached version's `ripgrep/bin/linux-arm64/rg` with the system's dynamically-linked `rg` resolves the crash locally, but is undone on every CLI update since it re-fetches the broken bundle.
Copilot CLI 1.0.98 (installed via official gh.io/copilot-install script, Linux x64, headless — no system keychain, token stored in plaintext ~/.copilot/config.json) Auth via copilot login --device-code on github.com (not a GHEC…
No issues match those filters.