Agent Approve for GitHub Copilot CLI
Mobile approvals, shared guardrails, and activity monitoring for GitHub Copilot CLI from your phone
Agent Approve gives you centralized control over GitHub Copilot CLI from your phone. Approve or deny tool calls from your iPhone or Apple Watch, with push notifications so you know when Copilot CLI needs a decision.
You get one shared policy, one activity history, and one place to manage guardrails across repos instead of handling each one separately. The same approval workflow works across Copilot CLI, Cursor, Claude Code, Gemini CLI, Codex, OpenCode, OpenClaw, and VS Code Copilot.
Quick start
Download Agent Approve from the App Store and complete onboarding.
Run npx agentapprove on your machine and select GitHub Copilot CLI.
Scan the QR code to pair with your phone.
In each repo where you use Copilot CLI, run npx agentapprove init-repo to copy the hook config.
Install command
npx agentapproveAgent Approve config: ~/.agentapprove/
Copilot CLI hook config: .github/hooks/agentapprove.json
Recommended configuration
- •Run
npx agentapprove init-repoin each repo to install per-repo hook config. - •Use
--allow-all-toolson the command line, or/allow-all(/yolo) in an interactive session, to delegate all permission decisions to Agent Approve.
Capabilities
Good to know
Per-repo config – Unlike other agents, Copilot CLI hooks are configured per-repo, not globally. Use npx agentapprove init-repo in each repo you want to protect.
No stop hook yet – Copilot CLI does not expose a stop hook today, so follow-up commands from Agent Approve are not currently supported.
Hook format – Hook configuration uses version: 1 format with bash paths and timeoutSec fields.
Bulk command parsing – Policy evaluation parses shell commands chained with && into individual sub-commands evaluated independently. A dangerous command like rm -rf hidden as the third step in a chain is caught even when the batch starts with safe commands.
Stay up to date – Run npx agentapprove again at any time to update hooks to the latest version.
Use cases
Step away from the terminal and approve Copilot CLI tool calls from your phone instead of waiting at your desk.
Enforce the same deny rules across Copilot CLI, your IDE agents, and your autonomous agents.
Keep an audit trail of what Copilot CLI asked to do in each repo.
Manage one set of guardrails across repos instead of configuring each one separately.
Questions about Copilot CLI
A few common questions about how Agent Approve fits alongside Copilot CLI.