Agent Approve for GitHub Copilot CLI

Mobile approvals, shared guardrails, and activity monitoring for GitHub Copilot CLI from your phone

GitHub logo
CLIHook integration

Agent Approve gives you centralized control over GitHub Copilot CLI from your phone. Approve or deny tool calls from your iPhone or Apple Watch, with push notifications so you know when Copilot CLI needs a decision.

You get one shared policy, one activity history, and one place to manage guardrails across repos instead of handling each one separately. The same approval workflow works across Copilot CLI, Cursor, Claude Code, Gemini CLI, Codex, OpenCode, OpenClaw, and VS Code Copilot.

Install Copilot CLI

Quick start

1

Download Agent Approve from the App Store and complete onboarding.

2

Run npx agentapprove on your machine and select GitHub Copilot CLI.

3

Scan the QR code to pair with your phone.

4

In each repo where you use Copilot CLI, run npx agentapprove init-repo to copy the hook config.

Install command

npx agentapprove

Agent Approve config: ~/.agentapprove/

Copilot CLI hook config: .github/hooks/agentapprove.json


Recommended configuration

  • Run npx agentapprove init-repo in each repo to install per-repo hook config.
  • Use --allow-all-tools on the command line, or /allow-all (/yolo) in an interactive session, to delegate all permission decisions to Agent Approve.

Capabilities

Approval requests
Follow-up commands
Voice input
Activity monitoring
Push notifications
MCP tool tracking

Good to know

1

Per-repo config – Unlike other agents, Copilot CLI hooks are configured per-repo, not globally. Use npx agentapprove init-repo in each repo you want to protect.

2

No stop hook yet – Copilot CLI does not expose a stop hook today, so follow-up commands from Agent Approve are not currently supported.

3

Hook format – Hook configuration uses version: 1 format with bash paths and timeoutSec fields.

4

Bulk command parsing – Policy evaluation parses shell commands chained with && into individual sub-commands evaluated independently. A dangerous command like rm -rf hidden as the third step in a chain is caught even when the batch starts with safe commands.

5

Stay up to date – Run npx agentapprove again at any time to update hooks to the latest version.


Use cases

Step away from the terminal and approve Copilot CLI tool calls from your phone instead of waiting at your desk.

Enforce the same deny rules across Copilot CLI, your IDE agents, and your autonomous agents.

Keep an audit trail of what Copilot CLI asked to do in each repo.

Manage one set of guardrails across repos instead of configuring each one separately.


Questions about Copilot CLI

A few common questions about how Agent Approve fits alongside Copilot CLI.