Skip to content

Permanently allowed URLs (and other permissions) are not persisted across sessions #3253

@Behnam-RK

Description

@Behnam-RK

Describe the bug

URL permissions marked as "permanent" (e.g., https://docs.github.com) do not persist across sessions.

Affected version

GitHub Copilot CLI 1.0.45.

Steps to reproduce the behavior

Steps to reproduce:

  1. In a session, when prompted for URL access, choose "Allow permanently"
  2. Start a new session in the same directory
  3. The same URL permission is requested again

Root cause observed:

  • The permanent choice writes to settings.json → allowedUrls, but permissions-config.json (which appears to be checked at runtime) has no corresponding web_fetch/URL entry. This split causes the permission to be ignored on next session start.

Files involved:
~/.copilot/settings.json (has allowedUrls) vs ~/.copilot/permissions-config.json (has tool_approvals — no URL entry)

Expected behavior

When a user selects "Allow permanently" for a URL or tool permission, that permission should be respected in all future sessions without prompting again.

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:configurationConfig files, instruction files, settings, and environment variablesarea:permissionsTool approval, security boundaries, sandbox mode, and directory restrictions

    Type

    No fields configured for Bug.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions