diff --git a/content/copilot/concepts/agents/cloud-agent/access-management.md b/content/copilot/concepts/agents/cloud-agent/access-management.md
index 27f8ed2ab4b4..5091cfd6dec5 100644
--- a/content/copilot/concepts/agents/cloud-agent/access-management.md
+++ b/content/copilot/concepts/agents/cloud-agent/access-management.md
@@ -19,7 +19,7 @@ redirect_from:
- /copilot/concepts/agents/coding-agent/coding-agent-for-business-and-enterprise
- /copilot/concepts/agents/coding-agent/managing-access
contentType: concepts
-category:
+category:
- Manage Copilot for a team
---
@@ -48,7 +48,7 @@ Enterprise administrators and organization owners (for organization-owned reposi
For information on disabling {% data variables.copilot.copilot_cloud_agent %} in some or all repositories owned by an organization, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-organization/add-copilot-cloud-agent).
-For information on disabling {% data variables.copilot.copilot_cloud_agent %} in all repositories owned by an enterprise, see [AUTOTITLE](/enterprise-cloud@latest/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/manage-copilot-cloud-agent).
+For information on disabling {% data variables.copilot.copilot_cloud_agent %} in all repositories owned by an enterprise, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/block-copilot-cloud-agent).
For information on disabling {% data variables.copilot.copilot_cloud_agent %} in repositories owned by your personal user account, see [AUTOTITLE](/copilot/managing-copilot/managing-copilot-as-an-individual-subscriber/managing-your-copilot-plan/managing-copilot-policies-as-an-individual-subscriber#enabling-or-disabling-copilot-cloud-agent).
diff --git a/content/copilot/concepts/auto-model-selection.md b/content/copilot/concepts/auto-model-selection.md
index 60325122a32b..14f7b3ee1c2c 100644
--- a/content/copilot/concepts/auto-model-selection.md
+++ b/content/copilot/concepts/auto-model-selection.md
@@ -38,15 +38,7 @@ Experience less rate limiting and reduce the mental load of choosing a model by
* Eclipse
* Xcode
-When you select **Auto** in {% data variables.copilot.copilot_chat_short %}, {% data variables.copilot.copilot_auto_model_selection_short_cap_a %} may choose from the following list of models, subject to your policies and subscription type. Models may change over time.
- * {% data variables.copilot.copilot_gpt_41 %}
- * {% data variables.copilot.copilot_gpt_53_codex %}
- * {% data variables.copilot.copilot_gpt_54 %}
- * {% data variables.copilot.copilot_gpt_54_mini %}
- * {% data variables.copilot.copilot_claude_haiku_45 %}
- * {% data variables.copilot.copilot_claude_sonnet_46 %}
- * {% data variables.copilot.copilot_grok_code %}
- * {% data variables.copilot.copilot_raptor_mini %}
+When you select **Auto** in {% data variables.copilot.copilot_chat_short %}, {% data variables.copilot.copilot_auto_model_selection_short_cap_a %} chooses from the supported models, subject to your policies and subscription type. Models may change over time. See [AUTOTITLE](/copilot/reference/ai-models/supported-models#supported-ai-models-in-auto-model-selection).
> [!TIP] To see which model was used for each response, hover over the response in {% data variables.copilot.copilot_chat_short %}.
@@ -62,8 +54,7 @@ During the {% data variables.release-phases.public_preview %}, if you're using a
## {% data variables.copilot.copilot_auto_model_selection_short_cap_a %} in {% data variables.copilot.copilot_cloud_agent %}
-When you select **Auto** in {% data variables.copilot.copilot_cloud_agent %}, {% data variables.copilot.copilot_auto_model_selection_short_cap_a %} currently chooses from the following list of models, subject to your policies and subscription type:
- {% data reusables.copilot.copilot-cloud-agent-auto-models %}
+When you select **Auto** in {% data variables.copilot.copilot_cloud_agent %}, {% data variables.copilot.copilot_auto_model_selection_short_cap_a %} chooses from the supported list of models, subject to your policies and subscription type. See [AUTOTITLE](/copilot/reference/ai-models/supported-models#supported-ai-models-in-auto-model-selection).
{% data reusables.copilot.change-the-ai-model-copilot-cloud-agent %}
diff --git a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/block-copilot-cloud-agent.md b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/block-copilot-cloud-agent.md
new file mode 100644
index 000000000000..c21c469d1280
--- /dev/null
+++ b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/block-copilot-cloud-agent.md
@@ -0,0 +1,25 @@
+---
+title: Blocking GitHub Copilot cloud agent in your enterprise
+intro: 'Disable use of {% data variables.copilot.copilot_cloud_agent %} for all users and repositories.'
+permissions: Enterprise owners and AI managers
+versions:
+ feature: copilot
+shortTitle: 'Block {% data variables.copilot.copilot_cloud_agent %}'
+contentType: how-tos
+category:
+ - Manage Copilot for a team
+allowTitleToDifferFromFilename: true
+---
+
+Most {% data variables.product.prodname_copilot_short %} policies, including "Enable {% data variables.copilot.copilot_cloud_agent %}", only affect users who receive a {% data variables.product.prodname_copilot_short %} license from your enterprise or organizations.
+
+If you want to disable {% data variables.copilot.copilot_cloud_agent %} in repositories completely, including for users who get access to {% data variables.product.prodname_copilot_short %} from a personal plan or another enterprise, you can use the "Block {% data variables.copilot.copilot_cloud_agent %}" policy.
+
+## Blocking {% data variables.copilot.copilot_cloud_agent %}
+
+>[!NOTE] This enterprise-level policy is a blanket restriction. Organization owners can block {% data variables.copilot.copilot_cloud_agent %} in specific repositories. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-organization/add-copilot-cloud-agent).
+
+{% data reusables.enterprise-accounts.access-enterprise %}
+{% data reusables.enterprise-accounts.ai-controls-tab %}
+{% data reusables.enterprise-accounts.cca-policies %}
+1. Next to **Block {% data variables.copilot.copilot_cloud_agent %} in all repositories owned by ENTERPRISE-NAME**, click the toggle.
diff --git a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/enable-copilot-cloud-agent.md b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/enable-copilot-cloud-agent.md
new file mode 100644
index 000000000000..4fa607faa3bf
--- /dev/null
+++ b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/enable-copilot-cloud-agent.md
@@ -0,0 +1,51 @@
+---
+title: Enabling GitHub Copilot cloud agent in your enterprise
+intro: 'Choose which organizations can use {% data variables.copilot.copilot_cloud_agent %} and connect it to MCP servers.'
+allowTitleToDifferFromFilename: true
+permissions: Enterprise owners and AI managers
+product: '{% data reusables.gated-features.copilot-cloud-agent %}
Contact Sales {% octicon "link-external" height:16 %}'
+versions:
+ feature: copilot
+shortTitle: 'Enable {% data variables.copilot.copilot_cloud_agent %}'
+redirect_from:
+ - /copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/manage-copilot-coding-agent
+ - /copilot/managing-copilot/managing-copilot-for-your-enterprise/adding-copilot-coding-agent-to-enterprise
+ - /copilot/managing-copilot/managing-copilot-for-your-enterprise/making-copilot-coding-agent-available-to-enterprise
+ - /copilot/managing-copilot/managing-copilot-for-your-enterprise/managing-copilot-coding-agent-in-your-enterprise
+ - /copilot/how-tos/administer/enterprises/managing-copilot-coding-agent-in-your-enterprise
+ - /copilot/how-tos/administer/enterprises/manage-copilot-coding-agent
+ - /copilot/how-tos/administer/manage-for-enterprise/manage-copilot-coding-agent
+ - /copilot/how-tos/administer-copilot/manage-for-enterprise/manage-copilot-coding-agent
+ - /copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/manage-copilot-cloud-agent
+contentType: how-tos
+category:
+ - Manage Copilot for a team
+---
+
+## Prerequisites
+
+You may want to run a trial before enabling {% data variables.copilot.copilot_cloud_agent %} for the enterprise. See [AUTOTITLE](/copilot/tutorials/cloud-agent/pilot-cloud-agent).
+
+## Enabling {% data variables.copilot.copilot_cloud_agent %}
+
+{% data variables.copilot.copilot_cloud_agent %} and use of third-party MCP servers are disabled by default. You can enable these features for users who receive a {% data variables.product.prodname_copilot_short %} license from your enterprise or organizations.
+
+{% data reusables.enterprise-accounts.access-enterprise %}
+{% data reusables.enterprise-accounts.ai-controls-tab %}
+{% data reusables.enterprise-accounts.cca-policies %}
+1. Select a global policy for {% data variables.copilot.copilot_cloud_agent %}, then communicate your decision with your organizations.
+
+ >[!TIP] If you select **Enabled for selected organizations**, you can select individual organizations in the UI. To select organizations based on custom properties instead, use the REST API. See [AUTOTITLE](/rest/copilot/copilot-coding-agent-management#selecting-organizations-with-custom-properties).
+
+1. By default, the agent will be available in all repositories in selected organizations. If there are repositories where {% data variables.copilot.copilot_cloud_agent %} should be blocked for all users, tell organization owners to configure this setting. See [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-organization/add-copilot-cloud-agent#disabling-or-enabling-copilot-cloud-agent-in-your-repositories).
+
+## Enabling MCP servers
+
+{% data variables.copilot.copilot_cloud_agent %} automatically has access to a small number of default MCP servers. See [AUTOTITLE](/copilot/concepts/agents/cloud-agent/mcp-and-cloud-agent#default-mcp-servers).
+
+You can enable third-party MCP servers to allow developers to integrate {% data variables.copilot.copilot_cloud_agent %} with other services in your DevOps toolchain, such as error-tracking platforms or logging systems.
+
+{% data reusables.enterprise-accounts.view-mcp-policies %}
+1. Set a policy for **MCP servers in {% data variables.product.prodname_copilot_short %}**.
+
+>[!NOTE] The "MCP Registry URL" and "Restrict MCP access to registry servers" policies do **not** apply to {% data variables.copilot.copilot_cloud_agent %}.
diff --git a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/index.md b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/index.md
index f7258b0c23b9..18e60398d296 100644
--- a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/index.md
+++ b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/index.md
@@ -1,13 +1,15 @@
---
title: Managing agents in your enterprise
shortTitle: Manage agents
-intro: 'Maintain your enterprise''s security and compliance standards and empower your developers by managing your agents.'
+intro: Maintain your enterprise's security and compliance standards and empower your developers by managing your agents.
versions:
feature: copilot
children:
- /prepare-for-custom-agents
- /monitor-agentic-activity
- - /manage-copilot-cloud-agent
+ - /enable-copilot-cloud-agent
+ - /block-copilot-cloud-agent
- /manage-copilot-code-review
contentType: how-tos
---
+
diff --git a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/manage-copilot-cloud-agent.md b/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/manage-copilot-cloud-agent.md
deleted file mode 100644
index d99aa44d4d83..000000000000
--- a/content/copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/manage-copilot-cloud-agent.md
+++ /dev/null
@@ -1,64 +0,0 @@
----
-title: Managing GitHub Copilot cloud agent in your enterprise
-intro: 'Enable members of your enterprise to use {% data variables.copilot.copilot_cloud_agent %} and control the repositories where it is available.'
-allowTitleToDifferFromFilename: true
-permissions: Enterprise owners and AI managers
-product: '{% data reusables.gated-features.copilot-cloud-agent %}
Contact Sales {% octicon "link-external" height:16 %}'
-versions:
- feature: copilot
-shortTitle: 'Manage {% data variables.copilot.copilot_cloud_agent %}'
-redirect_from:
- - /copilot/how-tos/administer-copilot/manage-for-enterprise/manage-agents/manage-copilot-coding-agent
- - /copilot/managing-copilot/managing-copilot-for-your-enterprise/adding-copilot-coding-agent-to-enterprise
- - /copilot/managing-copilot/managing-copilot-for-your-enterprise/making-copilot-coding-agent-available-to-enterprise
- - /copilot/managing-copilot/managing-copilot-for-your-enterprise/managing-copilot-coding-agent-in-your-enterprise
- - /copilot/how-tos/administer/enterprises/managing-copilot-coding-agent-in-your-enterprise
- - /copilot/how-tos/administer/enterprises/manage-copilot-coding-agent
- - /copilot/how-tos/administer/manage-for-enterprise/manage-copilot-coding-agent
- - /copilot/how-tos/administer-copilot/manage-for-enterprise/manage-copilot-coding-agent
-contentType: how-tos
-category:
- - Manage Copilot for a team
----
-
-> [!NOTE]
-> For an introduction to {% data variables.copilot.copilot_cloud_agent %}, see [AUTOTITLE](/copilot/concepts/agents/cloud-agent/about-cloud-agent).
-
-## Prerequisites
-
-* For general information, see [AUTOTITLE](/copilot/tutorials/cloud-agent/pilot-cloud-agent).
-* For information on premium requests and Actions minutes, see [Allowance usage for {% data variables.copilot.copilot_cloud_agent %}](/billing/managing-billing-for-your-products/managing-billing-for-github-copilot/about-billing-for-github-copilot#allowance-usage-for-copilot-cloud-agent).
-* For information on MCP servers, see [AUTOTITLE](/copilot/how-tos/use-copilot-agents/cloud-agent/extend-cloud-agent-with-mcp).
-
-## Enabling {% data variables.copilot.copilot_cloud_agent %} for your {% data variables.product.prodname_copilot_short %} subscribers
-
-{% data variables.copilot.copilot_cloud_agent %} and use of third-party MCP servers are blocked by default for users to whom you have assigned a {% data variables.product.prodname_copilot_short %} license. You can allow members to use these features from the AI Controls tab for your enterprise. See [AUTOTITLE](/copilot/managing-copilot/managing-copilot-for-your-enterprise/managing-policies-and-features-for-copilot-in-your-enterprise#configuring-policies-for-github-copilot).
-
-* On the "Agents" page, click **{% data variables.copilot.copilot_cloud_agent %}**, then select **Enabled everywhere**, **Let organizations decide**, or **Enable for selected organizations**.
-* On the "MCP" page, for the "MCP servers in {% data variables.product.prodname_copilot_short %}" policy, select **Enabled everywhere** or **Let organizations decide**.
-
-### Next steps
-
-* If you selected **Enabled everywhere**, tell organization owners that {% data variables.copilot.copilot_cloud_agent %} is enabled for all members. By default, the agent will be available in all repositories, but it is possible to opt out some or all repositories.
-* If you selected **Let organizations decide**, discuss member enablement with organization owners.
-* If you selected **Enable for selected organizations** ({% data variables.copilot.copilot_cloud_agent %} only), tell the owners of the selected organizations that {% data variables.copilot.copilot_cloud_agent %} is enabled for their members. Organizations that aren't selected will not have access.
-
-For more information, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-organization/add-copilot-cloud-agent).
-
-> [!NOTE]
-> When the {% data variables.copilot.copilot_cloud_agent %} policy is set to **Enabled for selected organizations**, you can select individual organizations in the UI. To select organizations based on custom properties instead, use the REST API. See [AUTOTITLE](/admin/managing-accounts-and-repositories/managing-organizations-in-your-enterprise/custom-properties) and [AUTOTITLE](/rest/copilot/copilot-coding-agent-management#selecting-organizations-with-custom-properties).
-
-## Disabling {% data variables.copilot.copilot_cloud_agent %} in your repositories
-
-{% data variables.product.prodname_copilot_short %} policies, like the "{% data variables.copilot.copilot_cloud_agent %}" and "MCP servers on {% data variables.product.prodname_dotcom_the_website %}" policies described above, affect only the users you assign a {% data variables.product.prodname_copilot_short %} license to.
-
-If there are {% data variables.copilot.copilot_pro_plus %} users with access to your enterprise's repositories, they will be able to use {% data variables.copilot.copilot_cloud_agent %} and will not be restricted by your policies.
-
-You can choose to stop anyone using the agent in some or all of your repositories using organization-level settings. For more information, see [AUTOTITLE](/copilot/how-tos/administer-copilot/manage-for-organization/add-copilot-cloud-agent).
-
-Alternatively, you can disable the agent for all repositories owned by your enterprise.
-
-{% data reusables.enterprise-accounts.access-enterprise %}
-{% data reusables.enterprise-accounts.ai-controls-tab %}
-1. In the "Installed Agents" section, click **{% data variables.copilot.copilot_cloud_agent %}**.
-1. In the "{% data variables.copilot.copilot_cloud_agent %}" section, next to "Block {% data variables.copilot.copilot_cloud_agent %} in all repositories owned by ENTERPRISE-NAME", click the toggle.
diff --git a/content/copilot/reference/ai-models/supported-models.md b/content/copilot/reference/ai-models/supported-models.md
index 8f219f0ebc54..bace90a1ecb4 100644
--- a/content/copilot/reference/ai-models/supported-models.md
+++ b/content/copilot/reference/ai-models/supported-models.md
@@ -45,6 +45,20 @@ This table lists the AI models available in {% data variables.product.prodname_c
{% endrowheaders %}
+## Supported AI models in {% data variables.copilot.copilot_auto_model_selection_short_cap_a %}
+
+This table lists the AI models available in {% data variables.copilot.copilot_auto_model_selection_short_cap_a %}.
+
+{% rowheaders %}
+
+| Model | {% data variables.copilot.copilot_cloud_agent %} | {% data variables.copilot.copilot_chat_short %} |
+| --- | --- | --- |
+| {% for model in tables.copilot.auto-model-selection %} |
+| {{ model.name }} | {% if model.cloud_agent == true %}{% octicon "check" aria-label="Included" %}{% else %}{% octicon "x" aria-label="Not included" %}{% endif %} | {% if model.chat == true %}{% octicon "check" aria-label="Included" %}{% else %}{% octicon "x" aria-label="Not included" %}{% endif %} |
+| {% endfor %} |
+
+{% endrowheaders %}
+
## Model retirement history
The following table lists AI models that are retired or scheduled for retirement from {% data variables.product.prodname_copilot_short %}, along with their retirement dates and suggested alternatives.
diff --git a/data/reusables/enterprise-accounts/cca-policies.md b/data/reusables/enterprise-accounts/cca-policies.md
new file mode 100644
index 000000000000..7db2722ef5db
--- /dev/null
+++ b/data/reusables/enterprise-accounts/cca-policies.md
@@ -0,0 +1,2 @@
+1. In the left sidebar, click {% octicon "agent" aria-hidden="true" aria-label="agent" %} **Agents**.
+1. Under "Available agents", click **Copilot Cloud Agent**.
diff --git a/data/tables/copilot/auto-model-selection.yml b/data/tables/copilot/auto-model-selection.yml
new file mode 100644
index 000000000000..e251c4858482
--- /dev/null
+++ b/data/tables/copilot/auto-model-selection.yml
@@ -0,0 +1,57 @@
+# Please keep this list sorted in the following order:
+# 1. By provider, in this order:
+# - OpenAI
+# - Anthropic
+# - Google
+# - xAI
+# - others
+# 2. Within each provider group, alphabetically by model name.
+#
+# This file defines which AI models are available for Copilot cloud agent
+# and Copilot Chat.
+# It is used to generate the model availability table.
+#
+# Column keys:
+# - name: The model name.
+# - cloud_agent: Availability for Copilot cloud agent.
+# - chat: Availability for Copilot Chat.
+
+# OpenAI
+- name: GPT-4.1
+ cloud_agent: false
+ chat: true
+
+- name: GPT-5.3-Codex
+ cloud_agent: false
+ chat: true
+
+- name: GPT-5.4
+ cloud_agent: false
+ chat: true
+
+- name: GPT-5.4 mini
+ cloud_agent: false
+ chat: true
+
+# Anthropic
+- name: Claude Haiku 4.5
+ cloud_agent: false
+ chat: true
+
+- name: Claude Sonnet 4.5
+ cloud_agent: true
+ chat: false
+
+- name: Claude Sonnet 4.6
+ cloud_agent: false
+ chat: true
+
+# xAI
+- name: Grok Code Fast 1
+ cloud_agent: false
+ chat: true
+
+# Fine-tuned OAI models
+- name: Raptor mini
+ cloud_agent: false
+ chat: true
diff --git a/src/data-directory/lib/data-schemas/tables/copilot/auto-model-selection.ts b/src/data-directory/lib/data-schemas/tables/copilot/auto-model-selection.ts
new file mode 100644
index 000000000000..e44f59fa86ae
--- /dev/null
+++ b/src/data-directory/lib/data-schemas/tables/copilot/auto-model-selection.ts
@@ -0,0 +1,24 @@
+// This schema enforces the structure in auto-model-selection.yml
+
+const autoModelSelectionSchema = {
+ type: 'array',
+ items: {
+ type: 'object',
+ additionalProperties: false,
+ required: ['name', 'cloud_agent', 'chat'],
+ properties: {
+ name: {
+ type: 'string',
+ lintable: true,
+ },
+ cloud_agent: {
+ type: 'boolean',
+ },
+ chat: {
+ type: 'boolean',
+ },
+ },
+ },
+}
+
+export default autoModelSelectionSchema
diff --git a/src/secret-scanning/data/pattern-docs/fpt/public-docs.yml b/src/secret-scanning/data/pattern-docs/fpt/public-docs.yml
index 0381e0fb12fb..cebf4223e855 100644
--- a/src/secret-scanning/data/pattern-docs/fpt/public-docs.yml
+++ b/src/secret-scanning/data/pattern-docs/fpt/public-docs.yml
@@ -558,7 +558,7 @@
isPublic: true
isPrivateWithGhas: true
hasPushProtection: true
- hasValidityCheck: false
+ hasValidityCheck: true
hasExtendedMetadata: false
base64Supported: true
isduplicate: true
diff --git a/src/secret-scanning/data/pattern-docs/ghec/public-docs.yml b/src/secret-scanning/data/pattern-docs/ghec/public-docs.yml
index 0381e0fb12fb..cebf4223e855 100644
--- a/src/secret-scanning/data/pattern-docs/ghec/public-docs.yml
+++ b/src/secret-scanning/data/pattern-docs/ghec/public-docs.yml
@@ -558,7 +558,7 @@
isPublic: true
isPrivateWithGhas: true
hasPushProtection: true
- hasValidityCheck: false
+ hasValidityCheck: true
hasExtendedMetadata: false
base64Supported: true
isduplicate: true