Response modes and Autopilot
Studio separates response mode from the higher-risk autonomy toggle. The response mode menu gives you Default, Ask, and Planning. Autopilot appears below those modes as a separate permission that auto-approves tools and removes the turn limit.Ask
Ask
Conversational and read-only. Copilot can explain output, summarize evidence, look things up, and answer questions — but it will not run commands that change state. Use this when you want a second opinion, a walk-through, or a summary.
Planning
Planning
Copilot researches first and proposes a plan before touching anything. It uses read-only tools to gather evidence, then presents a list of proposed steps for you to approve. Use this for production changes, incidents on unfamiliar devices, and multi-step diagnostics.
Default
Default
Full tool access. Copilot acts as needed and pauses for approval when it hits something moderate, dangerous, or unclassified. Use this for routine work where you trust the context and the approval prompts are enough friction.
Autopilot
Autopilot
A permission toggle, not a response mode. It auto-approves tools and runs without a turn limit. Use this only in controlled environments where the target, credentials, and blast radius are unambiguous.
Choosing the right posture
Use the lightest posture that still lets you move:
When in doubt, begin in Ask or Planning. You can move to Default once the evidence is clear. Treat Autopilot like a scoped automation setting, not a convenience switch.
What Copilot can see
The power of Copilot is the operational context around the conversation. Attach context explicitly when you want precision:
The prompt composer shows context usage so you can tell when a conversation is becoming large. Compact or start a fresh thread when old context is no longer helping. Attach the exact tab or selection when precision matters; relying on ambient workspace context is convenient, but explicit context produces better answers.
What Copilot can do
Copilot has access to the same operational surface you do, grouped by domain. Most of these are read-only by default; the ones that change state require approval.
Some actions are inherently external: connector calls, API writes, inventory edits, and device commands can affect systems outside Studio. Copilot should show what it intends to do before it does it. Review the target, payload, and credential context before approving.
Approval posture
Studio classifies every tool call before running it. Approvals scale with risk:
Ask mode and Planning mode are the safest places to start a new investigation. They keep Copilot in an evidence-gathering posture while you decide how to proceed.
Slash commands
Slash commands change session behavior without typing a full sentence.Streaming and steering
While Copilot is working, you can watch progress in real time — thinking state, tool calls, turn count, token usage. You can steer the current turn by sending a new message, queue a steering message for the next available action, or stop the run outright when you’ve seen enough. Copilot picks up the queued message at the next natural break. Use steering aggressively during live operations. If Copilot starts reading the wrong host, assumes the wrong VRF, or takes a plan in the wrong direction, interrupt with the correction instead of waiting for a polished answer. The transcript will still show what happened.Multi-agent work
For complex or long-running tasks, Copilot can delegate to specialist agents — a researcher for read-only context gathering, an executor for coordinated multi-step runs, focused agents for terminal operations, browser automation, network discovery, and procedure authoring. Each sub-agent inherits the same approval posture and tool restrictions you set, so a delegation never escalates beyond what the parent conversation allows. You see their progress inline in the same conversation, and the final result rolls back up as one transcript.Good prompts
A safe incident pattern
- Start in Ask and explain the symptom in plain language.
- Attach the active terminal, selected output, or relevant artifact.
- Move to Planning and ask for read-only checks only.
- Review the proposed commands and remove anything outside the incident scope.
- Switch to Default only when you are ready for Copilot to run approved tools.
- Ask for a final artifact: summary, evidence, timeline, and follow-up.
- Save durable facts as memories and promote the repeatable path to a procedure.
Related docs
Procedures
Turn a successful conversation into a replayable runbook.
Connectors and MCP
Give Copilot access to your APIs and third-party MCP servers.