VS Code enterprise documentation covers AI policy controls relevant to GitHub Copilot browser tools GA (July 2026). Organizations can disable browser tools for chat agents via the BrowserChatTools policy, which sets workbench.browser.enableChatTools to false.
Network filtering restricts domains agent tools (fetch tool, integrated browser) can access during chat sessions. When enabled, agents reach only explicitly allowed domains via chat.agent.allowedNetworkDomains and chat.agent.deniedNetworkDomains; denied domains take precedence.
These policies complement workspace trust and approval prompts for enterprise Copilot deployments with browser automation capabilities.