Skip to content
Agentsmedium signalverified

GitHub's Copilot metrics now report which skills, MCP servers and slash commands get used

Two changelog entries on September 17, 2026 extend Copilot reporting from how much is used to what is used. The usage metrics API now returns the most-used skills, custom agents, MCP servers, slash commands and plugins, with an interaction count for each. The impact dashboard separately reports how many people used each Copilot feature on at least two days in a 28-day window. Both are for administrators, and both come with counting rules that will mislead anyone who skips them.

By Redakcija WebAiRadarPublished 3 min readwritten by a model
Image: GitHub

An organization that has spent a year writing Copilot skills and wiring up MCP servers has had no way to see which of them anyone actually reaches for. GitHub closed that gap on September 17, 2026 with two changes: the usage metrics API now names the customizations in use, and the impact dashboard now reports engagement per feature rather than activity in aggregate.

What is now counted

The new fields appear in enterprise and organization reports: per-user and aggregate one-day reports, per-user 28-day reports, and the daily totals inside aggregate 28-day reports. Each report answers two questions. totals_by_skill, totals_by_custom_agent, totals_by_mcp, totals_by_slash_cmd and totals_by_plugin list the five most active items with an interaction_count on each. The matching distinct_*_use_count fields report how many different items were used at all, including those below the top five.

What an interaction means depends on the category, and the difference matters. For skills, slash commands and plugin skills it counts invocations. For custom agents it counts starts. For MCP servers it counts connection attempts only — successful and failed alike — so calling ten tools over one established connection still registers as one.

  • The distinct counts are the ones to watch over time, because a rising number means the variety of customizations in use is growing.
  • In an aggregate report each item counts once for the whole organization, not once per user.
  • Names of GitHub-provided items are shown; customer-defined ones are grouped under a generic label instead.
  • Empty arrays and zeroes mean no matching activity, while null or absent fields mean the data was unavailable.

The one arithmetic trap

Plugin metrics count only the skill invocations that belong to a plugin. Every plugin interaction therefore also appears in the skill totals, which makes the plugin figures a subset rather than a separate category. Adding the two together double-counts, and GitHub says so explicitly in the notes.

The privacy rule has a similar shape. Because customer-defined names are withheld, a team that writes all its own skills will see a large total under a generic label and almost nothing named. That is a reporting limit, not a measurement failure, and a dashboard built on top of these numbers should say which is which.

The impact dashboard counts people, not calls

The second change reports engagement: how many active users touched a given feature on at least two days during the 28-day period. A single curious afternoon therefore does not register, which is the point — the question being answered is whether a feature became part of a routine.

The breakdown covers code completion, agent edits, passive and active Copilot code review, the Copilot cloud agent, Copilot CLI and the Copilot app. A person can appear under more than one feature. Alongside it, users_in_phase_28d now reports the full rolling 28-day population in each AI adoption phase, while the older engaged-user field continues to count only those active on the day itself.

  • Feature engagement appears only in 28-day aggregate reports, not in user-level ones.
  • Active code review means a person requested a review or applied a suggestion; passive means Copilot was assigned automatically and the person did nothing with it.
  • Reports require the Copilot usage metrics policy to be enabled and are limited to enterprise owners, billing managers, organization owners and roles granted the metrics permission.
„To protect privacy, customer-defined names are not shown“
GitHub changelog

Sources

BrandsCopilot

Related

OPENCLAW 2026.10.232,768characters, and past that a key could slip thr
Agentsmedium signal

OpenClaw 2026.10.2 stops long tool output from slipping credentials past redaction

A bug in OpenClaw's secret masking let a credential through whenever it straddled the boundary between two slices of a long text. The fix ships in 2026.10.2 along with repaired updates from 2026.10.1 and a new compaction default for OpenAI and Anthropic API keys.

OpenClawverified

The OpenClaw web interface with a conversation on the left and the Bits & Bolts reference MCP app open beside it, showing a 3D keycap model and an Attach view + note button.
Agentsmedium signal

OpenClaw 2026.10.1 lets agents search installed skills and changes how sessions message each other

OpenClaw released version 2026.10.1 on October 10, 2026, its first stable release since 2026.9.7. Agents can now search the skills installed on a machine and read only the one a task needs, instead of carrying the whole library in the prompt. Opt-in MCP Apps run beside chat, and full backups can go to an external drive or Cloudflare R2. Three changes can break existing setups: session-to-session messaging, the old required argument, and Workboard data stored before July 2026.

OpenClawverified

CLAUDE CODE2.1.294hooks written as instructions now block what t
Agentsmedium signal

Claude Code 2.1.294 fixes prompt hooks that let through the actions they were written to block

Anthropic released Claude Code 2.1.294 on October 8, 2026. It fixes prompt and agent hooks phrased as instructions, which could allow exactly the actions they were meant to stop. Version 2.1.295 followed the same day with an onFailure setting that makes a crashed or timed-out command or HTTP hook block the action. Releases 2.1.292 and 2.1.293 from earlier in the week closed several permission and sandbox gaps.

Claude Code Releases (GitHub)verified