A team creates a custom Copilot cloud agent for release triage. The agent should inspect repository files and search code, but it should not execute shell commands or use the configured Sentry MCP server until those tools are explicitly approved. Evaluate the following statements. 1. The custom agent can read, search, and edit repository content. 2. The Sentry MCP server is configured, but its tools are not enabled by this tools list. 3. Omitting the tools property or using tools: ["*"] would enable all available tools.

---
name: release-triage
description: Reviews release issues and checks repository context before proposing changes.
tools: ["read", "search", "edit"]
mcp-servers:
  sentry:
    type: local
    command: npx
    args: ["@sentry/mcp-server@latest"]
    env:
      SENTRY_ACCESS_TOKEN: ${{ secrets.COPILOT_MCP_SENTRY_ACCESS_TOKEN }}
---

Use this agent when a release issue needs investigation.
Read release notes, search for related code paths, and propose the smallest safe change.
Do not run commands unless the shell execution tool is explicitly made available.