From 25ff79d4cfbfebd8ec3df7eb1ec67072133f5e66 Mon Sep 17 00:00:00 2001
From: Sunbrye Ly <56200261+sunbrye@users.noreply.github.com>
Date: Wed, 15 Jul 2026 12:32:06 -0700
Subject: [PATCH] Remove HMAC key authentication method from Copilot SDK auth
 docs (#62298)

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
---
 content/copilot/how-tos/copilot-sdk/auth/authenticate.md | 1 -
 1 file changed, 1 deletion(-)

diff --git a/content/copilot/how-tos/copilot-sdk/auth/authenticate.md b/content/copilot/how-tos/copilot-sdk/auth/authenticate.md
index 4175e5067814..564360595e4c 100644
--- a/content/copilot/how-tos/copilot-sdk/auth/authenticate.md
+++ b/content/copilot/how-tos/copilot-sdk/auth/authenticate.md
@@ -295,7 +295,6 @@ BYOK allows you to use your own API keys from model providers like Azure AI Foun
 When multiple authentication methods are available, the SDK uses them in this priority order:
 
 1. **Explicit `gitHubToken`** - Token passed directly to the SDK client or session configuration
-1. **HMAC key** - `CAPI_HMAC_KEY` or `COPILOT_HMAC_KEY` environment variables
 1. **Direct API token** - `GITHUB_COPILOT_API_TOKEN` with `COPILOT_API_URL`
 1. **Environment variable tokens** - `COPILOT_GITHUB_TOKEN` → `GH_TOKEN` → `GITHUB_TOKEN`
 1. **Stored OAuth credentials** - From previous `copilot` CLI login