> ## Documentation Index
> Fetch the complete documentation index at: https://ona.com/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# SCM tools

> Control whether agents can use GitHub and GitLab tools.

Control whether agents can interact with GitHub and GitLab APIs to create pull requests, manage issues, add review comments, and search repositories. Use this policy when:

* Requiring human review of all SCM interactions for compliance
* Piloting AI-assisted PR creation with a specific team first
* Restricting automated actions to teams that need them

Enabled by default.

## Configuration

Go to [Settings → Agents → Policies](https://app.ona.com/settings/agent-policies) and select:

* **Enabled for all members** (default)
* **Enabled for specific group**: Only selected group members can use SCM tools
* **Disabled**: No SCM tool access

  <img src="https://mintcdn.com/gitpod-13c83c2b/Ffd3ZMPn_fVPCSD6/images/docs/ona/organizations/policy/scm-tools-group-selection.png?fit=max&auto=format&n=Ffd3ZMPn_fVPCSD6&q=85&s=ec61b1483cf619f5722b528b55365440" alt="SCM tools settings showing options to enable for all members, specific groups, or disabled" width="1150" height="502" data-path="images/docs/ona/organizations/policy/scm-tools-group-selection.png" />

## Effect on users

| Setting         | Capabilities                                                             |
| --------------- | ------------------------------------------------------------------------ |
| Enabled (all)   | Agents can create/update PRs, manage issues, add review comments, search |
| Enabled (group) | Only group members' agents have SCM access                               |
| Disabled        | No GitHub/GitLab API access; git commands still work                     |

See [SCM tools](/docs/ona/agents/scm-tools) for full capabilities.