Dimitrios Philliou is a senior growth product manager at Fivetran and former GitHub product manager who helped make AI coding assistants more extensible, interoperable, and secure. His work on GitHub Copilot Extensions and the GitHub MCP Server addresses a practical problem: how agents can access real software systems without compromising credentials, permissions, or human oversight.
Before GitHub, Philliou worked at Paystand and studied at Holberton School. He later worked on GitHub Actions before becoming a product manager for Copilot Extensions. In 2024, he joined a GitHub Copilot workshop at AI Engineer World’s Fair and helped developers build custom Copilot extensions.
His subsequent work on GitHub’s open-source MCP server connected AI clients to repositories, issues, and pull requests, with particular attention to three product decisions:
- Risk-aware agent permissions: Tool annotations distinguish read-only operations from destructive actions, allowing routine inspection while requiring approval for consequential changes.
- Credential protection against prompt injection: Secret scanning and push protection inspect tool-call inputs before execution and block requests that could expose credentials.
- Governed interoperability: The remote GitHub MCP service combines compatibility with multiple AI clients, OAuth 2.1 with PKCE, and centralized organizational policies.
In May 2025, Philliou also co-created Cotext.ai, a hackathon prototype exploring scoped-access personal agents connected to external services through MCP integrations.
