Skip to content
Back to skills

Vercel

BSecurity

Deploy and manage applications on Vercel, including preview deployments and deployment protection. Use when working with Vercel-hosted projects or configuring Vercel deployments.

  • 151 stars
  • 0 votes
  • 0 copies
  • 2 views
  • Added June 5, 2026
toolstypescriptgobashtesting

Works with

  • cli

Security analysis

B88/100
  • criticalExfiltrates credentials via HTTP — exact pattern from Snyk ToxicSkills study

Pro scans all 3 files and shows the line behind each finding

Scanned June 5, 2026

npx -y skills add OpenHands/extensions --skill vercel --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Vercel?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Vercel
[![Security: B — Skills Directory](https://www.skillsdirectory.com/api/skills/openhands-vercel/badge)](https://www.skillsdirectory.com/skills/openhands-vercel)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: vercel
description: Deploy and manage applications on Vercel, including preview deployments and deployment protection. Use when working with Vercel-hosted projects or configuring Vercel deployments.
triggers:
- vercel
- preview deployment
---

# Vercel Deployment Guide

## Deployment Protection and Agent Access

Vercel deployments may have **Deployment Protection** enabled, which requires authentication to access preview deployments. This can block automated testing and agent access to preview URLs.

### Identifying Protected Deployments

If you encounter a login page or authentication requirement when accessing a Vercel preview URL, the deployment has protection enabled. Signs include:
- Redirect to `vercel.com/login` or SSO login page
- 401/403 errors when accessing the deployment
- Preview URLs that require Vercel team membership

### Enabling Agent Access with Protection Bypass

To allow agents and automated systems to access protected deployments, users need to set up **Protection Bypass for Automation**:

1. **Navigate to Project Settings**
   - Go to the Vercel Dashboard
   - Select the project
   - Click on **Settings** → **Deployment Protection**

2. **Generate a Protection Bypass Secret**
   - Under "Protection Bypass for Automation", click **Generate Secret**
   - Copy the generated secret securely

3. **Using the Bypass Secret**
   
   The secret can be used in two ways:
   
   **As a Header:**
   ```bash
   curl -H "x-vercel-protection-bypass: <secret>" https://your-preview-url.vercel.app
   ```
   
   **As a Query Parameter:**
   ```
   https://your-preview-url.vercel.app?x-vercel-protection-bypass=<secret>
   ```

4. **For Browser-Based Testing**
   - Append `?x-vercel-protection-bypass=<secret>` to the preview URL
   - The secret will be stored in a cookie for subsequent requests

### Alternative: Disable Protection for Previews

If protection bypass is not suitable, users can disable protection for preview deployments:

1. Go to **Settings** → **Deployment Protection**
2. Set "Vercel Authentication" to **Only Production Deployments** or **Disabled**

<IMPORTANT>
If you cannot access a Vercel preview deployment due to authentication requirements, inform the user that they need to either:
1. Set up a Protection Bypass secret and provide it to you, OR
2. Disable Deployment Protection for preview deployments in their Vercel project settings

Do NOT repeatedly attempt to access protected URLs without the bypass secret.
</IMPORTANT>

## Environment Variables

Set environment variables in Vercel Dashboard under **Settings** → **Environment Variables**, or use the Vercel CLI:

```bash
vercel env add MY_SECRET
```

Access in your application:
```typescript
const secret = process.env.MY_SECRET;
```

## Vercel CLI Commands

Common Vercel CLI commands:

```bash
# Login to Vercel
vercel login

# Deploy to preview
vercel

# Deploy to production
vercel --prod

# List deployments
vercel ls

# View deployment logs
vercel logs <deployment-url>

# Pull environment variables locally
vercel env pull
```

Files in this skill

  • .plugin/plugin.json463 B
  • README.md3 KB
  • SKILL.md3 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…