New token formats and automatic secret scanning
Vercel now automatically revokes API credentials when detected in public repositories, GitHub gists, and npm packages. New token formats with prefixes (vcp, vci, vca, vcr, vck) make credentials visually identifiable and easier to manage.
When Vercel API credentials are accidentally committed to public GitHub repositories, gists and npm packages, Vercel now automatically revokes them to protect your account from unauthorized access.
When the exposed credentials are detected, you'll receive notifications and can review any discovered and in your dashboard. This detection is powered by and brings an extra layer of security to all Vercel and v0 users.tokensAPI keysGitHub secret scanning
As part of this change, we've also updated token and API key formats to make them visually identifiable. Each credential type now includes a prefix:
We recommend reviewing your and regularly, rotating long-lived credentials, and revoking unused ones.tokensAPI keys
about account security.Learn more
for
vciVercel integration tokensfor
vcaVercel app access tokensfor
vcrVercel app refresh tokensfor
vckVercel API keys
Source: original entry ↗
More from Vercel
Follow Vercel to get its new changes in your feed and email digest.
OpenAI Decisions API now available on AI Gateway
OpenAI's Decisions API is now accessible through Vercel's AI Gateway with an OpenAI-compatible endpoint, enabling decision models to answer typed questions and return probabilities, choices, and scores for routing, triage, and guardrails use cases. Support is available across the OpenAI SDK, AI SDK, HTTP API, and CLI with the latest versions.
Timestamp attributes now supported in Vercel Flags
Vercel Flags now supports timestamp attributes for entities, allowing you to create time-based targeting rules. Use this feature to run limited-time campaigns, show content between specific dates, or target users based on registration date.
Glyph Cluster now available in stealth on AI Gateway
Glyph Cluster, a reasoning model for coding and long-context analysis, is now available as a stealth model on Vercel's AI Gateway for Pro and Enterprise plan teams with purchased AI Gateway credits at no cost during the stealth period. The model supports function calling, streams responses, and can be accessed via AI SDK, OpenAI-compatible APIs, and coding agents.