megachangelog
Feature

Sandbox firewall now supports request proxying and filtering

Vercel Sandbox firewall now enables forwarding HTTP requests to your own proxy for logging, debugging, or transforming responses. You can use matchers to filter which requests get forwarded based on path, method, query string, or headers, giving fine-grained control over sandbox traffic routing.

The now supports forwarding specific HTTP requests to a proxy you control. You can also use matchers to filter forwarding and credentials brokering to only the requests that need it.Vercel Sandbox firewall

You can now route outbound sandbox traffic through your own proxy for logging, debugging, or transforming requests and responses. Set a on any allowed domain, and the firewall will forward matching HTTPS requests to your server.forwardURL

The proxy receives the original request along with additional headers to identify the source:

Additionally, you can now use matchers to filter request forwarding or to requests matching a specific path, method, query string, or headers. This gives you fine-grained control over which requests get transformed; for example, only forwarding requests to a specific API path while allowing all other traffic through untouched.credentials brokeringPOST

These features are available in beta for Pro and Enterprise plans. Get started by installing the SDK, and learn more in the docs about and .@vercel/sandbox@betarequests proxyingmatchers

Read more

Requests proxying

Filtering

  • : The original request's SNIvercel-forwarded-host

  • : The original request's schemevercel-forwarded-scheme

  • : The original request's portvercel-forwarded-port

  • : A Vercel-issued OIDC token that the proxy can use to authenticate the request and identity the source team / project / sandbox. Learn more about it in the vercel-sandbox-oidc-tokendocs

sandboxfirewallnetworkingproxysecurity

Source: original entry ↗

More from Vercel

Follow Vercel to get its new changes in your feed and email digest.

Feature

OpenAI Decisions API now available on AI Gateway

OpenAI's Decisions API is now accessible through Vercel's AI Gateway with an OpenAI-compatible endpoint, enabling decision models to answer typed questions and return probabilities, choices, and scores for routing, triage, and guardrails use cases. Support is available across the OpenAI SDK, AI SDK, HTTP API, and CLI with the latest versions.

ai-gatewayopenaiapidecisionssdks
Feature

Timestamp attributes now supported in Vercel Flags

Vercel Flags now supports timestamp attributes for entities, allowing you to create time-based targeting rules. Use this feature to run limited-time campaigns, show content between specific dates, or target users based on registration date.

flagstargetingfeaturetimestampscampaigns
Feature

Glyph Cluster now available in stealth on AI Gateway

Glyph Cluster, a reasoning model for coding and long-context analysis, is now available as a stealth model on Vercel's AI Gateway for Pro and Enterprise plan teams with purchased AI Gateway credits at no cost during the stealth period. The model supports function calling, streams responses, and can be accessed via AI SDK, OpenAI-compatible APIs, and coding agents.

ai-gatewaymodelscodingstealth
See all Vercel changes →