megachangelog
Security

Secure Marketplace credentials with Production-only access

Integration resources can now be restricted to Production-only environments, protecting sensitive credentials from being readable in the dashboard or CLI. This security setting requires Owner permissions to revert and disconnects any non-production environment connections.

You can now secure native integration resources by restricting where they can be used. Setting a resource to removes non-production access and protects credentials as . This makes it so secret values or no longer readable from the dashboard or CLI Production onlysensitive environment variables

From the integration resource , select and save. We recommend that you rotate the secrets of the integration resource after saving.SettingsAllowed Environments → Production only

Once applied:

Reverting this setting requires for your Vercel team. Owners can re-enable Development and Preview environment from Settings and reconnect projects if needed. You may be prompted to reauthenticate with an MFA challenge depending on your settings. Learn more in the Vercel .Owner permissions documentation

Read more

  • Development and Preview connections are removed

  • New non-production connections are blocked

  • Connections without a Production target are disconnected

  • Credentials are protected and no longer readable

securitymarketplaceintegrationscredentialsaccess-control

Source: original entry ↗

More from Vercel

Follow Vercel to get its new changes in your feed and email digest.

Feature

OpenAI Decisions API now available on AI Gateway

OpenAI's Decisions API is now accessible through Vercel's AI Gateway with an OpenAI-compatible endpoint, enabling decision models to answer typed questions and return probabilities, choices, and scores for routing, triage, and guardrails use cases. Support is available across the OpenAI SDK, AI SDK, HTTP API, and CLI with the latest versions.

ai-gatewayopenaiapidecisionssdks
Feature

Timestamp attributes now supported in Vercel Flags

Vercel Flags now supports timestamp attributes for entities, allowing you to create time-based targeting rules. Use this feature to run limited-time campaigns, show content between specific dates, or target users based on registration date.

flagstargetingfeaturetimestampscampaigns
Feature

Glyph Cluster now available in stealth on AI Gateway

Glyph Cluster, a reasoning model for coding and long-context analysis, is now available as a stealth model on Vercel's AI Gateway for Pro and Enterprise plan teams with purchased AI Gateway credits at no cost during the stealth period. The model supports function calling, streams responses, and can be accessed via AI SDK, OpenAI-compatible APIs, and coding agents.

ai-gatewaymodelscodingstealth
See all Vercel changes →