Vercel CLI now supports signing blob URLs
The Vercel CLI now enables generation of signed URLs for Vercel Blob with scoped operations, custom expiration times up to 7 days, and optional content-type and size constraints. This allows short-lived access to private files and controlled upload permissions directly from the command line.
You can now generate signed URLs for Vercel Blob directly from the Vercel CLI. A signed URL is a scoped URL with a set expiration time that lets you perform a single operation on a specific object. Each URL is scoped to one operation (, , , or ), one pathname, and a custom expiry of up to 7 days. Update the Vercel CLI to version to get started.getheadputdelete5.14.5
Use the new command to sign a URL for a single operation, for example to provide short-lived access to a private file or to allow your users to upload images of a certain size and content type. By default it issues a signed URL:vercel blob presignGET
Scope it to an upload with content-type and size constraints
Control how long the URL stays valid with (for example , , ) or an absolute timestamp. Pass to get the result, operation, and expiry as structured output for scripting.--valid-for15m1h7d--valid-until--json
Use when you want to separate signed token generation from URL generation, for example to restrict write access to your private blob store while your agent investigates an issue.vercel blob signed-token
You can then feed the resulting delegation and client-signing tokens into :vercel blob presign
Update to the latest version of the Vercel CLI and run to see all available options. Learn more about signed URLs for Vercel Blob in the .vercel blob presign --helpdocumentation
Generate a presigned URL in one command
Issue a standalone signed token
Source: original entry ↗