Web Application Firewall control now available in vercel.json
You can now manage Vercel's Web Application Firewall directly in vercel.json configuration files, in addition to the dashboard, API, and Terraform. Enhanced matchers like has and missing now support more expressive conditions for headers, rewrites, redirects, and routes.
You can now control Vercel’s Web Application Firewall (WAF) actions directly in , alongside existing support in the dashboard, API, and terraform.vercel.json
This approach provides a structured way for both developers and agents to declaratively define and push rules to projects. Agents can use code-generating prompts to author new rules that are easily injected into the project’s vercel.json.
The and matchers have also to support more expressive conditions across headers, rewrites, redirects, and routes. Matching options include:hasmissingbeen enhanced
The following example shows how to deny a request that is prefixed by a specific header:
Read more about and .Vercel's WAFconfiguring WAF rules in vercel.json
String equality and inequality
Regular expressions
Prefixes and suffixes
Inclusion and exclusion from string arrays
Numeric comparisons
Source: original entry ↗
More from Vercel
Follow Vercel to get its new changes in your feed and email digest.
OpenAI Decisions API now available on AI Gateway
OpenAI's Decisions API is now accessible through Vercel's AI Gateway with an OpenAI-compatible endpoint, enabling decision models to answer typed questions and return probabilities, choices, and scores for routing, triage, and guardrails use cases. Support is available across the OpenAI SDK, AI SDK, HTTP API, and CLI with the latest versions.
Timestamp attributes now supported in Vercel Flags
Vercel Flags now supports timestamp attributes for entities, allowing you to create time-based targeting rules. Use this feature to run limited-time campaigns, show content between specific dates, or target users based on registration date.
Glyph Cluster now available in stealth on AI Gateway
Glyph Cluster, a reasoning model for coding and long-context analysis, is now available as a stealth model on Vercel's AI Gateway for Pro and Enterprise plan teams with purchased AI Gateway credits at no cost during the stealth period. The model supports function calling, streams responses, and can be accessed via AI SDK, OpenAI-compatible APIs, and coding agents.