Bỏ qua đến nội dung chính
Back to home
Tech tools-ai 2 min read

Vercel Connect Hits GA, Eliminating Static Secrets for AI Agents

Vercel Connect has officially launched in general availability, enabling AI agents to request short-lived credentials at runtime instead of relying on stored long-lived tokens.

Tier 2 · sources 99% confidence Reviewed
📚 Aggregated from 2 sources Vercel Blog Vercel Blog

Runtime Credential Provisioning for AI Agents

On August 25, 2026, Vercel announced the general availability (GA) of Vercel Connect across all subscription tiers and its v0 platform, addressing persistent credential leak risks in AI agent deployments. Instead of storing long-lived secret tokens inside codebases or vault repositories, the service allows applications to request short-lived tokens in real time at runtime. These credentials refresh automatically and remain strictly scoped to the exact task at hand.

Seamless OIDC Integration and MCP Ecosystem

According to Vercel, applications deployed on the platform authenticate using built-in OpenID Connect (OIDC) protocols without requiring extra secret keys. The ecosystem currently features over 100 preset connectors for SaaS platforms and developer tools, including Notion, Workday, Slack, GitHub, Linear, Salesforce, and Snowflake.

Beyond native integrations, the system supports custom OAuth flows, standard API keys, and Model Context Protocol (MCP) servers. Developers can enforce fine-grained access controls through pre-configured templates; for example, the open-source GitHub Tools SDK can provision read-only tokens restricted to a single repository.

Enterprise Governance and Secure Event Triggers

The GA release introduces three core governance capabilities: * Role-Based Access Control (RBAC): Manages permissions for creating and configuring connectors. * Audit Logs: Tracks and records all authentication activities. * Observability: Monitors token consumption and traffic across entire projects.

Additionally, the Triggers feature processes inbound events from third-party services—such as Slack posts—by verifying signatures server-side and forwarding payloads to projects via OIDC. This mechanism completely removes the need for static bot tokens or environment variables such as SLACK_SIGNING_SECRET.

Integration Adapters and Usage-Based Pricing

Architecturally, the platform centers around a unified getToken function call, supported by adapters including @vercel/connect/ai-sdk, @vercel/connect/mcp, @vercel/connect/eve, @vercel/connect/chat, Better Auth, and Auth.js.

Vercel Connect adopts a consumption-based pricing model: * Hobby Plan: Includes 500 token requests and 1,000 trigger events per month for free. * Pro Plan: Billed at $3.00 per 1,000 token requests and $0.95 per 1,000 trigger events. * Enterprise Plan: Custom enterprise pricing available upon request.

Existing beta participants will retain their legacy billing terms until September 25, 2026.