KeyKeeperVercel
How an agent gets a Vercel key through KeyKeeper, what to choose on vercel.com, and how KeyKeeper verifies it.
| Template id | vercel (also vercel-token) |
|---|---|
| Field | vercel-token → VERCEL_TOKEN · secret |
| Also | vercel-org-id → VERCEL_ORG_ID · plain, confirmed by you, optional |
| Also | vercel-project-id → VERCEL_PROJECT_ID · plain, confirmed by you, optional |
| Key looks like | shown once when created |
| Created at | vercel.com |
| Verified by KeyKeeper | GET https://api.vercel.com/v2/user — reads the authenticated Vercel identity |
| Template checked | 2026-09-15 |
What the agent does
keykeeper providers show vercel
keykeeper save --provider vercel --from-clipboard --create --purpose "what this task does"
keykeeper run -c vercel -- <your command>--provider vercel fills in the credential id and the fields. The environment
variables are the ones Vercel's own tools read, so nothing has to be mapped.
What only you can do
Log in to vercel.com
Name the token
Pick the user or Team scope and expiry
Record project/team IDs separately when the workflow needs them
Copy the key, then approve the save in KeyKeeper's window.
What to choose
Vercel tokens are scoped to a user or Team, not one project. Choose the narrowest account or Team and shortest expiry; use the optional IDs to target one project.
The agent is told the same thing. It opens the page for you and says what to pick; it never logs in, passes 2FA or pays on your behalf.
What KeyKeeper checks
- Before writing: the value must look like a Vercel key (shown once when created). A wrong paste is refused before anything is stored, and the agent is told why — without the value.
- After saving: KeyKeeper itself sends
GET https://api.vercel.com/v2/userwith the key in theAuthorizationheader (reads the authenticated Vercel identity). The agent receives accepted, rejected or could not reach — never the value.
Rotation and expiry
Expiry is chosen at creation (1 day to 1 year, or none). A token that leaks to a public repo is revoked automatically. Rotate or revoke at vercel.com.