Skip to main content

Vercel

Connect your Vercel account to Ciphrix using a Vercel API access token for automated compliance monitoring of your projects and team security settings.

Capabilities​

The Vercel integration provides the following capabilities:

✅ Compliance Checks​

Automatically verify security configurations and compliance controls across your Vercel projects and teams including:

  • Git fork protection
  • Preview deployment protection
  • Sensitive marking for secret-like environment variables
  • Secret-like environment variables exposed through the NEXT_PUBLIC_ prefix
  • Team owner counts and pending owner invitations
  • Firewall configuration
  • Team SSO enforcement
  • Log drain configuration

🔄 Import Asset​

Import and track Vercel projects, teams, team members, and related configuration resources as assets in your Ciphrix inventory.

How to Connect Vercel​

Prerequisites​

Before connecting Vercel, ensure you have:

  • A Vercel account with access to the projects and teams you want to monitor
  • Permission to create a Vercel API access token
  • Access to team security settings and member information; use a team Owner account for full team-level visibility
  • Access to any plan-dependent features you want to assess, such as SSO or deployment protection

Important API Token Notes​

Ciphrix uses the Vercel REST API for this integration.

  • Create the token from your personal Account Settings, not from a project's environment variables.
  • Use Full Account scope for Ciphrix's account and team discovery.
  • A project-scoped token does not provide the user and team access needed for all checks.
  • Ciphrix discovers projects in the personal account and teams accessible to the token owner.
  • The Connection Identifier is a label in Ciphrix. It does not restrict scanning to a particular team or project.
  • The environment-variable checks evaluate names, types, and sensitivity settings rather than secret values.

Connection Instructions​

Step 1: Create a Vercel API Access Token​

  1. Log in to Vercel

  2. Open Account Tokens

  3. Create a New Token

    • Enter a descriptive token name such as Ciphrix Compliance Monitoring
    • In the Scope dropdown, select Full Account
    • Choose an expiration date
    • Click Create

  4. Copy and Store the Token Securely

    • Copy the token value immediately
    • Vercel only shows the token value once
    • Store it securely until you add it to Ciphrix

Step 2: Initiate Vercel Connection in Ciphrix​

You have two options to initiate the Vercel connection:

  1. Navigate to Integration Library

    • Log in to ciphrix.app
    • Go to Integrations in the sidebar
    • Go to the Integration Library tab
    • Search for or browse to Vercel

  2. Connect Vercel

    • Click the Connect button on the Vercel integration tile
    • A connection form will appear
Option B: From Create Connection​

  1. Navigate to Create Connection

    • Log in to ciphrix.app
    • Go to Integrations in the sidebar
    • Click Create Connection

  2. Select Vercel

    • From the connection provider dropdown, select Vercel
    • A connection form will appear

Step 3: Fill Connection Details​

  1. Enter Connection Information

    • Connection Name: Enter a friendly name for this connection
      • Example: "Production Vercel"
      • Example: "Engineering Vercel Projects"
    • Connection Identifier: Enter a clear label for this Vercel connection
      • Example: engineering-vercel
      • This label does not limit the projects or teams available to the token
    • Credential Name: Enter a name to identify the saved credential
      • Example: "Ciphrix Vercel Token"
    • Access Token: Paste the Vercel API access token created in Step 1
    • Select Items: Keep Vercel Security Checks selected. Select Vercel Assets if you want to import asset information

  2. Create Connection

    • Click Create Connection
    • Wait for the credentials to be saved and the connection to be created

Step 4: Verify Connection​

  1. Check Connection Status

    • Open the new connection in Integrations
    • Status should show Active after the credentials are saved
    • A successful scan confirms that the token has the required provider access

  2. Initial Scan

    • Ciphrix scans your environment once a week on its scheduled scan day
    • The first scheduled scan collects Vercel configuration and runs the compliance checks
    • You can contact support@ciphrix.com to know your next scan date

  3. View Results

    • Navigate to Monitoring
    • Filter by Vercel to view check results and findings
    • If asset import is enabled, navigate to Assets to view imported Vercel assets

Permissions and Data Access​

Vercel API tokens use account, team, or project access scopes. Ciphrix's current discovery flow uses Full Account scope and the permissions of the account that created the token.

Ciphrix uses this access to review:

  • Account, team, and project inventory and metadata
  • Git fork and preview deployment protection settings
  • Environment-variable names, types, and sensitivity configuration
  • Team members, roles, owner counts, and pending owner invitations
  • Firewall configuration
  • SSO enforcement settings
  • Log drain configuration

Ciphrix makes read-only API requests. It does not deploy applications, change project settings, update environment variables, or modify team membership.

The token itself can have broader permissions than the requests Ciphrix makes. Keep the token private, and replace it before its expiration date. Some settings also depend on your Vercel plan and team role.

Managing the Integration​

Rotating the API Access Token​

To rotate the token used by Ciphrix:

  1. Create a new Vercel API access token with the required account access
  2. Go to Integrations in Ciphrix
  3. Open the existing Vercel connection
  4. Replace the saved Access Token
  5. Click Update Credentials
  6. Delete the old token in Vercel after confirming a scan succeeds with the new token

Revoking Access​

To revoke Ciphrix's access to Vercel:

  1. Open Vercel Account Tokens
  2. Find the token created for Ciphrix
  3. Delete the token
  4. In Ciphrix, disable or delete the Vercel connection

Note: Deleting the token will prevent future Vercel scans from completing successfully.

Troubleshooting​

Connection Failed​

Issue: Credentials cannot be saved or Vercel scans cannot authenticate

  • Confirm you pasted a Vercel API access token
  • Confirm the token has not expired or been deleted
  • Ensure there are no extra spaces when copying the token
  • Create a new token and update the connection if the value may have been copied incorrectly

Permission Errors or Missing Team Settings​

Issue: A scan cannot read some Vercel resources or security settings

  • Confirm the token uses Full Account scope
  • Confirm the token owner has access to the expected teams and projects
  • Use a team Owner account for team security settings and member information
  • Confirm your Vercel plan supports the feature being assessed

No Projects Found​

Issue: The connection is active but expected Vercel projects are missing

  • Confirm the projects are accessible to the account that created the token
  • Confirm the account still belongs to the relevant teams
  • Update the token if its scope or the account's team access has changed
  • Changing the Ciphrix connection identifier does not grant access to another team

No Compliance Data Appearing​

Issue: Integration connected but no compliance data is visible for more than 7 days

  • Confirm the connection status is Active in Ciphrix
  • Confirm the Vercel token is still valid
  • Contact Ciphrix Support at support@ciphrix.com

Token Was Exposed​

Issue: The Vercel token may have been shared or exposed

  • Delete the token in Vercel Account Tokens
  • Create a new token with the required account access
  • Update the Vercel connection in Ciphrix with the new token

Support​

Need help with Vercel integration?