Vercel
The Vercel connector enables AI agents to inspect projects, monitor deployments, manage domains, and trigger new builds — all via the Vercel REST API using OAuth 2.0. Your credentials are stored encrypted in MCPGate's vault and are never exposed to the AI client.
Environment variables are sensitive
vercel_list_env_vars returns the names and metadata of environment variables but not their decrypted values. If your Vercel project has sensitive secrets configured, consider disabling this tool to prevent the AI from enumerating variable names.Required scopes#
MCPGate requests the following OAuth scopes when you connect a Vercel account.
| Scope | Purpose |
|---|---|
| read | Read projects, deployments, domains, and environment variable metadata |
| write | Create and cancel deployments, manage domains |
Tool reference#
The Vercel connector exposes 10 tools. Use the MCP Apps page to enable or disable individual tools per app, and the Guardrails page to add fine-grained rules on top.
| Tool | Category | Description |
|---|---|---|
| vercel_list_projects | read | List all Vercel projects for the authenticated team/user |
| vercel_get_project | read | Get a specific Vercel project by ID or name |
| vercel_list_deployments | read | List deployments for a Vercel project |
| vercel_get_deployment | read | Get a specific Vercel deployment by ID |
| vercel_list_domains | read | List domains configured for a Vercel project |
| vercel_list_env_vars | read | List environment variables for a Vercel project |
| vercel_create_deployment | write | Create a new Vercel deployment |
| vercel_cancel_deployment | write | Cancel an in-progress Vercel deployment |
| vercel_add_domain | write | Add a custom domain to a Vercel project |
| vercel_remove_domain | delete | Remove a custom domain from a Vercel project |
Common guardrail recipes#
Read-only access#
Enable only the six read tools. Deny all write and delete tools. Use this for deployment monitoring agents that need to surface build status and domain configuration.
Deploy preset#
Enable read tools plus vercel_create_deployment and vercel_cancel_deployment. Deny vercel_add_domain and vercel_remove_domain. This lets the AI manage the deployment lifecycle without touching DNS configuration.
Restrict to specific projects#
Apply the allow_values template to vercel_create_deployment and target the project_id field. Provide a list of project IDs or names the agent is permitted to deploy. Requests for other projects are denied.
Troubleshooting#
- Deployment fails immediately —
vercel_create_deploymentrequires a valid git reference or file map. Ensure the source branch or commit SHA exists on the connected repository. - Domain add returns conflict — A domain can only be assigned to one Vercel project at a time. Use
vercel_list_domainson the existing project to confirm ownership before reassigning. - Team scope— If the connected Vercel account belongs to a team, the agent accesses the team's projects. Personal and team scopes are separate — connect with the account that owns the target project.