How is this different from connecting Vercel MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the Vercel MCP API changes?

We track the Vercel MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different Vercel tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in Vercel?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the Vercel MCP server myself?

No. TrustGate connects to the Vercel MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to Vercel directly.

Connect Vercel MCP to your AI agents, securely.

Q: Is Vercel MCP secure?

The server itself exposes 248 tools, and some of them can write to your Vercel account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches Vercel.

One secured endpoint for every Vercel call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try Vercel MCP now

What your agents can ask once Vercel MCP is connected.

“Show me the latest deployments for my project”
“Get the build logs for the most recent failed deployment”
“List all my Vercel projects and their domains”

“Why did this deployment fail?”
“Show the runtime errors from the last hour”
“How do I configure a rewrite in Vercel?”

Select the tools your AI agents can call

248 tools from the Vercel MCP schema.

Showing 248 tools

list_teamsreadLists the Vercel teams the authenticated user belongs to.
list_projectsreadLists all Vercel projects for a user, with a maximum of 50.
get_projectreadGets a specific project in Vercel.
accept_project_transfer_requesthigh riskAccepts a project transfer request.
add_project_domainwriteAdds a domain to a project.
create_git_projectwriteCreates or reuses a Vercel project linked to an accessible Git repository.
create_projectwriteCreates a new project.
get_project_deletion_linkreadGets a link to the Delete Project section in the Vercel dashboard.
get_project_deployment_protectionreadGets the effective password protection, Vercel Authentication, and Trusted IP settings for a Vercel project.
get_project_domainreadGets project domain by project id/name and domain name.
git_namespacesreadLists git namespaces for a supported provider.
list_project_domainsreadRetrieves project domains by project by id or name.
pause_projecthigh riskPauses a project.
unpause_projectwriteUnpauses a project.
update_projectwriteUpdates an existing project.
update_project_deployment_protectionhigh riskPartially updates password protection, Vercel Authentication and Trusted IPs for a Vercel project.
update_project_protection_bypasshigh riskUpdates Protection Bypass for Automation.
verify_project_domainreadAttempts to verify a project domain with verified = false by checking the correctness of the project domain's verification challenge.
list_deploymentsreadLists all deployments for a project, with creation time, state and target information.
get_deploymentreadGets the details of a specific deployment.
deploy_to_vercelhigh riskDeploys the current project to Vercel.
cancel_deploymentwriteCancels a deployment.
create_deploymenthigh riskCreates a deployment from a Git source or files.
get_deployment_feature_flagsreadRetrieves the feature flags of a deployment.
get_deployment_file_contentsreadGets the contents of a file in a deployment.
get_git_deployment_contextreadLists the teams, their plans, linked Git projects and connected Cursor Origin workspaces.
import-claude-design-from-urlhigh riskImports a self-contained HTML bundle from Claude Design and deploys it to Vercel.
list_deployment_eventsreadGets deployment events, including build output.
list_deployment_filesreadLists the files of a deployment.
open_deploymentsreadShows deployments in a live card with expandable build logs.
ui_get_build_log_excerptreadReads the latest build-log lines for the deployments card (app-only tool).
upload_filewriteUploads deployment files.
get_deployment_build_logsreadGets the build logs of a deployment by deployment ID or URL, as a stream or a JSON response.
get_runtime_logsreadGets runtime logs for a project or deployment, showing application output from serverless and edge functions.
get_runtime_errorsreadGets the runtime errors recorded for a project or deployment.
create_drainwriteCreates a new Drain.
get_drainreadFinds a Drain by ID.
list_drainsreadRetrieves a list of all Drains.
test_drainreadValidates Drain delivery configuration.
update_drainwriteUpdates an existing Drain.
create_observability_queryreadQueries observability data.
create_trace_sessionwriteMints a short-lived HS256 JWT scoped to a deployment hostname.
get_observability_configuration_projectsreadLists the projects that are currently configured as disabled for Observability Plus on a team.
get_observability_schemareadGets the observability query schema.
get_project_tracereadGets a project trace by request ID.
get_access_to_vercel_urlhigh riskCreates a temporary shareable link that bypasses authentication for protected Vercel deployments.
web_fetch_vercel_urlreadFetches a Vercel deployment URL and returns the response, including deployments protected with Vercel Authentication.
search_vercel_documentationreadSearches the Vercel documentation for platform features, frameworks, compute, caching, security and pricing.
use_vercel_clihigh riskRuns Vercel CLI commands. Available through the https://mcp.vercel.com/cli/mcp connection.
submit_feedbackwriteSends feedback to Vercel to report a problem or suggest an improvement.
aggregate_eventsreadAggregates custom events.
aggregate_pageviewsreadAggregates page views.
count_eventsreadCounts custom events.
count_pageviewsreadCounts page views.
get_web_analyticsreadQueries Web Analytics for a Vercel project.
list_access_group_membersreadLists members of an access group.
list_access_group_projectsreadLists projects of an access group.
list_access_groupsreadLists access groups.
read_access_groupreadReads an access group.
read_access_group_projectreadReads an access group project.
get_auth_userreadGets the authenticated user.
get_teamreadGets a team.
list_event_typesreadLists event types.
list_team_membersreadLists team members.
list_user_eventsreadLists user events.
get_agent_runreadGets one agent run of an agent built with eve and deployed on Vercel.
get_agent_run_tracereadGets the trace of an agent run of an agent built with eve and deployed on Vercel.
list_agent_run_projectsreadLists the projects with agent runs from agents built with eve.
list_agent_runsreadLists the agent runs of an agent built with eve and deployed on Vercel.
get_vercel_ci_invocationreadInspects a Vercel CI invocation attempt, including its status and conclusion.
get_vercel_ci_invocation_logsreadReads logs for a Vercel CI invocation attempt.
get_vercel_ci_invocation_treereadReturns an invocation attempt together with every job definition, its latest job run, and the task definitions and active task runs of that job run.
get_vercel_ci_job_definitionreadInspects a job definition within a Vercel CI invocation attempt.
get_vercel_ci_job_runreadInspects a job run within a Vercel CI invocation attempt.
get_vercel_ci_job_run_logsreadReads logs for a Vercel CI job run.
get_vercel_ci_task_logsreadReturns log lines for the tasks of an invocation attempt in a single request, grouped by task.
get_vercel_ci_task_run_logsreadGets the logs of a Vercel CI task run, optionally as a live stream.
list_vercel_ci_invocation_attemptsreadLists the attempts for a Vercel CI invocation.
list_vercel_ci_invocationsreadLists Vercel CI invocations for your team.
list_vercel_ci_job_definitionsreadLists job definitions for a Vercel CI invocation attempt.
list_vercel_ci_job_runsreadLists runs of a job definition within a Vercel CI invocation attempt.
list_vercel_ci_task_definitionsreadLists the task definitions of a Vercel CI invocation attempt.
list_vercel_ci_task_runsreadLists task runs within a Vercel CI job run.
retry_vercel_ci_invocationwriteRetries a terminal Vercel CI invocation attempt identified by invocationId and attempt.
buy_domainhigh riskRegisters (purchases) a single domain for a team.
get_domain_orderreadGets the status of a domain purchase order returned by buy_domain, to confirm whether the asynchronous registration completed.
get_purchase_quotereadGets a read-only domain registration quote for the selected team.
list_billing_chargesreadLists FOCUS billing charges.
list_contract_commitmentsreadLists FOCUS contract commitments.
artifact_queryreadQueries information about an artifact.
get_remote_cache_statusreadGets the status of Remote Caching for this principal.
invalidate_by_src_imageswriteInvalidates cached content by source image.
invalidate_by_tagswriteInvalidates cached content by tag.
record_eventswriteRecords an artifacts cache usage event.
upload_artifactwriteUploads a cache artifact.
create_storage_stores_blobwriteCreates a Blob store.
get_storage_stores_by_idreadGets a storage store.
rerequest_checkwriteRe-requests a check.
approve_rolling_release_stagehigh riskUpdates the active rolling release to the next stage for a project.
complete_rolling_releasehigh riskCompletes the rolling release for the project.
get_rolling_releasereadGets the active rolling release information for a project.
get_rolling_release_billing_statusreadGets rolling release billing status.
get_rolling_release_configreadGets rolling release configuration.
list_promote_aliasesreadGets a list of aliases with status for the current promote.
request_promotehigh riskPoints production traffic to a given deployment.
request_rollbackhigh riskPoints production traffic to a previous production deployment by ID.
start_rolling_releasehigh riskStarts a rolling release for the project.
update_rolling_release_configwriteUpdates the rolling release settings for the project.
buy_domainshigh riskRegisters domains, one at a time, after a get_purchase_quote quote.
buy_single_domainhigh riskRegisters a single domain; use get_purchase_quote first to get the quote.
check_domain_availability_and_pricereadChecks if domain names are available for purchase and gets pricing information.
create_or_transfer_domainwriteAdds an existing domain to the Vercel platform.
create_recordwriteCreates a DNS record for a domain.
get_bulk_availabilityreadGets availability for multiple domains.
get_bulk_pricereadGets price data for multiple domains in a single request.
get_cert_by_idreadReads certificate metadata by its ID, without the private key.
get_contact_info_schemareadGets contact info schema.
get_domainreadGets information for a single domain in an account or team.
get_domain_availabilityreadChecks whether a domain is available to register.
get_domain_configreadGets a Domain's configuration.
get_domain_contact_verificationreadGets contact verification status for a domain.
get_domain_pricereadGets current domain pricing.
get_domain_project_domainsreadLists all project domains associated with an apex domain owned by the authenticated account.
get_domain_verification_recordreadGets the TXT verification record needed to claim ownership of a domain for the authenticated team.
get_domains_records_by_record_idreadGets a DNS record by ID.
get_orderreadGets a domain order.
get_recordsreadRetrieves a list of DNS records created for a domain name.
get_tldreadGets TLD.
get_tld_pricereadGets TLD price data.
issue_certwriteIssues a new certificate.
list_certsreadLists certificates.
list_domainsreadLists all the domains.
list_supported_tldsreadGets the supported TLDs.
replace_domain_dns_recordshigh riskReplaces DNS records for a domain.
search_domainsreadChecks availability and registration and renewal prices for one to 200 exact domain names.
update_recordwriteUpdates an existing DNS record.
create_project_envwriteCreates one or more environment variables.
edit_project_envwriteEdits an environment variable.
filter_project_envsreadRetrieves the environment variables of a project by id or name.
get_custom_environmentreadRetrieves a custom environment.
get_project_envhigh riskRetrieves the decrypted value of an environment variable of a project by id.
get_shared_env_varhigh riskRetrieves the decrypted value of a Shared Environment Variable by id.
list_project_custom_environmentsreadRetrieves custom environments.
activate_kms_signing_keywriteActivates a signing key.
create_kms_issuerwriteCreates a KMS issuer with server-generated signing keys for your team.
create_kms_issuer_policywriteCreates an issuer policy.
create_kms_signing_keywriteCreates a signing key.
get_kms_issuerreadGets an issuer.
list_kms_issuersreadRetrieves the list of KMS issuers that belong to the authenticated team.
revoke_kms_signing_keyhigh riskRevokes a signing key.
update_kms_issuerwriteUpdates an issuer.
update_kms_issuer_policywriteUpdates an issuer policy.
create_flagwriteCreates a flag.
create_sdk_keywriteCreates an SDK key.
get_flagreadGets a flag.
get_flag_segmentreadRetrieves a feature flag segment by ID or slug.
get_flag_settingsreadGets project flag settings.
list_feature_flag_sdk_keysreadGets all SDK keys.
list_flag_segmentsreadLists all feature flag segments for a project.
list_flag_versionsreadLists flag versions for a given flag.
list_flagsreadLists flags.
list_flags_v2readLists flags (v2, paginated).
list_team_flag_settingsreadRetrieves feature flag settings for projects in a team.
list_team_flagsreadRetrieves all feature flags for a team across all projects.
list_team_flags_v2readRetrieves all feature flags for a team across all projects, with an opaque pagination cursor.
update_flagwriteUpdates a flag.
update_flag_segmentwriteUpdates an existing feature flag segment.
update_flag_settingswriteUpdates project flag settings.
get_active_attack_statusreadReads active attack data.
get_bypass_ipreadReads the system bypass rules.
get_firewall_configreadReads the firewall configuration.
put_firewall_confighigh riskReplaces the firewall configuration.
update_attack_challenge_modehigh riskUpdates Attack Challenge mode.
update_firewall_confighigh riskUpdates the firewall configuration.
create_edge_configwriteCreates a Global Config.
create_edge_config_tokenwriteAdds a token to an existing Global Config.
get_edge_configreadReturns a Global Config.
get_edge_config_backupreadRetrieves a specific version of a Global Config from backup storage.
get_edge_config_backupsreadReturns backups of a Global Config.
get_edge_config_itemreadReturns a specific Global Config Item.
get_edge_config_itemsreadReturns all items of a Global Config.
get_edge_config_tokenreadReturns meta data about a Global Config token.
get_edge_config_tokensreadReturns all tokens of a Global Config.
get_edge_configsreadReturns all Global Configs.
patch_edge_config_itemswriteUpdates multiple Global Config Items in batch.
restore_edge_config_backupwriteRestores a Global Config backup.
update_edge_configwriteUpdates a Global Config.
get_configurationreadRetrieves an integration configuration.
get_webhooksreadGets a list of webhooks.
list_integration_billing_plansreadLists integration billing plans.
list_integration_configuration_productsreadReturns products available for an integration configuration.
list_integration_configurationsreadGets configurations for the authenticated user or team.
search_reporeadLists git repositories linked to namespace by provider.
get_microfrontends_configreadGets microfrontends config for a deployment.
get_microfrontends_config_for_projectreadGets microfrontends config for a project.
get_connectorreadGets the connector by ID.
get_connector_project_connectionreadGets the configuration that connects a connector to a project.
list_connector_project_connectionsreadLists the projects connected to a connector and the environments where each connection is available.
list_connectorsreadLists connectors that belong to a team.
list_project_connector_connectionsreadLists the connectors connected to a project and the environments where each connection is available.
update_connectorwriteUpdates a connector and returns it with any service-side update signals the caller must handle.
upsert_connector_project_connectionwriteConnects a connector to a project, or replaces the environments on an existing project connection.
add_routewriteAdds a routing rule.
assign_aliaswriteAssigns an Alias.
edit_routewriteEdits a routing rule.
generate_routewriteGenerates a routing rule from natural language.
get_aliasreadRetrieves an Alias for the given host name or alias ID.
list_aliasesreadLists aliases.
list_bulk_redirect_versionsreadGets the version history for a project's redirects.
list_bulk_redirectsreadGets project-level redirects.
list_deployment_aliasesreadLists Deployment Aliases.
list_project_route_versionsreadGets routing rule version history.
list_project_routesreadGets project routing rules.
patch_url_protection_bypasshigh riskUpdates the protection bypass for a URL.
restore_redirectswriteRestores the provided redirects in the staging version to the value in the production version.
stage_redirectswriteStages new redirects for a project.
stage_routeswriteStages routing rules.
update_bulk_redirect_versionwritePromotes a staging redirects version to production or restores a previous production version.
update_route_versionswritePromotes, restores or discards a routing rule version.
create_sandboxes_sessions_by_session_id_snapshot_v2writeCreates a snapshot of a sandbox session (v2).
create_sandboxes_sessions_by_session_id_snapshot_v3writeCreates a snapshot of a sandbox session (v3).
create_sandboxes_v2writeCreates a named sandbox (v2).
create_sandboxes_v3writeCreates a named sandbox (v3).
create_sandboxes_v4writeCreates a named sandbox (v4).
create_session_directorywriteCreates a directory in a sandbox session.
extend_session_timeoutwriteExtends the timeout of a sandbox session.
get_named_sandboxreadGets a named sandbox.
get_sessionreadGets a sandbox session.
get_session_commandreadGets a command in a sandbox session.
get_session_command_logsreadStreams the logs of a sandbox command.
get_session_snapshotreadGets a sandbox snapshot.
kill_session_commandhigh riskKills a command in a sandbox session.
list_named_sandboxesreadLists named sandboxes for a project.
list_session_commandsreadLists the commands in a sandbox session.
list_session_snapshotsreadLists sandbox snapshots.
list_sessionsreadLists sandbox sessions.
read_session_filereadReads a file from a sandbox session.
run_session_commandhigh riskExecutes a command in a sandbox session.
stop_sessionwriteStops a sandbox session.
update_sandboxwriteUpdates a sandbox.
update_session_network_policywriteUpdates the network policy of a sandbox session.
write_session_fileswriteWrites files to a sandbox session.
add_toolbar_reactionwriteAdds an emoji reaction to a message in a toolbar thread.
change_toolbar_thread_resolve_statuswriteChanges the resolve status of a toolbar thread.
edit_toolbar_messagewriteEdits an existing message in a toolbar thread.
get_toolbar_threadreadGets a specific toolbar thread by ID, including all messages and context.
list_toolbar_threadsreadLists Vercel Toolbar comment threads for a team.
reply_to_toolbar_threadwriteAdds a reply message to an existing toolbar thread.

What Vercel MCP exposes

Vercel MCP groups its 248 tools into 19 categories, each with a suggested starting policy.

Category	Covers	Access	Suggested policy
Projects	Project and team listing, project details and settings, creation, updates, domains, deployment protection, pausing and transfers	Read / Write	Limit to intended teams
Deployments	Deployment listing, details, events, files and feature flags, creation, cancellation, and deploying from inline files or a Claude Design bundle	Read / Write	Require approval before deploying
Logs	Build logs, runtime logs and error clusters, observability queries and traces, and log drains	Read / Write	Treat log output as potentially sensitive
Access & Fetch	Temporary bypass links and fetching protected deployment URLs	Read / Write	Approve bypass link creation; links grant access to protected deployments
Docs & Analytics	Vercel documentation search, Vercel CLI access, feedback to Vercel, and Web Analytics queries and aggregates	Read / Write	Allow documentation and analytics lookups
Teams & Access	Teams, members, the authenticated user, user events and access groups with their members and projects	Read	Read-only; member lists hold personal data, so limit to administrators
CI & Agent Runs	Vercel CI invocations, attempts, job and task definitions, runs and logs, retries, and agent runs with their traces	Read / Write	Mostly read-only; logs can contain secrets, and retries start new CI work
Billing & Purchases	Domain purchase quotes, domain registration and orders, FOCUS billing charges and contract commitments	Read / Write	buy_domain charges the team; present the quote and get explicit approval first
Caching & Storage	Remote Caching status and artifacts, cache invalidation by tag or source image, and Blob stores	Read / Write	Invalidation purges cached content for live traffic; approve it
Releases & Checks	Rolling releases and their configuration, production promotion and rollback, and re-requesting checks	Read / Write	Promotion, rollback and rolling release stages move production traffic; require approval
Domains & DNS	Domains and their configuration, availability and pricing, DNS records, certificates, TLDs, domain orders and domain purchases	Read / Write	Domain purchases charge the team and DNS replacement can take a site offline; require approval
Secrets & Environment Variables	Project and shared environment variables, custom environments, and KMS issuers, policies and signing keys	Read / Write	Some tools return decrypted secret values; restrict tightly and approve key revocation
Feature Flags	Flags, flag versions, segments, project and team flag settings and SDK keys	Read / Write	Flag updates change live behaviour; SDK keys are credentials
Firewall & Security	Firewall configuration, active attack status, attack challenge mode and system bypass rules	Read / Write	Firewall changes can block legitimate traffic or remove protections; require approval
Global Config	Global Configs, their items, tokens and backups, with creation, batch item updates and backup restore	Read / Write	Config items are read by live deployments; approve item updates and restores
Integrations	Integration configurations, their products and billing plans, webhooks and linked Git repositories	Read	Read-only; allow for inventory
Routing & Networking	Routing rules and their versions, aliases, bulk redirects, URL protection bypass, network connectors and microfrontends configuration	Read / Write	Routing and redirect changes affect live traffic; approve promotions and bypass updates
Sandboxes	Named sandboxes and their sessions, commands and logs, files and directories, snapshots, timeouts and network policies	Read / Write	Sandbox commands run arbitrary code; approve command execution and network policy changes
Toolbar Comments	Vercel Toolbar comment threads, replies, message edits, reactions and resolve status	Read / Write	Replies and edits are visible to teammates; review before posting