access-protected-vercel-deployment

Access Vercel deployments protected by authentication using vercel curl or OIDC token headers.

Updated Sep 17, 2026
One-click install
npx skills add https://github.com/ridhijain709/AIPORSCHE --skill access-protected-vercel-deployment-ridhijain709
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: access-protected-vercel-deployment
Source: https://github.com/ridhijain709/AIPORSCHE/tree/main/.agents/skills/access-protected-vercel-deployment
Command: npx skills add https://github.com/ridhijain709/AIPORSCHE --skill access-protected-vercel-deployment-ridhijain709

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Automated requests to Vercel deployments protected by Vercel Authentication, SSO, or Deployment Protection fail with login pages, 401/403 responses, or TRUSTED_SOURCES_ENVIRONMENT_MISMATCH errors, blocking testing and verification workflows. ## Core Features & Use Cases - Authenticated HTTP requests: Replace raw curl with vercel curl (vc curl) to access protected preview and production deployments using existing Vercel CLI authentication. - Browser automation access: Attach the short-lived x-vercel-trusted-oidc-idp-token header from VERCEL_OIDC_TOKEN to agent-browser or Playwright sessions without exposing the token. - Trusted Sources diagnosis: Interpret protection pages and environment mismatch errors, and determine when a developmentproduction Trusted Sources rule is required. - Use Case: A preview URL returns a Vercel SSO page when curled in CI; use vc curl with the linked project to fetch the health endpoint without disabling Deployment Protection. ## Quick Start Ask the assistant to curl your protected Vercel deployment URL, and it will use vercel curl or inject the OIDC token header to authenticate the request.

Frequently Asked Questions about access-protected-vercel-deployment

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I curl a Vercel deployment protected by authentication?

Use `vercel curl` (or `vc curl`) instead of raw curl. It accepts standard curl options and authenticates with your existing Vercel CLI credentials to reach protected preview and production deployments.

How do I access a protected Vercel deployment in Playwright or a browser?

Set the `x-vercel-trusted-oidc-idp-token` header to the value of `VERCEL_OIDC_TOKEN` in the browser context's extra HTTP headers before the first navigation. Obtain the token via `vc env run` or `vc env pull` without printing or committing it.

What does TRUSTED_SOURCES_ENVIRONMENT_MISMATCH mean on Vercel?

It means your OIDC token is valid but its caller environment is not allowed to reach the target environment. A local development token accesses Preview by default; protected Production requires a Trusted Sources rule allowing `development` → `production`.

Why does my Vercel deployment return a login page or 403 to curl?

The deployment has Deployment Protection, SSO, or Vercel Authentication enabled, and raw unauthenticated requests are blocked. Authenticate with `vc curl` or the trusted OIDC header rather than disabling protection.

Can I use x-vercel-oidc-token instead of x-vercel-trusted-oidc-idp-token?

No. The `x-vercel-oidc-token` header carries an OIDC token into a Vercel Function and serves a different purpose. Trusted Sources browser or CLI access requires the `x-vercel-trusted-oidc-idp-token` header.