What problem does it solve? Configuring and operating the Vercel Firewall and WAF through the CLI involves staged drafts, complex condition JSON, and risky production changes; this Skill guides safe rule creation, publishing, and attack response without blocking real users. ## Core Features & Use Cases - Custom WAF Rules: Create, edit, reorder, and stage rules with conditions on path, geo, headers, user agents, and JA3/JA4 fingerprints, with actions like deny, challenge, log, bypass, and rate_limit. - IP Blocks & System Bypass: Block abusive IPs or CIDRs and exempt trusted networks from all firewall checks, with staged publishing for safe rollout. - Attack Response & Rate Limiting: Enable Attack Mode during active attacks, tune rate limits per endpoint, and query firewall metrics via vc metrics for triage. - Use Case: When your API is being hammered by abusive clients, use this Skill to stage a rate-limit rule in log mode, review dashboard traffic, then progressively enforce it in preview and production. ## Quick Start Ask the assistant to add a Vercel Firewall rule that rate limits your /api endpoints to 100 requests per minute per IP and stage it for review.
