Vercel Curl (Vercel CLI)

Native curl-syntax CLI command that uses Vercel auth to hit protected preview and production deployments, including path-only invocations on linked projects.

Shipped 2026-05-15: vercel curl accepts full URLs, bare hostnames, or --url, and bypasses Deployment Protection using logged-in credentials. Source: Vercel Changelog, 2026-05-15

Examples

vercel curl https://example.vercel.app/api/hello
vercel curl example.vercel.app/api/users -X POST -H "Content-Type: application/json" -d '{"name":"Ada"}'
vercel curl /api/hello   # linked project only

Source: Vercel Changelog, 2026-05-15

Use case

Replaces manual bypass tokens when debugging preview APIs from terminal or agent scripts. Pair with Vercel AI SDK apps behind protection.

Source Snapshot

The reviewed CLI package snapshot is vercel@54.20.1, with Node >=18, latest published on 2026-07-03, and vercel/vc binaries pointing to dist/vc.js. The npm canary tag is 51.7.0, so use latest for normal CLI assumptions and re-check before coding against newer commands. Source: npm registry, checked 2026-07-04

Vercel Firewall CLI

vercel firewall moves Vercel Firewall configuration into the CLI: custom rules, IP blocks, system bypass rules, attack challenge mode, and system mitigations. The useful agent boundary is draftability. Custom rule and IP block changes are staged until vercel firewall publish; system bypass, attack challenge mode, and system mitigations apply immediately. Source: Vercel docs, last updated 2026-06-04

For scripts and CI, avoid the AI and interactive paths because they require a terminal. Use --condition flags or --json instead. The reviewed package snapshot is vercel@54.20.1, with Node >=18 and vercel/vc binaries pointing to dist/vc.js. Source: npm registry, checked 2026-07-04

The Vercel changelog also points to a vercel-firewall skill candidate in the Vercel plugin bundle (npx skills add vercel/vercel-plugin --skill vercel-firewall). Treat it as a candidate until it passes the local skill-audit flow; the durable wiki fact is the CLI surface and its publish/immediate-apply boundary. Source: Vercel changelog, 2026-05-12

Signal

@vercel_dev announcement: 139 likes, 31 bookmarks. Source: X/@vercel_dev, 2026-05-15

---

Timeline

• 2026-05-15 | vercel curl announced on Vercel changelog. Source: Vercel Changelog, 2026-05-15
• 2026-05-18 | New vercel firewall CLI command brings WAF config to the terminal for humans and agents (custom rules, IP blocks, system mitigations, Attack Mode). Separately, AI Gateway added request-time provider sort by cost/ttft/tps. Source: X/@vercel_dev, 2026-05-18
• 2026-06-01 | Wiki page from enriched bookmark 2055430831972446578. Source: compiled from enrichment, 2026-06-01
• 2026-07-04 | Source-reviewed vercel firewall: rule/IP-block edits are draft-published, while system bypass, attack mode, and system mitigations apply immediately; --ai and interactive modes require a TTY, so scripts should use flags or JSON. Source: Vercel CLI docs, 2026-06-04
• 2026-07-04 | Source-reviewed the native vercel curl bookmark and refreshed the CLI package snapshot: vercel@54.20.1, Node >=18, latest published 2026-07-03. Source: X/@vercel_dev, 2026-05-15; Source: npm registry, 2026-07-04