Query Web Analytics from the Vercel CLI

Vercel Flags no longer requires SDK Keys for Vercel deployments

Vercel Flags giờ đây tự động xác thực thông qua OIDC tokens ngắn hạn mà không cần SDK Keys hay biến môi trường FLAGS cho các triển khai trên Vercel. Chỉ cần vercel link và vercel env pull là đủ cho phát triển local, trong khi các dự án cũ vẫn giữ nguyên yêu cầu SDK Keys cho các trường hợp đặc biệt.

Lập trình viên cần đọc bài này để hiểu cách tối ưu hóa quản lý tính năng động (flags) trong dự án Vercel mới nhất, giảm thiểu rủi ro về bảo mật khi sử dụng SDK Keys và khám phá giải pháp tự động hóa cho phát triển và triển khai.

Every (Agents) Connection to Railway

Railway outlines three ways AI coding agents can connect to and interact with the Railway platform: Local MCP (via the Railway CLI, best for local development), Remote MCP (hosted at mcp.railway.com, OAuth-based, for hosted assistants and CI), and the Railway Agent (a Railway-aware operator accessible via CLI or MCP for multi-step tasks). The post covers installation via a one-liner, CLI improvements for agent-friendliness (--json, -y, -s/-e flags), and guidance on when to use each connection method. It also details the Railway Agent's capabilities including diagnosing failing deployments, managing services, and opening pull requests with fixes.

State of Rails: How Railway Is Building Infrastructure for AI Agents

Railway is building an agent-first deployment platform designed to let AI coding agents handle the full software development loop — from signup and first deploy to debugging, iteration, and operations. Key features include an agent-optimized CLI with JSON output and reduced interactivity requirements, local and remote MCP server support (with the older npx path deprecated), agent skills that teach agents when and how to use Railway tools, sandboxes for disposable execution environments, a Railway-native Agent that understands the platform's project model, and Guardrails policies (starting with deploy source control) that let teams safely expand what agents are allowed to do. MCP-driven agent usage has grown more than 5x in the past month.

Vercel debuts eve open source agent framework, tries to fix shadow AI with Passport

Vercel unveiled eve, an open source agent framework using TypeScript and Markdown, at its Ship event in London. Eve simplifies agent creation with a 'fill in the blanks' approach — agents are defined as directories with files for instructions, tools, auth, and scheduling, sandboxed on isolated VMs. Deployment uses the standard vercel deploy command, and any AI SDK-compatible model can be used. Vercel also announced enterprise features including Passport (OpenID Connect-based identity control for employee-built apps), Vercel Connect (short-lived OAuth tokens replacing static credentials), Enterprise Managed Users (directory sync), and Bring Your Own Cloud (BYOC) on AWS. Passport targets 'shadow AI' — employees building vibe-coded apps with company data outside IT governance. The article also covers Vercel's cost positioning versus AWS Lambda and its ongoing competitive tension with Cloudflare over platform openness.

Custom OIDC Token Audiences

Vercel's OIDC issuer now supports custom audience claims, allowing deployments to request tokens with provider-specific aud values. A new token exchange service accepts the default Vercel OIDC token and returns a new one with an updated audience targeting a downstream service (e.g., sts.amazonaws.com for AWS). The exchanged token preserves all original claims, adds an act (actor) claim for auditable delegation, and is signed with the same key. Public JWKS endpoints are replicated across all Vercel regions for low-latency verification. This improves security by preventing token replay attacks across different providers.

Deploy Node servers with zero configuration

Vercel giờ đây hỗ trợ triển khai máy chủ Node.js không cần cấu hình, tự động phát hiện file server.ts ở thư mục gốc hoặc src/server.ts và triển khai dưới dạng ứng dụng Node.js. Tính năng này hoạt động song song với các backend zero-config khác như Express, Koa và NestJS, đồng thời Vercel CLI quản lý phát triển cục bộ (vc dev) và triển khai (vc deploy) mà không cần file cấu hình.

Lập trình viên Node.js sẽ tiết kiệm thời gian và tránh rắc rối khi phát triển, test và triển khai ứng dụng backend mà không cần thiết lập cấu hình thủ công.