Vercel Blob now supports OIDC authentication
Vercel Blob defaults to OIDC auth—short-lived tokens, zero long-lived secrets. Infrastructure security just got easier for AI app builders.
Why it matters
Vercel is hardening the security baseline for AI/agent applications built on its platform by making OIDC the default authentication method, eliminating long-lived token exposure risk for developers deploying agents and functions.
The key facts
9 to knowOIDC authentication now default for new Vercel Blob projects
Short-lived, auto-rotating tokens replace long-lived .BLOB_READ_WRITE_TOKEN
Functions on Vercel receive tokens automatically
Vercel CLI supports same environment variables for agent/terminal access
Existing stores can upgrade via Projects tab context menu
Replaces long-lived .BLOB_READ_WRITE_TOKEN with auto-rotating short-lived tokens
Automatic token pickup for Vercel Functions — no manual credential management
CLI and agent tooling support included
Existing stores can upgrade via project context menu
Go to the source
Vercel Blogvercel.com
Publisher excerpt: now supports OIDC authentication and is the default setting when connecting new projects.Vercel Blob Vercel-issued OIDC tokens are short-lived and rotate automatically, so you no longer need a long-lived .BLOB_READ_WRITE_TOKEN To upgrade an existing store, first update your project to use the…