Vercel CLI now supports signing blob URLs
Vercel CLI just shipped signed blob URLs. Your agents can now handle short-lived file access without exposing credentials.
Why it matters
Vercel expanded its blob storage infrastructure with CLI-native signed URL generation, enabling builders to implement secure, scoped access patterns for AI agents and applications handling file operations. Relevant for teams deploying agents that need fine-grained permission control over object storage.
The key facts
12 to knowVercel CLI v5.14.5 adds 'vercel blob presign' command
Signed URLs support GET, HEAD, PUT, DELETE operations
Custom expiry up to 7 days with --valid-for flag (15m, 1h, 7d options) or absolute --valid-until timestamp
New 'vercel blob signed-token' command separates token generation from URL generation for delegation patterns
--json flag enables structured output for scripting
Use case: scoped file uploads with content-type and size constraints
Vercel CLI v5.14.5 adds blob URL signing capability
Supports GET, HEAD, PUT, DELETE operations with operation-level scoping
Custom expiry up to 7 days or absolute timestamp control
New commands: 'vercel blob presign' and 'vercel blob signed-token'
Content-type and size constraints for upload operations
JSON output option for scripting and agent workflows
Go to the source
Vercel Blogvercel.com
Publisher excerpt: You can now generate signed URLs for Vercel Blob directly from the Vercel CLI. A signed URL is a scoped URL with a set expiration time that lets you perform a single operation on a specific object. Each URL is scoped to one operation (, , , or ), one pathname, and a custom expiry of up to 7 days.…