Vercel Agent Requires User Approval for Production Changes

What happened

Vercel Agent requires user approval for any actions that go beyond read-only access to ensure safe production system modifications. This process involves the agent first investigating the problem and proposing a plan that outlines the actions and required access.

Approval of the proposed plan grants the agent the necessary permissions to carry out the task. The investigation phase typically involves inspecting recent deployments and build logs to identify the cause of a failed deployment.

Why it matters

This approach ensures that changes to production systems are made with clear oversight, reducing the risk of unintended consequences. By requiring user approval, Vercel Agent balances automation with human oversight, enhancing the safety of system modifications.

Key details

Read-only access allows the investigation to run automatically without requiring user intervention. If the investigation leads to a redeploy, Vercel Agent requests additional access in a plan that the user can review and approve.

Access is defined through scopes, which are named capabilities recognized by the Vercel authorization system. Vercel Agent can only use the permissions that the user already has, and these are limited by the user’s existing permissions.