Connection guide
Connect Vercel
Connect Vercel through OAuth, select a deployment project, and collect environment-variable, domain, deployment, and protection-posture evidence.
Updated August 17, 2026
Authorize and select a project
- 01
Connect Vercel
From Connections, install or authorize the Sentrail Vercel integration for the intended personal account or team. - 02
Choose the deployment
Select the Vercel project that deploys this Sentrail project's application. - 03
Refresh posture
Run the deployment check to collect the current project, environment-key, domain, deployment, and protection signals.
What Sentrail reads
- Environment variable names, target environments, and Vercel variable types.
- Names that use public client prefixes while appearing secret-like.
- Configured and verified domains.
- Latest deployment URL, state, target, and creation time.
- Available password, SSO, and deployment-protection signals.
How to review deployment findings
A public prefix is not automatically a vulnerability. It means the variable may be bundled into client code and should not contain a credential. Review the key's purpose and the application code that consumes it.
Protection posture also depends on intent. A public production site may not need password protection, while previews, internal tools, and administrative surfaces often should not be broadly reachable.
Troubleshooting
- If the project list is empty, confirm the integration was installed for the correct Vercel account or team.
- If a token expired, reconnect Vercel so the OAuth flow can restore access.
- If posture is stale, refresh the connection after changing environment variables, domains, or protection settings.
- If Vercel is not part of the stack, leave it disconnected rather than linking an unrelated deployment.
