AI BriefingVercel Sandbox Adds Support for Managed npm Credentials and Custom Registries
·2026.11.12 09:00
Key point
The feature keeps tokens outside the sandbox while allowing coding agents to install dependencies from private registries like GitHub Packages and JFrog Artifactory.
Details
- Vercel Sandbox now supports installing private npm packages using credentials stored in team Shared Environment Variables.
- Custom registries including GitHub Packages and JFrog Artifactory are supported.
- Tokens remain outside the sandbox; the firewall adds authentication to install requests so coding agents can install dependencies without seeing the tokens.
- Users must update their Sandbox SDK or CLI to the latest version to use the feature.
Implementation
- Pass
credentials: { npm: true }when creating a sandbox to enable the use of existing team npm credentials. - Documentation is available for the npm credentials feature.
This summary was generated automatically by AI. Check the original for the author's claims and context. Copyright belongs to the original author.
Our guide explains how the AI works. Report summary errors, attribution issues, or removal requests via Contact.
Related
Vercel Labs releases agent-desktop CLI for AI agents to control desktop apps via accessibility trees