Vercel Agent Supports Private Package Installation from npm and Custom Registries

Vercel Agent can now install private dependencies from npm and custom registries by leveraging credentials stored as shared environment variables on Vercel. This allows npm, pnpm, and classic Yarn running in Agent sessions to authenticate exactly as they do in standard Vercel builds.

Configuration and Security

To enable this feature, users must add a shared environment variable for the Development or Preview environment:

• Use NPM_TOKEN for private packages hosted on registry.npmjs.org.
• Use NPM_RC to configure custom or multiple registries.

The agent is restricted to reading only team-shared variables, not project-scoped ones. Credential values remain outside the sandbox, ensuring the agent cannot access them directly.