Vercel Connect adds managed Stripe API keys

Vercel Connect introduces a new option to create a dedicated Stripe API key for each agent or task within a project. Users can select the Managed API Key connection method when setting up a Stripe connector. Vercel automatically generates and stores the key in the user’s Stripe account, applying only the permissions specified during setup. This replaces the previous reliance on a single default secret key, which grants full account access to all connected agents.

The new per-agent keys allow granular control over permissions for different tasks. For instance, an agent generating a daily revenue report can be restricted to read-only access for charges, while an onboarding agent may receive write access limited to customer data. This approach reduces the risk of overprivileged keys being exposed or misused across multiple agents.

Vercel manages the lifecycle of these keys, eliminating the need for users to manually paste or store secrets. Keys can be rotated directly from the connector’s settings without requiring a redeployment of the application. During rotation, the old key remains valid for up to 24 hours to ensure a smooth transition.

To implement this feature, users can create a Stripe connector from the connectors directory in the Vercel dashboard and select Managed API Key as the connection method. Alternatively, the CLI can be used to initiate the process, which opens a browser window to complete the setup. Documentation and the Stripe connector are available for users to begin using this feature.