Team-wide provider allowlist on AI Gateway

By Steven Van · 2026-05-28

Team owners on Pro and Enterprise plans can block unapproved AI providers gateway-wide, including BYOK traffic, for $0.10 per 1,000 requests.

Vercel's AI Gateway now lets team owners restrict which AI providers can serve requests, on Pro and Enterprise plans.

Enforcement happens at the gateway level, not the request level, so a developer, or a coding agent that omits or modifies request-level provider filters, still can't reach a provider the team hasn't approved.
Turning the allowlist on adds every current provider by default, so existing traffic isn't affected until an owner explicitly disables one.
It applies to every request through AI Gateway, including Bring Your Own Key (BYOK) traffic.
Providers Vercel adds later are disabled by default, so the approved set doesn't expand without an owner's decision.
Only team owners can change the setting.
The team-wide allowlist costs $0.10 per 1,000 successful requests; requests it blocks aren't charged, and a free per-request "only" filter remains available on all plans.

Vercel

The platform for frontend developers — deploy, preview, and scale web apps and AI agents with zero config.