Vercel CLI now supports signing blob URLs
By Steven Van ·
Vercel CLI 5.14.5 adds a `blob presign` command for time-limited, operation-scoped Blob URLs and uploads.
The Vercel CLI can now generate signed URLs for Vercel Blob without any application code. A signed URL is scoped to one operation (get, head, put, or delete), one pathname, and an expiry of up to seven days, so a private file can be shared or an upload authorized without handing out a read-write token. Update to Vercel CLI 5.14.5 to use it.
- vercel blob presign signs a URL for a single operation. It issues a GET URL by default, or can be scoped to an upload with --allowed-content-type and --maximum-size-in-bytes constraints.
- --valid-for (for example 15m, 1h, 7d) or an absolute --valid-until sets how long the URL stays valid, and --json returns the result, operation, and expiry for scripting.
- vercel blob signed-token issues a standalone signed token separately from URL generation, for example to restrict write access to a private blob store while an agent investigates an issue. The resulting delegation and client-signing tokens can then be fed into vercel blob presign.
Vercel
The platform for frontend developers — deploy, preview, and scale web apps and AI agents with zero config.
View Vercel →