# Vercel CLI now supports signing blob URLs By Steven Van · 2026-06-22 Vercel CLI 5.14.5 adds a \`blob presign\` command for time-limited, operation-scoped Blob URLs and uploads. The [Vercel]() CLI can now generate signed URLs for Vercel Blob without any application code. A [signed URL]() is scoped to one operation (get, head, put, or delete), one pathname, and an expiry of up to seven days, so a private file can be shared or an upload authorized without handing out a read-write token. Update to Vercel CLI **5.14.5** to use it. - vercel blob presign signs a URL for a single operation. It issues a GET URL by default, or can be scoped to an upload with --allowed-content-type and --maximum-size-in-bytes constraints. - --valid-for (for example 15m, 1h, 7d) or an absolute --valid-until sets how long the URL stays valid, and --json returns the result, operation, and expiry for scripting. - vercel blob signed-token issues a standalone signed token separately from URL generation, for example to restrict write access to a private blob store while an agent investigates an issue. The resulting delegation and client-signing tokens can then be fed into vercel blob presign. [![]()]() ![Vercel]() Vercel The platform for frontend developers — deploy, preview, and scale web apps and AI agents with zero config. [View Vercel →]() Sources [Original source]() [Read Vercel CLI now supports signing blob URLs on Creators Toolbox]() --- Canonical source: https://creatorstoolbox.com/blog/vercel-vercel-cli-now-supports-signing-blob-urls