vercel-api.update_project_deployment_protection critical conf highhuman approval
Rewrites the access controls guarding a project's deployments, so a single call can strip password protection or widen the trusted-IP allowlist and expose a private environment to the internet.
vercel-api.get_access_to_vercel_url critical conf highhuman approval
Mints a bypass link that lets anyone holding the URL reach an authentication-protected deployment without credentials, defeating the project's access control for the link's lifetime.
vercel-api.buy_pro critical conf highhuman approval redact
Starts a recurring monthly Pro subscription charged to the card on file, committing the organization to ongoing spend the moment the call succeeds.
vercel-api.buy_credits critical conf highhuman approval redact
Charges up to $1000 of prepaid credits to the default card immediately and non-refundably, with the credits expiring after one year whether used or not.
vercel-api.buy_domain critical conf highhuman approval redact
Registers a domain with a non-refundable charge and transmits the registrant's name, address, email, and phone to the registrar, where auto-renew keeps billing each term.
vercel-api.buy_addon critical conf highhuman approval redact
Adds a non-refundable, quantity-priced add-on to the team's next invoice with no API price shown at quote time, so the committed amount is unknown until billing.
vercel-api.web_fetch_vercel_url high conf mediumOBO
Pulls the rendered content of an authentication-gated deployment into the agent's context, surfacing unreleased pages and internal previews that the protection setting was meant to keep private.
vercel-api.deploy_to_vercel high conf highhuman approval
Ships agent-authored code straight to a live Vercel deployment without passing through a git repository, so no pull request, reviewer, or CI gate ever sees the source.
vercel-api.pause_project high conf highOBO
Takes a project's production deployment offline for every visitor until someone unpauses it, converting one tool call into a full customer-facing outage.
vercel-api.get_runtime_logs high conf highhuman approval
Streams raw application output from production functions, where request payloads, user identifiers, and accidentally logged secrets routinely sit in plain text; one principal can drain the corpus unreviewed.
All other tools (15)
vercel-api.change_toolbar_thread_resolve_status low conf highallow
Closes or reopens a feedback thread, changing which review items the team still sees as outstanding.
vercel-api.edit_toolbar_message medium conf highaudit
Rewrites a message already posted in a review thread, altering the record of feedback that teammates and stakeholders rely on.
vercel-api.get_agent_run_trace medium conf mediumaudit
Replays an agent's full conversation including reasoning and tool inputs and outputs, which carry whatever end-user content and arguments were passed through during the run.
vercel-api.get_deployment_build_logs medium conf highaudit
Exposes build output that commonly echoes environment variable names, dependency sources, and internal file paths from the deployment pipeline.
vercel-api.get_domain_order low conf highallow
Confirms whether a domain registration completed, exposing order state for purchases made in the same session.
vercel-api.get_git_deployment_context low conf highallow
Maps teams, billing plans, and the Git repositories wired to each project, exposing how the organization's source control connects to production hosting.
vercel-api.get_project_deployment_protection low conf highallow
Reveals a project's deployment-protection posture including the trusted-IP allowlist, which maps exactly where the perimeter is weakest.
vercel-api.get_purchase_quote low conf highallow
Prices a purchase without charging anything, but mints the five-minute idempotencyKey that is the only thing standing between the agent and an executed charge.
vercel-api.get_runtime_errors medium conf mediumaudit
Summarizes production failures by route and frequency, with sample error text that can quote user input or internal stack detail.
vercel-api.get_web_analytics medium conf mediumaudit
Returns visitor and pageview data sliced by country, device, referrer, and custom event properties, a behavioural profile of the site's end users.
vercel-api.import-claude-design-from-url medium conf mediumaudit
Pulls an externally hosted HTML bundle into the Vercel account as project content, making a third-party URL the source of code that can later be deployed.
vercel-api.list_projects low conf highallow
Enumerates the account's projects and their IDs, giving the agent the inventory it needs to target deployment, pause, and protection tools.
vercel-api.list_teams low conf highallow
Enumerates the teams the caller can act against, establishing the blast radius available to every other tool in the session.
vercel-api.reply_to_toolbar_thread low conf highallow
Posts agent-authored text into a review thread visible to the whole team, attributed to the connected user.
vercel-api.unpause_project medium conf highaudit
Restores production traffic to a paused project and restarts consumption of metered compute and bandwidth, reviving whatever cost or incident prompted the pause.