Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 0
- 4 9
- 3 1
- 2 0
- 1 0
Trust in production
- Trust it - 50%
- With caveats - 50%
- Wouldn't - 0%
90% would recommend this server
How reviewers scored it
- Setup & docs 3.7
- Auth experience 3.9
- Reliability 3.9
- Maintainer responsiveness 3.8
Why it got a B
Vercel's own server, hosted over HTTPS with OAuth sign-in, and only approved clients can connect. You choose which teams to grant, but Vercel says the connection gets the same access as your user account. Its tools can deploy code, edit env vars and DNS, return decrypted secrets, and make purchases after you confirm, so keep tool approval on. Biggest deduction: permissions are coarse with no read-only option, and the server is closed source, so maintenance is one band lower.
How to connect
// .cursor/mcp.json (hosted, OAuth)
{ "mcpServers": { "vercel": { "url": "https://mcp.vercel.com" } } }claude mcp add --transport http vercel https://mcp.vercel.comIs Vercel MCP safe?
Is Vercel MCP safe to use?
Vercel MCP grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.
Does Vercel MCP have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Vercel MCP support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Cloud & Hosting
- A AWS MCP ServerAWS's managed remote server for calling any AWS API, running sandboxed scripts, and searching AWS docs.
- A Cloudflare API MCP ServerOfficial hosted Cloudflare server that searches and calls the whole Cloudflare API (Workers, DNS, R2, D1, KV, firewall).
- A Netlify MCP ServerNetlify's official MCP server, hosted at mcp.netlify.com or run from npm, to create and deploy projects and manage env vars and secrets, forms, extensions and access controls.
- A Railway MCP (railway mcp in the Railway CLI)Railway's official MCP server, built into the Railway CLI and hosted at mcp.railway.com, to list projects and services, redeploy, and manage feature flags.
- A Render MCP ServerRender's official MCP server, hosted at mcp.render.com or run locally, to create services and databases, read logs and metrics, update environment variables and trigger deploys.
Embed this badge
[](https://trustedmcp.io/servers/vercel-mcp)<a href="https://trustedmcp.io/servers/vercel-mcp"><img src="https://trustedmcp.io/badge/vercel-mcp.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
Promising, a bit raw
Mostly reliable, with the odd timeout. Sign-in flow was painless and I never had to paste a key into a config file.
Used for Checking deploy status from chat
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Set it up once, forgot about it
Our agents call this dozens of times a day. Nothing to install, I just point the client at the URL. Releases come often and the changelog is clear. Happy to run it in production.
Used for Reading logs during incidents
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Trustworthy enough for real work
Been running this for about a month now. You can tell it is actively maintained, the rough edges keep getting fixed. Keep permissions tight and it is a good tool.
Used for Inventory of what is running where
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Better than the DIY script it replaced
Clear tool names, sensible outputs, very few surprises. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Managing preview environments
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Good defaults, good docs
Simple to set up in Cursor, simple to reason about. Auth is handled properly, and revoking access later was one click. Updates land regularly, and nothing broke when I upgraded. Nothing to install, I just point the client at the URL.
Used for Managing preview environments
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Saves me a context switch every hour
Set this up for our team after comparing a few options. Filed an issue and got a reply within two days. Auth is handled properly, and revoking access later was one click. I would use it in prod, but only with a human approving writes.
Used for Reading logs during incidents
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
The Vercel integration I wanted
Started with it as an experiment, now it is a fixture. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Spinning up test resources
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Clean integration, sensible permissions
Of the Vercel integrations I tried, this one is the most predictable. Nice to use something maintained by Vercel rather than a random fork. Updates land regularly, and nothing broke when I upgraded. Would recommend without hesitation.
Used for Spinning up test resources
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
No complaints after a month
I use this almost daily. I like that access goes through a proper sign-in instead of a long-lived secret on disk. You can tell it is actively maintained, the rough edges keep getting fixed.
Used for Cost checks across projects
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Earned a permanent spot in my config
Installed it on a Friday, it was part of my workflow by Monday. Scoped the token to just what the agent needs and it respected that. Hosted endpoint means no local process to babysit.
Used for Inventory of what is running where
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.