vercel-security-access — Claude Code skill: Vercel access and security
A reference skill for Vercel security: roles, SSO, deployment protection, firewall, BotID and audit logs. Useful when you lock down projects and previews.
npx skills add bobmatnyc/claude-mpm-skills --skill vercel-security-access -a claude-codeWhat vercel-security-access does
The skill lays out how Vercel handles identity and access: RBAC for project permissions, SSO over SAML or OIDC, and required 2FA for sensitive access. Separate sections cover deployment protection for previews and production, plus limiting who can reach protected builds.
Then come Vercel Firewall traffic rules and BotID for cutting automated abuse. Audit logs serve compliance reviews; activity logs answer who did what. Both get a short walkthrough.
Each topic is a compact list of actions with links to the matching Vercel docs. The skill is marked user-invocable: false, so you don't call it by typing a phrase — the agent picks it up when a task touches access or security. Two related skills, vercel-teams-billing and vercel-observability, are mentioned as optional; this one works without them.
What it helps with
- assign project permissions by role in Vercel
- wire up SSO through SAML or OIDC
- keep preview deployments away from outsiders
- write firewall rules for incoming traffic
- read the audit log before a compliance check
Example prompts for the agent
- Help me set up RBAC roles for our Vercel projects
- How do I enable SAML SSO on Vercel?
- Which firewall rules should I add against bots on Vercel?
How to install vercel-security-access
1Skills CLI (Vercel)
npx skills add bobmatnyc/claude-mpm-skills --skill vercel-security-access -a claude-code2Manually: put the files in place
~/.claude/skills/vercel-security-access/SKILL.mdCopy the whole skill folder; for one project use .claude/skills/vercel-security-access/
1Skills CLI (Vercel)
npx skills add bobmatnyc/claude-mpm-skills --skill vercel-security-access -a codex2Manually: put the files in place
.agents/skills/vercel-security-access/SKILL.mdFor all projects use ~/.agents/skills/
1Skills CLI (Vercel)
npx skills add bobmatnyc/claude-mpm-skills --skill vercel-security-access -a cursor2Manually: put the files in place
.cursor/skills/vercel-security-access/SKILL.mdCursor also reads .agents/skills/ and .claude/skills/
1GitHub CLI
gh skill install bobmatnyc/claude-mpm-skills vercel-security-access2Manually: put the files in place
.github/skills/vercel-security-access/SKILL.md1Skills CLI (Vercel)
npx skills add bobmatnyc/claude-mpm-skills --skill vercel-security-access -a gemini-cli2Platform CLI
gemini skills install https://github.com/bobmatnyc/claude-mpm-skills --path toolchains/platforms/deployment/vercel-security-accessManually: put the files in place
.devin/skills/vercel-security-access/SKILL.mdThe legacy .windsurf/skills/ path still works
Skills CLI (Vercel)
npx skills add bobmatnyc/claude-mpm-skills --skill vercel-security-access -a opencodeClaude.ai
Zip the folder and upload it in Settings → Capabilities → Skills
Step by step, with commands for each platform: How to install skills in Claude Code: five ways
Questions about vercel-security-access
How do I install vercel-security-access in Claude?
Run npx skills add bobmatnyc/claude-mpm-skills --skill vercel-security-access -a claude-code. The skill then lives at ~/.claude/skills/vercel-security-access/SKILL.md.
What does vercel-security-access do?
It gathers Vercel security practices in one place: RBAC, SSO, deployment protection, firewall, BotID, 2FA, and audit plus activity logs.
Do I invoke the skill manually?
No. It carries user-invocable: false, so the agent loads it on its own when a task involves Vercel access or security.
Source text
SKILL.md · MIT
---
name: vercel-security-access
description: Vercel security and access controls including RBAC, SSO, deployment protection, firewall, bot defense, audit logs, and 2FA. Use when securing Vercel projects or managing access.
user-invocable: false
disable-model-invocation: true
progressive_disclosure:
entry_point:
summary: "Vercel security and access controls including RBAC, SSO, deployment protection, firewall, bot defense, audit logs, and 2FA. Use when securing Vercel projects or managing access."
when_to_use: "When working with vercel-security-access or related functionality."
quick_start: "1. Review the core concepts below. 2. Apply patterns to your use case. 3. Follow best practices for implementation."
---
# Vercel Security and Access Skill
---
progressive_disclosure:
entry_point:
summary: "Vercel security and access: RBAC, SSO (SAML/OIDC), deployment protection, firewall, BotID, audit logs, and 2FA."
when_to_use:
- "When managing access control and roles"
- "When securing deployments and endpoints"
- "When auditing activity and enforcing MFA"
quick_start:
- "Enable RBAC and role assignments"
- "Configure SSO and authentication policies"
- "Apply deployment protection and firewall"
- "Review audit and activity logs"
token_estimate:
entry: 90-110
full: 4000-5200
---
## Overview
Vercel security features cover identity, access control, deployment protection, and threat mitigation.
## Access Control
- Use RBAC to define project permissions.
- Configure SAML or OIDC for SSO.
- Require 2FA for sensitive access.
## Deployment Protection
- Apply deployment protection for previews and production.
- Limit access to protected deployments.
## Firewall and Bot Defense
- Use Vercel Firewall to manage traffic rules.
- Use BotID to mitigate automated abuse.
## Audit and Activity Logs
- Review audit logs for compliance.
- Track activity history for user actions.
## Complementary Skills
When using this skill, consider these related skills (if deployed):
- **vercel-teams-billing**: Team settings and account policy.
- **vercel-observability**: Operational visibility for security events.
*Note: Complementary skills are optional. This skill is fully functional without them.*
## Resources
**Vercel Docs**:
- RBAC: https://vercel.com/docs/rbac
- SAML: https://vercel.com/docs/saml
- OIDC: https://vercel.com/docs/oidc
- Deployment protection: https://vercel.com/docs/deployment-protection
- Vercel Firewall: https://vercel.com/docs/vercel-firewall
- BotID: https://vercel.com/docs/botid
- Audit log: https://vercel.com/docs/audit-log
- Activity log: https://vercel.com/docs/activity-log
- Two-factor authentication: https://vercel.com/docs/two-factor-authentication
- Code owners: https://vercel.com/docs/code-owners
© bobmatnyc · MIT · bobmatnyc/claude-mpm-skills
