vercel-platforms github-integration deployment-api multi-tenant auth-tokens

Vercel Platforms deploys from user GitHub repos

Pass a `gitAccessToken` with `gitSource` to deploy directly from users' GitHub repos without requiring the Vercel GitHub App installation.

Summary

Eliminates friction in multi-tenant platforms: users no longer need to install third-party apps, reducing onboarding friction and expanding deployment access to repositories without admin privileges.

Why it matters

Eliminates friction in multi-tenant platforms: users no longer need to install third-party apps, reducing onboarding friction and expanding deployment access to repositories without admin privileges.

Implementation verdict

Replaces mandatory GitHub App installation for user-initiated deployments. Requires short-lived, read-only GitHub tokens scoped to individual repos (24h or less). Ready now—use REST API `/deployments` endpoint with both parameters. Token handling is critical: Vercel encrypts in transit, never persists on deployment.

Sources

1.pass a `gitAccessToken` alongside `gitSource`
2.Tokens should be read-only, scoped to the requested repository, and valid for 24 hours or less
3.Vercel temporarily stores the token in encrypted form so source retrieval can complete
4.The token is never stored on the deployment

Dev Signal

Get briefs like this in your inbox — free, every weekday.

100+ sources compressed into one 4-minute read. Ranked, cited, implementation-ready.

Read the full issue →All briefs