Vercel
Managed API Key is now a connection option for Stripe connectors in Vercel Connect. It creates a separate restricted Stripe API key for each agent or task, removing the need to paste a default secret key into the connector.
According to Vercel’s changelog, the key is created directly in the user’s Stripe account. Its access is limited to the permissions selected during setup.
This gives each connected agent or task its own credentials and permission set. Most apps and agents otherwise run on Stripe’s default secret key, which has full access.
How Managed API Key Works
Builders select Managed API Key when creating a Stripe connector in Vercel Connect. Vercel then creates the restricted key in the connected Stripe account with the chosen permissions.
- 1
Create the connector
add a Stripe connector in Vercel Connect
- 2
Choose the method
select Managed API Key
- 3
Set permissions
pick the Stripe access required by the agent or task
- 4
Rotate when needed
replace the key from the connector settings
The key can be rotated from the connector’s settings without redeploying the app or agent. During rotation, the old key continues to work for a 24-hour grace period. The new key can take over while existing work using the previous credential finishes.
Permissions remain attached to the individual connector. Separate connectors can therefore use separate keys for different agents or tasks, rather than sharing one default Stripe secret across them.
Existing Stripe Connection Methods Stay Available
The update does not remove either of Vercel Connect’s existing connection methods. MCP connections remain unchanged, as does the option to bring your own Stripe API key.
Managed API Key adds a third route for builders who want Vercel to create and manage restricted credentials. Bring-your-own keys continue to be supplied by the user, while managed keys can be created and rotated through the connector settings.
Frequently asked questions
What is Vercel Managed API Key?
Managed API Key is a connection method for Stripe connectors in Vercel Connect. It creates a restricted Stripe API key for an individual agent or task using permissions selected during setup.
How does Managed API Key compare with bringing your own key?
With Managed API Key, Vercel creates the restricted key inside the connected Stripe account. With the bring-your-own method, the user supplies the API key. The existing bring-your-own and MCP methods have not changed.
Can Managed API Key be rotated without redeploying?
Yes. The key can be rotated from the connector settings without a redeployment. The old key remains valid for a 24-hour grace period.
Sources
3 checkedHow we cover tool news: Create With's tool desk drafts these reports with AI from the sources listed above and checks them against those sources before publishing.
Stripe
Supabase
Airtable