Vercel Blob now supports OIDC authentication and is the default setting when connecting new projects.

Vercel-issued OIDC tokens are short-lived and rotate automatically, so you no longer need a long-lived BLOB_READ_WRITE_TOKEN .

To upgrade an existing store, first update your project to use the latest @vercel/blob , then navigate to the Projects tab under your Blob store and select Upgrade to OIDC from the project's context menu.

Functions running on Vercel receive the token automatically and authenticate requests with it:

import { put } from '@vercel/blob' ;

const { url } = await put ( 'hello.txt' , 'Hello, world!' , {

access : 'public' ,

} ) ;

Uploads a file to Blob using OIDC authentication, no long-lived token required.

The Vercel CLI picks up the same environment variables once you update it, so you and your agents can read and write to a private store from your terminal without a long-lived token:

vercel link

vercel env pull

vercel blob put hello.txt --from-file ./hello.txt

vercel blob…