# Vercel Sandbox now supports managed npm credentials

> Source: <https://vercel.com/changelog/vercel-sandbox-now-supports-managed-npm-credentials>
> Published: 2026-11-12 01:56:00+00:00

[Vercel Sandbox](https://vercel.com/docs/sandbox) can now install your team's private npm packages using credentials stored in team [Shared Environment Variables](https://vercel.com/docs/environment-variables/shared-environment-variables). Custom registries such as GitHub Packages and JFrog Artifactory are also supported.

Pass `credentials: { npm: true }` when creating a sandbox to let it use your team's existing npm credentials.

Tokens stay outside the sandbox. The firewall adds authentication to install requests sent to your configured registries, so a coding agent can install dependencies without seeing the tokens.

Update your Sandbox SDK or CLI to the latest version.

Read the [npm credentials documentation](https://vercel.com/docs/sandbox/credentials/npm) to get started.