Vercel Sandbox now supports managed npm credentials

Vercel Sandbox now installs private npm packages using credentials stored in team Shared Environment Variables, with support for custom registries including GitHub Packages and JFrog Artifactory. Developers pass `credentials: { npm: true }` when creating a sandbox, and the firewall adds authentication to install requests so a coding agent can install dependencies without seeing the tokens, which stay outside the sandbox. Vercel instructs users to update their Sandbox SDK or CLI to the latest version.

Vercel Sandbox https://vercel.com/docs/sandbox can now install your team's private npm packages using credentials stored in team Shared Environment Variables https://vercel.com/docs/environment-variables/shared-environment-variables . Custom registries such as GitHub Packages and JFrog Artifactory are also supported. Pass credentials: { npm: true } when creating a sandbox to let it use your team's existing npm credentials. Tokens stay outside the sandbox. The firewall adds authentication to install requests sent to your configured registries, so a coding agent can install dependencies without seeing the tokens. Update your Sandbox SDK or CLI to the latest version. Read the npm credentials documentation https://vercel.com/docs/sandbox/credentials/npm to get started.