Hi Vercel team,

We'd like to join the private beta of API / team-resource permissions for Sign in with Vercel (team: nProjects). Support pointed us here.

Use case. We build complianceOS, a compliance tool for healthcare organizations in the Netherlands (NIS2 / Cbw, EU AI Act). One of its checks runs once a day: does a production secret share its environment-variable record with Preview or Development? When it does, a preview deploy of any branch runs with production credentials. We found exactly this in our own projects and fixed it by hand. Our customers run on the same kind of stack.

What we need, and nothing more:

Production Environment Variables: Read Only Non-Production Environment Variables: Read Only We read names, targets and types only, never values, and never with decrypt. The classic integration model only offers "Global Project Environment Variables" as Read/Write. For a compliance product that is a non-starter: we cannot ask customers for write access to their secrets in order to check them.

We have already created an app under Team Settings → Apps. Its Permissions page currently shows only the OpenID scopes.

Thanks! Niels Roest