# Manage Next\.js Server Actions in the Vercel Firewall

**Published:** October 24, 2025 | **Authors:** Sage Abraham

---

The Vercel [Firewall](https://vercel.com/docs/vercel-firewall) and [Observability Plus](https://vercel.com/docs/observability/observability-plus) has first-class support for Server Actions.

Starting with [Next.js 15.5](https://nextjs.org/blog/next-15-5), customers can now configure custom rules targeting specific server action names. In the example below, you can rate limit `app/auth/actions.ts#getUser` actions to 100 requests per minute per IP address.

![Server Action Light Mode](//images.ctfassets.net/e5382hct74si/5zO4vmTBsEsXU6Oo9eauif/0421b7196f31f677a5ef4bcaa83786b1/Server_Action_Light_Mode.png)

```javascript
// app/auth/actions.ts 
'use server' 
export async function getUser(userId: string) { 
  // ... 
}
```

Server Action Name is available in the Firewall for all plans at no additional cost. Read the [docs](https://vercel.com/docs/vercel-firewall/vercel-waf/rule-configuration) to learn more.

---

📚 **More updates:** [View all changelog entries](/changelog/sitemap.md) | [Blog](/blog/sitemap.md)