Manage Next.js Server Actions in the Vercel Firewall

The Vercel Firewall and Observability Plus has first-class support for Server Actions.

Starting with Next.js 15.5, customers can now configure custom rules targeting specific server action names. In the example below, you can rate limit app/auth/actions.ts#getUser actions to 100 requests per minute per IP address.

1
// app/auth/actions.ts 
2
'use server' 
3

4
export async function getUser(userId: string) { 
5
  // ... 
6
}

Server Action Name is available in the Firewall for all plans at no additional cost. Read the docs to learn more.