# Cross-link map: Vercel KMS Authentication (/docs/kms/concepts/authentication)

> From the Vercel docs graph (built 2026-10-22T06:14:20.626Z), spanning vercel.com docs + KB, nextjs.org, ai-sdk.dev, and other Vercel documentation sites. Full graph as JSON: https://vercel.com/docs/graph.json

## Semantically closest pages

- [Key Management Service \\(KMS\\)](https://vercel.com/docs/kms) — Sign JWTs and messages with Vercel-managed signing keys. Learn about issuers, keys, and policies, and how to sign from V
- [Vercel KMS Quickstart](https://vercel.com/docs/kms/quickstart) — Create a KMS issuer, sign a JWT from a Vercel Function with @vercel/kms, and verify it against the published JWKS.
- [Vercel KMS Concepts](https://vercel.com/docs/kms/concepts) — Understand how Vercel KMS rotates signing keys and how it authorizes signing, management, and verification.
- [Vercel KMS SDK Reference](https://vercel.com/docs/kms/ts-sdk-reference) — API reference for @vercel/kms, including signJWT, signMessage, region resolution, and signing the KMS API directly witho
- [Sign a token](https://vercel.com/docs/rest-api/kms/sign-a-token) — POST /v1/kms/issuers/{issuerId}/sign/token — Sign a JWT with a KMS issuer's active signing key. Authenticate the request

## Prerequisites

- [Key Management](https://vercel.com/docs/agent-resources/vercel-mcp/tools/key-management) — Vercel MCP tools for key management.
- [Concepts](https://vercel.com/docs/eve/concepts) — Learn how eve agents, sessions, channels, tools, skills, connections, and sandboxes fit together.

## This page links to (8)

- [Vercel Connect](https://vercel.com/docs/connect) — Give your agents and services secure, short-lived access to third-party APIs like Slack, GitHub, Microsoft, and Snowflak
- [Vercel KMS Claims](https://vercel.com/docs/kms/concepts/claims) — How a KMS grant sets KMS-owned token claims the caller cannot override, and how an issuer claims schema validates every
- [Vercel KMS Connect Grants](https://vercel.com/docs/kms/concepts/connect-grants) — How a Connect grant lets Vercel Connect provision and sign with a KMS issuer on behalf of your team, identified by a Con
- [Vercel KMS Key Rotation](https://vercel.com/docs/kms/concepts/key-rotation) — How Vercel KMS stages a pending signing key, schedules its activation, and retires the previous key so already-issued to
- [Vercel KMS Project Grants](https://vercel.com/docs/kms/concepts/project-grants) — How a project grant authorizes a Vercel deployment to sign with a KMS issuer using its OIDC token, scoped to a team, pro
- [Vercel KMS SDK Reference](https://vercel.com/docs/kms/ts-sdk-reference) — API reference for @vercel/kms, including signJWT, signMessage, region resolution, and signing the KMS API directly witho
- [OpenID Connect \\(OIDC\\) Federation](https://vercel.com/docs/oidc) — Secure the access to your backend using OIDC Federation to enable auto-generated, short-lived, and non-persistent creden
- [Vercel REST API Reference](https://vercel.com/docs/rest-api) — Interact programmatically with your Vercel account using the SDK or direct HTTP requests.

## Pages that link here (7)

By site: vercel-docs (7)

- [Key Management Service \\(KMS\\)](https://vercel.com/docs/kms) — Sign JWTs and messages with Vercel-managed signing keys. Learn about issuers, keys, and policies, and how to sign from V
- [Vercel KMS Concepts](https://vercel.com/docs/kms/concepts) — Understand how Vercel KMS rotates signing keys and how it authorizes signing, management, and verification.
- [Vercel KMS Connect Grants](https://vercel.com/docs/kms/concepts/connect-grants) — How a Connect grant lets Vercel Connect provision and sign with a KMS issuer on behalf of your team, identified by a Con
- [Vercel KMS Key Rotation](https://vercel.com/docs/kms/concepts/key-rotation) — How Vercel KMS stages a pending signing key, schedules its activation, and retires the previous key so already-issued to
- [Vercel KMS Project Grants](https://vercel.com/docs/kms/concepts/project-grants) — How a project grant authorizes a Vercel deployment to sign with a KMS issuer using its OIDC token, scoped to a team, pro
- [Vercel KMS Quickstart](https://vercel.com/docs/kms/quickstart) — Create a KMS issuer, sign a JWT from a Vercel Function with @vercel/kms, and verify it against the published JWKS.
- [Vercel KMS SDK Reference](https://vercel.com/docs/kms/ts-sdk-reference) — API reference for @vercel/kms, including signJWT, signMessage, region resolution, and signing the KMS API directly witho