Skip to content
Docs

Create an issuer policy

POSThttps://api.vercel.com/v1/kms/issuers/{issuerId}/policies
Attach a policy to a KMS issuer that grants a project's deployments permission to sign with it.
Request
import { Vercel } from "@vercel/sdk";


const vercel = new Vercel({
  bearerToken: "<YOUR_BEARER_TOKEN_HERE>",
});


async function run() {
  const result = await vercel.kms.createKmsIssuerPolicy({
    issuerId: "<id>",
    teamId: "team_1a2b3c4d5e6f7g8h9i0j1k2l",
    slug: "my-team-url-slug",
  });


  console.log(result);
}


run();
Response
{
  "createdAt": "string",
  "environments": [],
  "kind": "project-grant",
  "projectId": "example_id",
  "teamId": "example_id",
  "tokenClaims": "value",
  "updatedAt": "string"
}

Authentication

AuthorizationbearerToken

Default authentication mechanism

Path parameters

issuerIdstringRequired
The ID of the issuer.

Query parameters

teamIdstringOptional
The Team identifier to perform the request on behalf of.
slugstringOptional
The Team slug to perform the request on behalf of.

Body

application/json
kindstringRequired
projectIdstringRequired
The project ID for the project grant policy.
environmentsarrayRequired
The environments for the project grant policy. Each entry is a system environment (production, preview, development) or a custom environment ID (env_...).
tokenClaimsobjectOptional
The claims that KMS should include in signed JWTs for this policy.

Response

201Success
createdAtstringRequired
environmentsarrayRequired
Environments whose OIDC tokens this grant authorizes. Each entry is either a system environment slug (production, preview, development) or a custom environment ID (prefixed env_). Custom environments are matched against the token's custom_environment_id claim (the stable ID); system environments against its environment claim.
kindstringRequired
projectIdstringRequired
teamIdstringRequired
tokenClaimsobjectOptional
updatedAtstringRequired

Errors

400One of the provided values in the request body is invalid. One of the provided values in the request query is invalid.
401The request is not authorized.
403You do not have permission to access this resource.
404Error
410Error