Malte Ubl

We just released 𝚛𝚎𝚊𝚌𝚝-𝚋𝚎𝚜𝚝-𝚙𝚛𝚊𝚌𝚝𝚒𝚌𝚎𝚜, a repo for coding agents. React performance rules and evals to catch regressions, like accidental waterfalls and growing client bundles. How we collected them and how to install the skill ↓ vercel.com/blog/introd...

We're celebrating the life of Mikeal, creator of request, forker and reuniter of Node.js, renaissance and family man on November 12. We received a very generous donation and are now able to make this event completely free. Looking forward to see all of you! an-event-mikeal-would-have-liked.com

To honor a great friend and open-source pioneer Mikeal Rogers we're organizing a "conf" and charity auction. I'll be auctioning an exclusive wagyu BBQ at my house for up to 15. Join us and ideally offer more donations! All proceeds go to his wife and 2 kids an-event-mikeal-would-have-liked.com

Cold starts are the Achilles' heel of serverless. Fluid fixes that. Learn how Vercel achieves a sub-0.6% cold start rate automatically through platform optimizations. vercel.com/blog/scale-...

Prompt injection is sometimes called an "unsolvable". But we shouldn't give up like that. I've been on a mission to introduce hard security boundaries into AI agents and this is the next step: What if compromised MCP tools couldn't just passively prompt inject your app?

Search 1M+ GitHub repositories from your AI agent using Grep's MCP server. Your agent can now reference coding patterns and solutions used in open source projects to solve problems and answer questions. vercel.com/blog/grep-a...

At Vercel Ship 2025, Malte Ubl shared a no-nonsense approach to building AI agents. Learn how to build and secure AI agents that automate complex workflows, and understand the product and business impact behind them. vercel.fyi/J9sgXzv

I am delighted to announce that @vercel.com are investing in Nuxt! they are backing our vision of the open web, hiring me as well as other core team members (@atinux.com, @pi0.io + @antfu.me), to continue to work full time on Nuxt we remain independent — and our vision and ethos are not changing 💚

NuxtLabs, creators of Nuxt and Nitro, are joining Vercel. Same license, roadmap, and open governance, but now in a joint mission to build the best web.

Building AI agents (and workflows) doesn't have to be complicated. In fact, it's more approachable than you might realize. Hear practical advice from Vercel CTO @industrialempathy.com on building agents. vercel.com/blog/the-no-...

I'm traveling to Berlin next week and we're doing a Vercel meetup to celebrate the opening of our new Berlin office. I have a whole queue of blog posts about agents coming out and will be turning them into a lightning talk, and we'll have a panel, etc. The usual! partiful.com/e/9Is88RwZV9...

MCP allows you to build integrations for AI models. Deploy your Model Context Protocol (MCP) server on Vercel and connect to it from clients like Claude, Cursor, and more. Learn more and get started with our updated template. vercel.com/changelog/mc...

Can't wait to spend the summer at the pool

We looked deeply into the recent React Router/Remix CVE & deployed mitigation for Vercel customers through our firewall - It enables stored XSS - High likelihood that any React Router app is impacted - If using another CDN action may be required - Upgrade recommended vercel.com/changelog/pr...

Next.js 15.2 • Redesigned Error UI & Improved Stack Traces • Streaming Metadata • Turbopack Performance Improvements • View Transitions (experimental) • Node.js Middleware (experimental) nextjs.org/blog/next-15-2

Does anyone know the status of the Private State Token API? It seems shipped in Chrome but the demos appear broken and it doesn't look like Google shipped a generic issuer like Apple did for Private Access Tokens.

I just remembered how an internet mob chastised the Google intern who wanted to ship an async version of Local Storage using tech that allowed shipping Chrome feature using only JS knowledge. Both the feature and the underlying tech was killed. Imagine what could have been.

Fingerprinting is bad for privacy because it is out of user control. The villainification of browser cookies has pushed the world into a direction that is objectively worse for users. Cookies you can delete, auto-rotate, scope per site. Fingerprints stay with you ico.org.uk/about-the-ic...

Corporate organizations are distributed systems! My new blog post somewhere between tautology, cause of course they are, and hot take. But I think I might have stumbled over a helpful framing to manage risk & velocity when shipping software in larger teams www.industrialempathy.com/posts/organi...

Most folks outside the US don't realize that Fahrenheit is a super intuitive temperature unit. The degrees Fahrenheit, represent the maximum miles per hour you can drive safely at the temperature

I was randomly looking at the Vercel Firewall for my personal site. Turns out a small attack was mitigated. I then looked at our global dashboard, and, indeed, the attacker only hit my site and they got a total of 19 requests through before they were blocked. What have I done to you, attacker?

Vercel Remote Cache is now free for all plans. Never do the same work twice in your Turborepo or Nx repository with a shared store of build outputs and logs for your team. vercel.com/changelog/fr...

Right now Vercel responds with your project's HTML 404 response for all system-identified 404s (for functions/APIs you control the response directly). How would you feel if we changed it such that we responded with a generic response if the client doesn't expect HTML?

The Rise of the AI Crawler

Blue sky

Excited about my demo tomorrow at the internal Vercel hackathon

Vercel TypeScript SDK • Full type safety for accessing the Vercel REST API with Zod schemas • New documentation for every function, argument, and type • Better tree-shaking support with optional standalone functions vercel.fyi/sdk

You can't make this up: The spec for SSRing web components is itself not isomorphic. It only works when running through the document parser, but not innerHTML. Respectively, the code needs to know where it is running and use vastly different code paths.

You can just deploy on Black Friday. Follow along our real time dashboard of folks shipping the software that sells all the things vercel.com/bfcm Wishing the entire ecommerce industry an amazing BFCM!

I really enjoyed the excuse^H^H^H^H^H^Hopportunity to chat with @industrialempathy.com! Many lessons, some counter intuitive, that lead to v0, the AI SDK, and much more. Thanks for sharing, Malte!

🚀 In case you missed it, @industrialempathy.com from Vercel shared how they're taking AI from v0 to vInfinity! 🤖✨ Learn how Vercel is integrating AI into their platform, what they’ve discovered so far, and where they see the future heading. #AINativeDev Watch the recording: youtu.be/pPY_bwuS9mo

I can't state how crucial Vinxi and Nitro were in making @TanStack.com Start. Come read about how it was a game changer! "Why TanStack Start is Ditching Adapters" tanstack.com/blog/why-tan...

A trained LLM can figure out the sloppiest web site because it turns out humans are predictably sloppy. And all our content has been neatly tagged with meta data in hopes of being blessed by the Google algorithm. But yes, please, let's argue the merits of web components for five more seconds

We shipped streaming support for Python on Vercel. PHP, Ruby, Bun, Deno, Go, are just around the corner now that we ported a 2nd language to use Vercel's new rust-based runtime which provides for better multi-concurrency, streaming, unlimited logging, and other features vercel.com/changelog/st...

Kill Chromium development Kill Mozilla Kill 30% of Apple Inc profits

Vercel has acquired Grep, a code search engine. vercel.com/blog/vercel-...

You can just ship things

Checking my bank account www.bloomberg.com/news/article...

Hey @danabra.mov, could you connect me with someone from your team responsible for crawling OG data. Every so often this triggers Vercel's DDOS protection. I'd love to discuss how we can make this work better going forward!

I might be too old to win a boxing match against Jake Paul, but I did win the fight against my waffle maker and all I have are slightly bloody hands