Connecting a Vercel account
Overview
To onboard your Vercel team to DigiUsher, you create an access token in your Vercel account settings and provide it to DigiUsher, along with the Team ID of the team the token is scoped to. This document describes exactly what access is requested, why it is needed, and what to provide.
Tokens are scoped to a team
A Vercel access token is created for a specific team. DigiUsher ingests cost data for that one team, so create the token while acting in the team whose spend you want to track, and provide that team's ID.
Summary of Access Required
| Component | Details |
|---|---|
| Identity | Vercel access token (prefix vcp_) — programmatic access only |
| Access level | Read-only — team billing and usage charges |
| Data | Billing charges |
| Scope | Single team |
| Capability | What It Provides |
|---|---|
| Billing data | Cost analytics, chargeback/showback, budgeting, forecasting, anomaly detection |
DigiUsher cannot deploy, modify, or delete any resources, projects, or settings in your Vercel team.
Prerequisites
Information to Gather
| Item | How to Find | DigiUsher Field |
|---|---|---|
| Access Token | Vercel > Account Settings > Tokens > Create Token (shown once at creation — store securely) | Access Token |
| Team ID | Vercel > Team Settings > General — value beginning with team_ | Team ID |
Roles Required by the Person Performing Setup
This is only available for Owner, Member, Developer, Security, Billing, and Enterprise Viewer roles for the supplied team.
Network & Email Access (For Regulated Environments)
If your organization restricts outbound internet access or email domains, ensure the following are in place before starting:
- Domain allowlist: Add
*.digiusher.comto your network/firewall allowlist so that users in your organization can access the DigiUsher platform from their browsers. - Email allowlist: Add
digiusher.comas an approved sender domain in your email security gateway. DigiUsher sends onboarding confirmations, alerts, and reports from@digiusher.comaddresses.
Setup
Create an Access Token
Create a dedicated access token for DigiUsher, scoped to the team you want to track.
- Sign in to Vercel and open the Tokens page under Account Settings.
- Under Create Token, enter a recognizable name, e.g.
digiusher-billing. - Set the Scope to the team whose costs you want DigiUsher to track.
- Choose an Expiration.
- Click Create.

- Copy the generated token — it starts with
vcp_.

Save your credential
The access token is shown only once at creation and cannot be retrieved again. Copy and store it securely — you will enter it into DigiUsher below.
Find your Team ID
DigiUsher needs the ID of the team the token is scoped to.
- In Vercel, switch to the team you scoped the token to and open its Settings.
- On the General settings page, locate the Team ID — a value beginning with
team_. - Copy it for the next section.
Connect in DigiUsher
After completing the steps above, enter the following into DigiUsher to complete the connection:
| Field | Where to Find |
|---|---|
| Connection Name | Any label you prefer (e.g. Vercel Production) |
| Access Token | The vcp_... token created in Step 1 |
| Team ID | The team_... ID from your team's General settings |
When you connect, DigiUsher validates the token and begins ingesting your team's cost data. After the initial sync, DigiUsher ingests new cost data daily.
Verification Checklist
- Access token created in Vercel with prefix
vcp_, scoped to the correct team - Access token saved securely
- Team ID (prefix
team_) copied from the team's General settings - Connection details entered in DigiUsher
-
*.digiusher.comallowlisted in your network/firewall (if applicable) -
digiusher.comallowlisted as an approved sender domain in your email security gateway (if applicable)
Security
What DigiUsher CAN Access (Read-Only)
- Team-level billing charges and usage
What DigiUsher CANNOT Do
- Create, modify, or delete deployments, projects, domains, or environment variables
- Change team members, roles, or settings
- View or modify payment methods or billing configuration
- Make purchases or any changes to your account
The access token is stored encrypted at rest and is never returned in DigiUsher API responses.
Credential Rotation
- In Vercel, create a new access token scoped to the same team.
- Update the credential in DigiUsher immediately.
- Revoke the old token in Vercel.
Avoid ingestion gaps
Always create the new token and update it in DigiUsher before revoking the old one to avoid an interruption in data ingestion.
Revocation
Revoke the access token on the Vercel Tokens page. This immediately invalidates the token and stops all access. DigiUsher will no longer be able to ingest cost data until a new token is provided.
Troubleshooting
Invalid token or insufficient permissions
- Confirm the token starts with
vcp_and has not expired or been revoked in Vercel. - Confirm the Team ID matches the team the token was scoped to — a mismatch prevents data from being ingested.
- Re-create the token in Vercel and re-enter it in DigiUsher.
No cost data appearing
- If your team has had no billable Vercel usage in the period, there will be no cost data to show.
Need Help?
If you encounter any issues not covered above, contact DigiUsher support at support@digiusher.com and the team will help you get set up.
DigiUsher Documentation