White Label Domain Sandbox

Private operator test of Vercel OAuth installation and custom-domain provisioning. This is a disposable static test project, separate from the production application.

Installation

Start the local OAuth receiver on your own computer. The configured callback is http://localhost:8766/callback.
Use the integration client credentials locally. Never paste credentials into chat, documentation, source code, or screenshots.
Start authorization through the local setup page. Select the designated test workspace and only white-label-integration-sandbox.
Review the permissions: Projects Read/Write, Domains Read/Write, and Integration Configuration Read. Project and domain write permissions include operations beyond domain attachment.
The local receiver checks state, session, expiry, replay, and the actual installation's team, selected project, and scopes before saving its token privately.

Verification

Using the integration credential, test domain registration, DNS verification, HTTPS delivery, and access rejection for unrelated projects. A successful installation alone does not prove these checks passed.

Limitations

No production app source, customer database, email service, or production application credential is connected to this static fixture. The sandbox does not test tenant isolation or branded sign-in. Test domains must use a disposable namespace controlled by the operator.

Removal

Remove the integration installation in Vercel to revoke its API access. Remove only explicitly designated test domains and the disposable project when testing is complete. Never change unrelated project domains or DNS records.

Official Vercel API integration documentation

Return to sandbox