DoDomain

Vercel integration

Install DoDomain from Vercel and it sets DODOMAIN_SECRET_KEY on the projects you choose, so your Vercel app calls the DoDomain API with no copied keys.

If your product runs on Vercel, the DoDomain integration puts your secret key where your code reads it. Install it, pick a DoDomain app and one or more Vercel projects, and DoDomain adds DODOMAIN_SECRET_KEY to those projects for production, preview and development. Your server code then works unchanged:

import { DoDomain } from "@dodomain/node";

const dodomain = new DoDomain({ secretKey: process.env.DODOMAIN_SECRET_KEY });

The integration only handles credentials. Your customers' domains still connect through the connect flow, and serving traffic for a connected domain stays with your Vercel project's own domain settings.

Install it

  1. In DoDomain, open Settings → Vercel and click Connect Vercel (or install DoDomain from its page on Vercel).
  2. On Vercel, choose the team or personal account and which projects the integration may see.
  3. Back in DoDomain, sign in if asked, then choose:
    • the DoDomain app the key belongs to (any app in a team where you are an owner or admin, or a new one), and
    • the Vercel projects that get DODOMAIN_SECRET_KEY (up to 20).
  4. Click Connect Vercel. The window returns to Vercel and closes.
  5. Redeploy the chosen projects so the new variable reaches your running code.

If you installed from Vercel's side rather than from DoDomain's Settings, DoDomain shows the Vercel account the install belongs to and asks you to confirm it is yours before connecting. Only confirm an install you just made yourself.

The key it creates

The integration mints its own secret key for the app, labelled "Vercel integration". It works exactly like the app's secret key on every API call, with three differences:

  • Rotating the app's secret key does not change it. The Vercel key keeps working after a rotation.
  • It cannot rotate the app's key. POST /api/v1/keys/rotate called with it answers 403 forbidden with details.code: "INTEGRATION_KEY_NOT_ROTATABLE".
  • Disconnecting revokes it, and nothing else. Your other deployments, using the app's own key, are unaffected.

DoDomain stores only a hash of the key. The value lives in your Vercel project as an encrypted environment variable owned by the integration.

Disconnect

Remove the integration either way; both revoke the key at once:

  • In DoDomain: Settings → Vercel → Disconnect. DoDomain also removes the integration from your Vercel account, which deletes the DODOMAIN_SECRET_KEY variable it added.
  • In Vercel: remove DoDomain from your team's or account's Integrations. Vercel deletes the variable and tells DoDomain, which revokes the key.

Deployments still running with the old value get 401 unauthorized until you set another key.

Billing

Installing the integration costs nothing and adds no Vercel billing. Your DoDomain plan, and its limits, apply to calls made with the Vercel key exactly as to the app's own key.

On this page