Sign InOpen Brain
VercelEngineering PostOfficial Source

AI SDK harness layer now supports native subscription authentication

Vercel’s AI SDK harness can reuse host-side subscriptions for supported coding agents, reducing credential setup while keeping agent-switching behind one interface.

Vercel · Sep 14, 2026
Open Source Open MarkdownOpen JSON
Source Summary

The AI SDK harness now supports **native subscription authentication** for Claude Code, Codex, Cursor and six other listed adapters. Credentials remain on the host, where OAuth tokens can be refreshed and injected into outbound requests.

Practical Implication

Existing harness applications need **no code or settings changes**. Check each authentication mode before deployment: direct and auto can fall back to a host subscription under stated conditions, while explicit provider credentials still take precedence.

Agent-Ready Context
The AI SDK harness now supports **native subscription authentication** for Claude Code, Codex, Cursor and six other listed adapters. Credentials remain on the host, where OAuth tokens can be refreshed and injected into outbound requests.

Existing harness applications need **no code or settings changes**. Check each authentication mode before deployment: direct and auto can fall back to a host subscription under stated conditions, while explicit provider credentials still take precedence.

The **ai-gateway mode never reads native subscriptions**, and support depends on each underlying harness and sandbox. Placeholder credentials with host-side token injection are available only where the sandbox supports them.
Connected Context · Feed7 Judgment

Harness portability now covers part of credential setup as well as runtime integration: supported agents can reuse host-held subscriptions without application changes. The abstraction remains conditional, however, because fallback behavior varies by mode and sandbox, AI Gateway is excluded, and explicit provider credentials override subscriptions. Authentication therefore still requires adapter-by-adapter deployment testing.

Use ACP-compatible harnesses with the AI SDK harness layerThe ACP meta-adapter broadens runtime portability, while native subscription support removes some credential plumbing; together they reduce integration work without eliminating runtime-specific behavior.GitHub Copilot is now available in the AI SDK harness layerCopilot is one of the shared-interface runtimes whose deployment boundary now also includes native subscription authentication, but its adapter behavior still requires separate validation.github/copilot-sdkThe Copilot SDK identifies authentication, billing, permissions, and topology as product-design concerns; host-side subscription reuse simplifies one path but does not remove those wider decisions.Cline is now available in the AI SDK harness layerCline’s host-process architecture illustrates why native credentials staying on the host does not imply full runtime isolation; credential custody and tool sandboxing remain distinct boundaries.
Context Map
toolscoding#coding-agents#agent-sdks#sandboxing
Uncertainty
The **ai-gateway mode never reads native subscriptions**, and support depends on each underlying harness and sandbox. Placeholder credentials with host-side token injection are available only where the sandbox supports them.