Open Brain
VercelEngineering PostOfficial Source

AI SDK harness layer now supports native subscription authentication

Vercel’s AI SDK harness can reuse host-side subscriptions for supported coding agents, reducing credential setup while keeping agent-switching behind one interface.

Vercel · Sep 14, 2026
Open Source Open MarkdownOpen JSON
Source Summary

The AI SDK harness now supports **native subscription authentication** for Claude Code, Codex, Cursor and six other listed adapters. Credentials remain on the host, where OAuth tokens can be refreshed and injected into outbound requests.

Practical Implication

Existing harness applications need **no code or settings changes**. Check each authentication mode before deployment: direct and auto can fall back to a host subscription under stated conditions, while explicit provider credentials still take precedence.

Agent-Ready Context
The AI SDK harness now supports **native subscription authentication** for Claude Code, Codex, Cursor and six other listed adapters. Credentials remain on the host, where OAuth tokens can be refreshed and injected into outbound requests.

Existing harness applications need **no code or settings changes**. Check each authentication mode before deployment: direct and auto can fall back to a host subscription under stated conditions, while explicit provider credentials still take precedence.

The **ai-gateway mode never reads native subscriptions**, and support depends on each underlying harness and sandbox. Placeholder credentials with host-side token injection are available only where the sandbox supports them.
Connected Context · Feed7 Judgment

HarnessAgent’s portability now extends from runtime selection to reuse of host-held subscription credentials, removing another integration step for existing applications. The benefit is narrower than universal authentication portability: fallback behavior varies by mode, provider credentials retain priority, AI Gateway is excluded, and each harness and sandbox still needs deployment-specific validation.

Use ACP-compatible harnesses with the AI SDK harness layerThe ACP meta-adapter broadened runtime portability; native subscription authentication now reduces credential integration work across that broader runtime set, while retaining harness-specific constraints.Cursor is now available in the AI SDK harness layerCursor was already portable behind HarnessAgent; the new support adds host-side subscription authentication as an operational convenience without establishing equivalent behavior across runtimes.Cline is now available in the AI SDK harness layerCline’s host-resident runtime makes the credential boundary especially relevant: credentials remain on the host while sandbox support determines whether placeholder injection is available.GitHub Copilot is now available in the AI SDK harness layerCopilot’s addition supported shared orchestration, while this signal shows authentication can also be shared through host subscriptions, subject to mode and adapter-specific checks.
Context Map
toolscoding#coding-agents#agent-sdks#sandboxing
Uncertainty
The **ai-gateway mode never reads native subscriptions**, and support depends on each underlying harness and sandbox. Placeholder credentials with host-side token injection are available only where the sandbox supports them.