Skip to main content
Prerequisite: A Vercel protection bypass secret.
Two methods: headers (fast, but blocked by CORS on some apps) or query parameters (more robust).

​
Option A: Headers

In the test’s Network options, add:
HeaderValue
x-vercel-protection-bypass<your-secret>
x-vercel-set-bypass-cookietrue
These headers are sent with every request in the session, including third-party script requests. If you see CORS errors, use query parameters instead.

​
Option B: Query parameters

Override the base URL in the test’s General options: 
https://your-preview.vercel.app?x-vercel-protection-bypass=<secret>&x-vercel-set-bypass-cookie=true
Vercel sets the bypass as a cookie for the rest of the session, so subsequent requests don’t need the query string.