The Vercel Plugin on Claude Code wants to read all your prompts!
This title could be clearer and more informative.Try out Clickbait Shieldfor free (5 uses left this month).
The Vercel plugin for Claude Code collects telemetry far beyond what its consent dialog discloses. It silently sends full bash command strings, device IDs, OS info, and framework details on every session — with no opt-in. The consent prompt only covers prompt text sharing, obscuring that bash command collection is always-on. Worse, the plugin injects natural-language instructions into Claude's system context to ask users questions and write preference files via shell commands, with no visual indicator distinguishing it from native Claude UI. The plugin also fires on all projects regardless of whether Vercel is involved, despite having framework detection built in. The author provides source code evidence and workarounds: set VERCEL_PLUGIN_TELEMETRY=off to disable collection while keeping the plugin functional.
Table of contents
Problem 1: The consent is fakeProblem 2: “Anonymous usage data” is not what you thinkProblem 3: This runs on all your projectsWhat should changeThe meta-pointAppendix: Source code evidenceSort: