# Manage Vercel Firewall in the CLI

**Published:** May 12, 2026 | **Authors:** Yash Kothari

---

You can now manage your project's [Vercel Firewall](https://vercel.com/docs/vercel-firewall/vercel-waf) configuration through the Vercel CLI.

Use the new `vercel firewall` command to manage [custom rules](https://vercel.com/docs/vercel-firewall/vercel-waf/custom-rules), [IP blocks](https://vercel.com/docs/vercel-firewall/vercel-waf/ip-blocking), [system bypasses](https://vercel.com/docs/vercel-firewall/vercel-waf/system-bypass-rules), [Attack Mode](https://vercel.com/docs/vercel-firewall/attack-mode), and [system mitigations](https://vercel.com/docs/vercel-firewall/ddos-mitigation) from the terminal.

```bash
vercel firewall rules add --ai "Rate limit /api to 100 requests per minute by IP"
vercel firewall ip-blocks block 1.2.3.4
vercel firewall system-bypass add 10.0.0.1
vercel firewall attack-mode enable --duration 1h
vercel firewall system-mitigations pause
```

The [Vercel Firewall skill](https://skills.sh/vercel/vercel-plugin/vercel-firewall) also helps agents by detailing best practices for rolling out new rules safely.

```bash
npx skills add vercel/vercel-plugin --skill vercel-firewall
```

Update Vercel CLI and run `vercel firewall` to get started. Learn more about the [Vercel Firewall CLI commands.](https://vercel.com/docs/cli/firewall)

---

📚 **More updates:** [View all changelog entries](/changelog/sitemap.md) | [Blog](/blog/sitemap.md)