Vercel AI Updates: September 19, 2026

1. Jev Reached 13% of Paid Teams in 24 Hours, Twice the GPT-5.6 Launch

Vercel reported that Jev, TypeSafe AI’s probability-emitting model, is the fastest-adopted model in AI Gateway history. Within 24 hours of launch it reached more than twice as many paid teams as any previous model, passing every comparison model in its first twelve hours and widening the lead through the rest of the day. By hour 24 it was in use by nearly 13% of paid teams, 2x the GPT-5.6 family and more than 6x Fable 5.1. Vercel’s read is that a specialized model can take distribution faster than a general one when it fills a gap the general models handle badly. Source

2. mcp-handler Can Now Expose the Same Tools to In-Browser Agents

Vercel added experimental WebMCP support to mcp-handler, the proposed web standard for exposing tools to agents running inside the browser. Tools opt in through an experimental_webMcp object, then a single script tag loaded from the MCP endpoint with a ?webmcp-script parameter registers them with the page. Calls are proxied back to the MCP server as the signed-in user, so authenticated tools keep working rather than needing a separate unauthenticated path. Source

3. GLM 5.3 FlashX Landed on AI Gateway at Roughly 200 Tokens per Second

Vercel added GLM 5.3 FlashX to AI Gateway, a high-speed serving option for Z.ai’s multimodal coding model that streams at about 200 tokens per second. The target is coding agents, tool loops, and interactive applications where the user is waiting on output rather than batch work. It is addressable as zai/glm-5.3-flashx across API formats and in coding agents via vercel ai-gateway setup. Source

4. The Next.js Image RCE Turned Out to Be Upstream in libheif

Vercel published the full account of an August report from Hacktron that looked like a remote code execution vulnerability in Next.js image optimization. The vulnerable code was not in Next.js: it was in libheif, the AVIF decoder used by Next.js, ImageMagick, WordPress, sharp, and a large share of the web. Vercel worked with Hacktron to reproduce the RCE against a current Next.js build and disclose it to the sharp, libvips, and libheif maintainers. Source

5. v0 Can Install Private npm Packages From Shared Environment Variables

Vercel made v0 read npm credentials from shared environment variables scoped to Development or Preview, so it can install private packages from registry.npmjs.org via NPM_TOKEN or from custom and multiple registries via NPM_RC. The practical effect is that v0 can build against a team’s existing design system and internal component libraries instead of only public packages. Source

6. Spend Management Reached Enterprise Flexible Commitment Plans

Vercel extended Spend Management, already on Pro, to Enterprise Flexible Commitment plans at no extra cost. Teams set a budget per billing cycle against the metered usage that draws down prepaid balance, and when usage approaches or crosses it, Vercel can send email, fire a webhook, or pause production deployments across all projects. Source