The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
clerk-docs	Ready	Preview	May 19, 2026 4:26pm

Pushed some changes directly in 020862d.

• Fixed the revoke example ID prefix from agtask_xxx to agttsk_xxx to match the actual IDPAgentTask constant in BAPI
• Updated the AgentTask create() response shape to use agentTaskId instead of the deprecated taskId
• Switched the reference page examples from clerk to clerkClient so the guide and reference pages use the same variable
• Added the missing ## Backend API (BAPI) endpoint sections to the create and revoke reference pages
• Dropped console.log(agentTask.url) from the guide and reference examples since the URL is a one-time sign-in link
• Tightened the permissions wording — BAPI currently rejects anything other than '*', so the docs now say it's the only supported value

Let me know what you think -- specifically on the ID prefix and '*' permission messaging. I want to make sure I'm understanding what I'm seeing on other repos correctly.

@manovotny TY! My only call-out is the removal of the console.log. I'm less concerned about the console.log specifically, and more about indicating that .url can/should be used to authenticate.

Pushed some changes directly in 020862d.

• Fixed the revoke example ID prefix from agtask_xxx to agttsk_xxx to match the actual IDPAgentTask constant in BAPI
• Updated the AgentTask create() response shape to use agentTaskId instead of the deprecated taskId
• Switched the reference page examples from clerk to clerkClient so the guide and reference pages use the same variable
• Added the missing ## Backend API (BAPI) endpoint sections to the create and revoke reference pages
• Dropped console.log(agentTask.url) from the guide and reference examples since the URL is a one-time sign-in link
• Tightened the permissions wording — BAPI currently rejects anything other than '*', so the docs now say it's the only supported value

Let me know what you think -- specifically on the ID prefix and '*' permission messaging. I want to make sure I'm understanding what I'm seeing on other repos correctly.

Good call. The reason I dropped the console.log is that agentTask.url is credential-equivalent — one visit creates an authenticated session, so logging it to stdout risks leaking it through terminal history or CI output. But you're right that the example still needs to surface .url.

Compromise in 54c27d7 — added a trailing comment naming .url so readers know what to use, without putting it in logs.

Good call. The reason I dropped the console.log is that agentTask.url is credential-equivalent — one visit creates an authenticated session, so logging it to stdout risks leaking it through terminal history or CI output. But you're right that the example still needs to surface .url.

Compromise in 54c27d7 — added a trailing comment naming .url so readers know what to use, without putting it in logs.

LGTM!