
Setup
Connect GitHub
Install the GitHub App and select your repositories.
Connect Vercel
If you’re on Vercel Pro/Enterprise, Deployment Protection blocks external access to previews by default.
- Click Connect Vercel in your Morph dashboard
- Select which team to install the integration into
- Click Connect account
Options
| Option | Description |
|---|---|
| Browser profiles ⭐ | Sign into test accounts using a real browser. Sessions persist across tests. Best for OAuth, SSO, and most apps. |
| Site Login | Simple username/password for apps with basic login forms. Use x_user/x_pass in prompts. |
| Path filters | Only test PRs touching specific paths |
| Check runs | Block merges until tests pass |
FAQ
How do I test authenticated pages?
How do I test authenticated pages?
We recommend using Browser Profiles for most authentication scenarios.
Browser Profiles (Recommended)
Best for: OAuth, SSO, Google/GitHub login, complex login flows, or any app where you need to stay logged in.- Expand your repo in the integrations dashboard
- Click + new profile in the Browser Profiles section
- A browser opens — sign into your test account normally
- Click Save Profile when done
Site Login (Simple auth)
Best for: Apps with a simple username/password login form (no OAuth, no SSO).- Connect Vercel in the integrations dashboard
- Expand a project and configure Site Login
- Enter your test account credentials
- In your test prompts, use
x_userandx_pass— Morph substitutes the real values
Site Login only works for simple form-based login. If your app uses OAuth (Google, GitHub, etc.) or SSO, use Browser Profiles instead.
Why am I getting 403 errors?
Why am I getting 403 errors?
Vercel Deployment Protection is blocking access. Make sure you’ve connected Vercel through the integrations dashboard—bypass secrets are added automatically.
Login form not showing up in my preview URLs?
Login form not showing up in my preview URLs?
This typically happens when your preview environment is using production environment variables. OAuth providers (Google, GitHub, etc.) require redirect URIs to be whitelisted, and production tokens only allow production URLs.Solution: Configure your deployment platform to use development/staging tokens for preview environments:
- Vercel: Use Environment Variable Scopes to set different OAuth credentials for Preview vs Production
- Other platforms: Create separate environment variable configs for preview deployments
*.vercel.app) added to the allowed redirect URIs.Can I use this without Vercel?
Can I use this without Vercel?
GitHub Action
For non-Vercel deployments:MORPH_API_KEY in repo secrets.