Release 9c3e1b7 looks healthy, one issue to watch
312 errors in the hour after the 15:20 deploy, against 298 the hour before. One new issue so far, affecting 4 users.
An hour after each production deploy: errors after the release against the hour before, new Sentry issues, key page checks, and the PRs that shipped.
What lands on your board
312 errors in the hour after the 15:20 deploy, against 298 the hour before. One new issue so far, affecting 4 users.
Looking at the error chart after a deploy is the check everyone agrees on and everyone skips when the deploy goes out at 17:50. It also takes three tabs: the deploy in Vercel, the errors in Sentry and the diff in GitHub.
Every hour the agent looks for a production deployment that has had a full hour of traffic, compares that hour with the hour before in Sentry, requests a few key URLs on the live site, and lists the pull requests in the release. A regression arrives with its suspects already named, and a clean release gets a one-line all clear.
GET /v7/deployments?projectId=<id>&target=production&state=READY&limit=2 gives the newest production deployment and the one before. Continue only if the newest became ready 60 to 120 minutes ago (its ready time), so there is a full hour after it; otherwise post nothing.
gh api repos/acme/acme-web/compare/<previous sha>...<new sha>, with the SHAs from each deployment's meta.githubCommitSha, then pull the PR numbers and titles out of the commit messages.
GET /api/0/organizations/{org}/events/?field=count()&field=count_unique(user)&query=event.type:error&project=<id> with start and end for the hour before and the hour after the ready time. Count new issues with query=is:unresolved firstRelease:<release>, where the release is what your SDK reports (often the commit SHA).
Request each URL on a short list kept in the prompt (home, login, checkout, /api/health) and record the status code and time to first byte. A non-2xx status or a time to first byte over 1 second fails the check.
Healthy when errors rose less than 25% and no new issue reached 10 users; watch when either line is crossed; failed when errors doubled or a key check failed. Post work_state: failed for a failed release so it lands in Needs you.
With BRIEFKIN_TOKEN set, the agent sends the result as one card that updates in place every run. Without it, you get the report in the chat.
Pick your agent, where the data comes from and how to schedule it; the commands below follow.
One command. It puts the SKILL.md in ~/.claude/skills and in ~/.agents/skills, which Codex, Cursor, Gemini CLI, Copilot CLI and OpenCode read too.
shellcurl -fsSL https://briefkin.dev/skills/release-health-check/install | shAsk Claude Code:
promptRun the release-health-check skillOr paste the prompt instead of installing:
promptFor Vercel project acme-web, find the latest production deployment that became READY (GET /v7/deployments?target=production&state=READY&limit=2) and the one before it. If the latest has been live for at least an hour, use the Sentry API to compare error events (GET /api/0/organizations/{org}/events/ with field=count() and query=event.type:error) in the hour before and the hour after it went live, and list new issues first seen in that release (firstRelease:<sha>). Request /, /login, /checkout and /api/health on the live site and report status and time to first byte. From GitHub, list the PRs between the two deployments' commits. Give a verdict: healthy (errors up under 25%, no new issue over 10 users), watch, or failed (errors doubled or a check failed).Every hour, from cron on any machine where Claude Code is signed in:
crontab0 * * * * claude -p "Run the release-health-check skill"Add it with crontab -e. A laptop asleep at that time runs it when it wakes if you use launchd or Task Scheduler instead; GitHub Actions works for the API route.
Connect Briefkin once with curl -fsSL https://briefkin.dev/install | sh and every run lands on your board as a report card. How setup works
SKILL.md---
name: release-health-check
description: "An hour after each production deploy: errors after the release against the hour before, new Sentry issues, key page checks, and the PRs that shipped. Use when the user asks for this, or when it runs on a schedule."
---
# GitHub, Vercel and Sentry release health check
An hour after each production deploy: errors after the release against the hour before, new Sentry issues, key page checks, and the PRs that shipped.
Looking at the error chart after a deploy is the check everyone agrees on and everyone skips when the deploy goes out at 17:50. It also takes three tabs: the deploy in Vercel, the errors in Sentry and the diff in GitHub.
Every hour the agent looks for a production deployment that has had a full hour of traffic, compares that hour with the hour before in Sentry, requests a few key URLs on the live site, and lists the pull requests in the release. A regression arrives with its suspects already named, and a clean release gets a one-line all clear.
## Two ways to get the data
Use the API or MCP route when you have an MCP server, a CLI or an API token for the app. Otherwise, if you can drive a browser the user is signed in to (Claude in Chrome, a Playwright or Chrome DevTools MCP server), use the browser route. Say which one you used.
## Route A: API or MCP server
### What you need
- Vercel deployments through a token in `VERCEL_TOKEN` or the Vercel MCP server, and Sentry events through a token with `event:read` and `org:read` or the Sentry MCP server.
- Read access to the GitHub repo through `gh` or a GitHub MCP server, and Sentry release names you can map to a deploy (the commit SHA works well).
If something is missing, say what and stop; do not invent numbers.
### Steps
1. **Find the new release** (Vercel): `GET /v7/deployments?projectId=<id>&target=production&state=READY&limit=2` gives the newest production deployment and the one before. Continue only if the newest became ready 60 to 120 minutes ago (its `ready` time), so there is a full hour after it; otherwise post nothing.
2. **List what shipped** (GitHub): `gh api repos/acme/acme-web/compare/<previous sha>...<new sha>`, with the SHAs from each deployment's `meta.githubCommitSha`, then pull the PR numbers and titles out of the commit messages.
3. **Compare errors before and after** (Sentry): `GET /api/0/organizations/{org}/events/?field=count()&field=count_unique(user)&query=event.type:error&project=<id>` with `start` and `end` for the hour before and the hour after the ready time. Count new issues with `query=is:unresolved firstRelease:<release>`, where the release is what your SDK reports (often the commit SHA).
4. **Run the key checks**: Request each URL on a short list kept in the prompt (home, login, checkout, `/api/health`) and record the status code and time to first byte. A non-2xx status or a time to first byte over 1 second fails the check.
5. **Judge and post**: Healthy when errors rose less than 25% and no new issue reached 10 users; watch when either line is crossed; failed when errors doubled or a key check failed. Post `work_state: failed` for a failed release so it lands in Needs you.
## Route B: the browser
### What you need
- Signed in to Vercel (a Viewer seat is enough), to GitHub with read access to the repo, and to Sentry as a member of the organization, all in the same browser profile.
If something is missing, say what and stop; do not invent numbers.
### Steps
Start at https://vercel.com/dashboard. The user is signed in already; never type passwords or codes, and ask if a sign-in page appears.
1. **Find the release in Vercel**: Select the team, open the project (acme-web) and click **Deployments**. Set **All Environments** to `Production` and **Status** to `Ready`. The row marked **Current** is the release; note its time and commit SHA, and the SHA of the Ready row below it. Stop here if the release went live less than an hour ago.
2. **List what shipped on GitHub**: Open `https://github.com/acme/acme-web/compare/<previous sha>...<new sha>`. The **Commits** tab lists the merged pull requests by number and title.
3. **Compare errors in Sentry**: Open https://sentry.io/issues/ for the project, set the time range picker to an **Absolute** range covering the hour before the deploy, and read the total events in the chart header with the search `event.type:error`. Repeat for the hour after. Then search `is:unresolved firstRelease:<sha>` for issues new in this release and read their Users column.
4. **Run the key checks**: Open `/`, `/login`, `/checkout` and `/api/health` on the live domain in new tabs. Record whether each loads with a normal page or JSON rather than an error page, and whether it took noticeably longer than a second. Open DevTools **Network** for the exact status and time to first byte when it matters.
5. **Judge**: Healthy when errors rose less than 25% and no new issue reached 10 users; watch when either line is crossed; failed when errors doubled or a key check failed. List the PRs so a problem has suspects.
Note: This route takes three signed-in apps and an absolute time range in Sentry, so it suits a check after a specific deploy rather than an hourly schedule. Sentry's release name must match what the SDK sends; if that is not the commit SHA, use the release shown on the issue page instead.
## The report
- **Verdict**: healthy, watch or failed, with the release and its deploy time.
- **Errors**: events in the hour after against the hour before, and the change.
- **New issues** first seen in this release, with users affected.
- **Key checks**: status and time to first byte per URL.
- **What shipped**: the PRs in the release, so a problem has suspects.
## Post it to Briefkin
When `BRIEFKIN_TOKEN` is set, or `~/.config/briefkin/env` exists (the installer from https://briefkin.dev/docs writes it), also send the result to the user's Briefkin board as one card. Keep the `item_key` the same on every run so the card updates in place, use a new `event_id` per run, and put today's real numbers in place of the example ones. If the request fails, say so once and carry on.
```bash
[ -n "${BRIEFKIN_TOKEN:-}" ] || . ~/.config/briefkin/env
curl -sS -X POST "${BRIEFKIN_URL:-https://briefkin.dev}/v1/events" \
-H "authorization: Bearer $BRIEFKIN_TOKEN" \
-H "content-type: application/json" \
-d @- <<'JSON'
{
"v": 1,
"event_id": "release-health-check/<date of this run, e.g. 2026-10-16>",
"item_key": "release-health-check",
"project": "acme-web",
"source": "GitHub, Vercel and Sentry release health check skill",
"kind": "update",
"title": "Release 9c3e1b7 looks healthy, one issue to watch",
"summary": "**312 errors** in the hour after the 15:20 deploy, against 298 the hour before. One new issue so far, affecting 4 users.",
"widget": [
{
"type": "Grid",
"props": {
"columns": 3
},
"children": [
{
"type": "Stat",
"props": {
"label": "Errors in the hour after",
"value": 312,
"delta": 5,
"better": "lower"
}
},
{
"type": "Stat",
"props": {
"label": "New issues",
"value": 1
}
},
{
"type": "Stat",
"props": {
"label": "Checks passing",
"value": "4 of 4",
"tone": "ok"
}
}
]
},
{
"type": "Table",
"props": {
"columns": [
"Check",
"Status",
"TTFB"
],
"align": [
"left",
"right",
"right"
],
"rows": [
[
"/",
200,
"180 ms"
],
[
"/login",
200,
"210 ms"
],
[
"/checkout",
200,
"340 ms"
],
[
"/api/health",
200,
"45 ms"
]
]
}
},
{
"type": "KeyValue",
"props": {
"items": [
{
"key": "New issue",
"value": "ACME-WEB-4FB TypeError in PlanBadge, 4 users"
},
{
"key": "Shipped",
"value": "#1310 plan badges, #1311 audit log filters, #1312 stripe-node bump"
}
]
}
}
]
}
JSON
```
Widgets come from the Briefkin catalog (https://briefkin.dev/v1/catalog). Without a token, just give the user the report.
## Run it on a schedule
Suggested: Every hour (`0 * * * *`). From cron, with the agent signed in on that machine:
```bash
0 * * * * claude -p "Run the release-health-check skill"
# Codex: codex exec, Gemini CLI: gemini -p, Copilot CLI: copilot -p, OpenCode: opencode run
```
Or use the agent's own scheduler (Claude Code routines, Codex automations, Claude or ChatGPT scheduled tasks): https://briefkin.dev/skills/release-health-check#schedule
Source: https://briefkin.dev/skills/release-health-check
Vercel deployments through a token in VERCEL_TOKEN or the Vercel MCP server, and Sentry events through a token with event:read and org:read or the Sentry MCP server.
Read access to the GitHub repo through gh or a GitHub MCP server, and Sentry release names you can map to a deploy (the commit SHA works well).
https://api.githubcopilot.com/mcp/. Sign in with OAuth or a personal access token; add /readonly to the URL, or use a toolset URL such as https://api.githubcopilot.com/mcp/x/pull_requests/readonly, to expose only read tools. It also runs locally (source).gh CLI. Run gh auth login once, or set GH_TOKEN for scheduled runs. gh pr list --search "review-requested:@me" --json number,title,url,createdAt and gh api repos/{owner}/{repo}/dependabot/alerts cover most reports.GITHUB_TOKEN, limit it to the repositories in the report, and grant Read on Metadata, Contents, Pull requests and Issues, plus Dependabot alerts if you report on them.With every permission on a fine-grained token set to Read, the agent can't push, merge, comment or close anything.
https://mcp.vercel.com, signed in with OAuth. It lists projects and deployments, reads build and runtime logs, and searches Vercel's docs.vercel CLI. vercel ls <project> lists recent deployments, vercel inspect <deployment-url> --logs prints the build log, and vercel logs <deployment-url> shows runtime logs. Pass --token $VERCEL_TOKEN and --scope <team> in scheduled runs.VERCEL_TOKEN, with VERCEL_TEAM_ID sent as teamId.Vercel tokens can be limited to one team and given an expiry but can't be made read-only, so use a short-lived token for reports and keep deploy and env var tasks out of the same skill.
https://mcp.sentry.dev/mcp, signed in with OAuth. Add Sentry from Claude's connector directory, or run claude mcp add --transport http sentry https://mcp.sentry.dev/mcp. It searches issues and events and pulls stack traces.sentry-cli. Mostly a release and source map tool, but sentry-cli issues list --project <slug> lists issues when a quick terminal check is enough.SENTRY_AUTH_TOKEN with SENTRY_ORG, and grant org:read, project:read and event:read.Those three read scopes cover every report here; leave out event:write, which lets a token resolve and assign issues.
Then the hour after one release overlaps the next. The skill cuts the after window at the next deploy and says how long it was, and for very frequent deploys you can point it at the last release of each hour only.
Vercel can, with vercel rollback or Instant Rollback in the dashboard, and the agent can run it if you allow it. The skill stops at the verdict by default: a jump in errors right after a deploy is sometimes a traffic spike or a third-party outage, and a person should make that call.
No. The skill runs with your own agent and gives you the report in the chat. With a Briefkin token set, each run also posts it to your board as a report card, so you can glance at it instead of asking again.
Claude Code, Codex, Cursor, Gemini CLI, GitHub Copilot CLI, OpenCode, Windsurf and Amp all read SKILL.md files. The install command puts it in ~/.claude/skills and ~/.agents/skills, where they look. ChatGPT, the Claude app and Grok take the prompt instead. Pick your agent under "Install and run it" and the commands change to match.
Yes. Switch the data source to "Your browser" and the steps change to the GitHub, Vercel and Sentry pages themselves: the agent opens vercel.com/dashboard in a browser you are signed in to and reads the numbers off the page. Claude Code, Codex, Cursor, Claude app and ChatGPT can drive a browser out of the box; Gemini CLI, Copilot CLI and OpenCode need a Playwright or Chrome DevTools MCP server first. It is slower than the API and needs you signed in, so it suits a report you run by hand or from a scheduler on your own computer.
Skills are free to use with any agent. Briefkin is where their results land: one board for every report, number and question your agents send, with a ping when something needs you.
Free during the open beta. No card.