# vouch-mcp [Health: Active]

**Category:** 🔑 Cryptography  
**Repository:** https://github.com/vouch-protocol/vouch  
**GitHub Stars:** 28  
**Views:** 1  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/vouch-mcp

## Description
Sign and verify W3C Verifiable Credentials so AI agents can cryptographically authorize actions.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `uvx` (confidence: high):

```json
"mcpServers": {
  "vouch-mcp": {
    "command": "uvx",
    "args": ["vouch-protocol"]
  }
}
```

## Documentation

## What vouch-mcp does

The vouch-mcp MCP server gives an MCP-compatible agent access to core Vouch Protocol identity and provenance functions. It is designed for workflows where an agent must be identified, produce signed data, or check whether a credential is valid.

The server covers four stated operations:

- Create an agent identity.
- Sign credentials or other supported payloads.
- Verify credentials.
- Scan for exposed Vouch key material and decode DIDs.

Vouch Protocol uses W3C Verifiable Credentials and Data Integrity proofs. Its v1.0 implementation uses the `eddsa-jcs-2022` cryptosuite and supports Multikey verification methods in DID Documents. The MCP server exposes the protocol’s agent-facing functions; it does not replace the broader Vouch command-line tools or framework integrations.

## How it works

An MCP client connects to the standalone vouch-mcp MCP server and invokes the available Vouch operations as agent tools. Identity creation produces a DID and keypair. Signing applies the Vouch credential and proof model, while verification checks the resulting credential. DID decoding provides a way to inspect DID values, and scanning looks for misplaced Vouch secrets such as private keys in files, seeds in environment variables, or private key material included in a DID document.

The README identifies Claude Desktop and Cursor as example clients, while describing the server as usable by any MCP client or agent.

## Setup and configuration

The repository’s general installation instructions support Linux and macOS through the Vouch install script, and Windows through `pip install vouch-protocol`. Running `vouch` opens an interactive starting point, while `vouch onboard --quick` creates an agent identity, allow-list, verifier, and heartbeat configuration.

Configure the server according to the repository’s current MCP instructions before connecting it to a client.

## Tools and capabilities

The vouch-mcp MCP server is documented as providing these capabilities:

- Generate an agent identity.
- Sign credentials.
- Verify credentials.
- Find leaked Vouch key material.
- Decode DIDs.

These operations support agent identity and accountability use cases. The repository also documents separate features for Git commit signing, media signing, agent framework integrations, heartbeats, session vouchers, and runtime tool-call checks. Those features should not be assumed to be MCP tools unless the server’s own configuration documents them.

## Limitations and notes

It also does not state whether the MCP server can issue every credential type supported by the wider Vouch SDKs.

Vouch’s protocol documentation describes Python, TypeScript, and Go as reference implementations, with additional language support elsewhere in the project. That information concerns the protocol and SDK ecosystem, not a guarantee about the implementation language or runtime requirements of vouch-mcp. Review the repository documentation for those details before deploying it.

_Full upstream README: https://allmcps.com/mcp/vouch-mcp/readme_