Log inSubmit server
Vouch MCP logo

Vouch MCP

Signs and verifies Vouch credentials, manages agent identities, scans for leaked keys, and decodes DIDs through MCP.

InstallRepositoryWebsite
Full README Compare alternatives Embed widget Claim this listing

Install Vouch MCP

Pick your client, then add it in one click or paste the config.

STDIOPython
~/Library/Application Support/Claude/claude_desktop_config.json
claude_desktop_config.json
{
  "mcpServers": {
    "vouch-mcp": {
      "command": "uvx",
      "args": [
        "vouch-protocol"
      ]
    }
  }
}

Settings → Developer → Edit Config, merge this into mcpServers, then fully quit and reopen Claude Desktop.

We couldn’t confirm it starts correctly

We ran the install command but it didn't respond within our test window — this can mean a slow first-time install rather than a real problem.

uvx vouch-protocol

Process exited before answering initialize.

This is an experimental automated check and can have false negatives — missing environment variables, a slow cold install, etc. It doesn’t necessarily mean something’s wrong. Last checked 14d ago.

Overview

The vouch-mcp MCP server exposes Vouch Protocol identity and credential operations to MCP clients such as Claude Desktop and Cursor. It lets agents create identities, sign and verify credentials, scan for leaked key material, and decode DIDs. Reach for it when an agent needs cryptographic identity or verifiable authorization without implementing Vouch operations itself. The server is standalone and is intended to work with any MCP client.

Use cases

  • Create an identity for an AI agent
  • Sign credentials before authorizing actions
  • Verify credentials received from another agent
  • Scan code and environment data for leaked keys
  • Decode DIDs during identity workflows

Key features

  • Agent identity creation
  • Credential signing
  • Credential verification
  • Leaked-key scanning
  • DID decoding
  • MCP client compatibility

Security & health

What it can reach and how reliably it runs — from our own checks, not the maintainer’s claims.

ActiveLast checked 2d ago

Recent health check succeeded.

10/10 checks healthy over the last 51d

Supply-chain signal

No high-severity advisories surfaced by our automated scan.

Critical 0High 0Medium 0Low 0

Scanned 3d ago via OSV.dev · vouch-protocol (PyPI)

Adoption & maintenance

Factual signals from GitHub, npm, and our automated checks — not a rating.

GitHub stars28Stargazers on the source repository.
Last commit2d agoMost recent push to the default branch.
Install checkInconclusiveDidn't respond in our test window — often a slow first install.
Directory activity1 viewsConfig copies, upvotes, and views on AllMCPs.

How Vouch MCP works

What vouch-mcp does

The vouch-mcp MCP server gives an MCP-compatible agent access to core Vouch Protocol identity and provenance functions. It is designed for workflows where an agent must be identified, produce signed data, or check whether a credential is valid.

The server covers four stated operations:

  • Create an agent identity.
  • Sign credentials or other supported payloads.
  • Verify credentials.
  • Scan for exposed Vouch key material and decode DIDs.

Vouch Protocol uses W3C Verifiable Credentials and Data Integrity proofs. Its v1.0 implementation uses the eddsa-jcs-2022 cryptosuite and supports Multikey verification methods in DID Documents. The MCP server exposes the protocol’s agent-facing functions; it does not replace the broader Vouch command-line tools or framework integrations.

How it works

An MCP client connects to the standalone vouch-mcp MCP server and invokes the available Vouch operations as agent tools. Identity creation produces a DID and keypair. Signing applies the Vouch credential and proof model, while verification checks the resulting credential. DID decoding provides a way to inspect DID values, and scanning looks for misplaced Vouch secrets such as private keys in files, seeds in environment variables, or private key material included in a DID document.

The README identifies Claude Desktop and Cursor as example clients, while describing the server as usable by any MCP client or agent.

Setup and configuration

The repository’s general installation instructions support Linux and macOS through the Vouch install script, and Windows through pip install vouch-protocol. Running vouch opens an interactive starting point, while vouch onboard --quick creates an agent identity, allow-list, verifier, and heartbeat configuration.

Configure the server according to the repository’s current MCP instructions before connecting it to a client.

Tools and capabilities

The vouch-mcp MCP server is documented as providing these capabilities:

  • Generate an agent identity.
  • Sign credentials.
  • Verify credentials.
  • Find leaked Vouch key material.
  • Decode DIDs.

These operations support agent identity and accountability use cases. The repository also documents separate features for Git commit signing, media signing, agent framework integrations, heartbeats, session vouchers, and runtime tool-call checks. Those features should not be assumed to be MCP tools unless the server’s own configuration documents them.

Limitations and notes

It also does not state whether the MCP server can issue every credential type supported by the wider Vouch SDKs.

Vouch’s protocol documentation describes Python, TypeScript, and Go as reference implementations, with additional language support elsewhere in the project. That information concerns the protocol and SDK ecosystem, not a guarantee about the implementation language or runtime requirements of vouch-mcp. Review the repository documentation for those details before deploying it.

Read the full README View source on GitHub

Reviews

No reviews yet — be the first to share how it worked for you.

Frequently Asked Questions about Vouch MCP

vouch-mcp is an MCP server that connects MCP clients to Vouch Protocol’s agent identity and credential system. Its main tools create identities, sign and verify credentials, scan for leaked Vouch key material, and decode DIDs, allowing agents to use these operations through clients such as Claude Desktop or Cursor.

It does document installing the broader Vouch package with the install script on Linux and macOS or `pip install vouch-protocol` on Windows, but you should consult the repository for the MCP-specific setup.

Yes, the README names Cursor as an MCP client that can use vouch-mcp. It does not include a Cursor configuration example or specify the transport settings, so use the repository’s current MCP setup instructions for the connection details.

vouch-mcp can sign and verify credentials through an MCP client. The documented server capabilities also include creating agent identities, scanning for leaked Vouch key material, and decoding DIDs.

Related MCP servers

All in Cryptography All alternatives
Add a badge to your READMEShow it’s listed — live SVG, Markdown or HTML.

AllMCPs Directory Badge

Full Badge Customizer

Showcase your server listing on GitHub or your project documentation. Embed this dynamic SVG badge to highlight official listing status and live engagement.

Badge Style:
Live Dynamic SVG PreviewVouch MCP AllMCPs Directory Badge
Markdown (GitHub README)
[![AllMCPs](https://allmcps.com/api/badge/vouch-mcp?style=directory)](https://allmcps.com/mcp/vouch-mcp)
HTML Embed
<a href="https://allmcps.com/mcp/vouch-mcp"><img src="https://allmcps.com/api/badge/vouch-mcp?style=directory" alt="Vouch MCP on AllMCPs" /></a>