vouch-mcp — Claude Code MCP server: features and setup
Give an MCP client tools to create agent identities, sign credentials, and check signatures. Useful when agent actions need cryptographic authorization.
claude mcp add --env VOUCH_PRIVATE_KEY=<VOUCH_PRIVATE_KEY> --env VOUCH_DID=<VOUCH_DID> --env VOUCH_MCP_TRANSPORT=<VOUCH_MCP_TRANSPORT> --env VOUCH_MCP_HOST=<VOUCH_MCP_HOST> --env VOUCH_MCP_PORT=<VOUCH_MCP_PORT> --transport stdio vouch-mcp -- uvx vouch-mcpWhat vouch-mcp does
vouch-mcp connects Vouch capabilities to an MCP client. An agent can create an identity, sign or verify credentials, look for exposed Vouch keys in code, and decode DIDs. The server runs separately from the Vouch command-line tools.
Set VOUCH_PRIVATE_KEY and VOUCH_DID for signing; transport, host, and port settings are available through VOUCH_MCP_TRANSPORT, VOUCH_MCP_HOST, and VOUCH_MCP_PORT. In Claude Code, the server starts with uvx vouch-mcp. The setup command needs both the private key and DID values.
What it helps with
- create an agent identity
- sign agent credentials
- verify credential signatures
- scan code for exposed Vouch keys
- decode a DID
Example prompts for the agent
- Create a Vouch identity for this agent.
- Sign these credentials and verify the signature.
- Scan the project for exposed Vouch keys.
How to install vouch-mcp
Platform CLI
claude mcp add --env VOUCH_PRIVATE_KEY=<VOUCH_PRIVATE_KEY> --env VOUCH_DID=<VOUCH_DID> --env VOUCH_MCP_TRANSPORT=<VOUCH_MCP_TRANSPORT> --env VOUCH_MCP_HOST=<VOUCH_MCP_HOST> --env VOUCH_MCP_PORT=<VOUCH_MCP_PORT> --transport stdio vouch-mcp -- uvx vouch-mcpReplace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vouch-mcp <command>
Platform CLI
codex mcp add vouch-mcp --env VOUCH_PRIVATE_KEY=<VOUCH_PRIVATE_KEY> --env VOUCH_DID=<VOUCH_DID> --env VOUCH_MCP_TRANSPORT=<VOUCH_MCP_TRANSPORT> --env VOUCH_MCP_HOST=<VOUCH_MCP_HOST> --env VOUCH_MCP_PORT=<VOUCH_MCP_PORT> -- uvx vouch-mcpReplace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vouch-mcp <command>
Config file
{
"mcpServers": {
"vouch-mcp": {
"command": "uvx",
"args": [
"vouch-mcp"
],
"env": {
"VOUCH_PRIVATE_KEY": "<VOUCH_PRIVATE_KEY>",
"VOUCH_DID": "<VOUCH_DID>",
"VOUCH_MCP_TRANSPORT": "<VOUCH_MCP_TRANSPORT>",
"VOUCH_MCP_HOST": "<VOUCH_MCP_HOST>",
"VOUCH_MCP_PORT": "<VOUCH_MCP_PORT>"
}
}
}
}Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vouch-mcp <command>
Config file
{
"servers": {
"vouch-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"vouch-mcp"
],
"env": {
"VOUCH_PRIVATE_KEY": "<VOUCH_PRIVATE_KEY>",
"VOUCH_DID": "<VOUCH_DID>",
"VOUCH_MCP_TRANSPORT": "<VOUCH_MCP_TRANSPORT>",
"VOUCH_MCP_HOST": "<VOUCH_MCP_HOST>",
"VOUCH_MCP_PORT": "<VOUCH_MCP_PORT>"
}
}
}
}Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vouch-mcp <command>
Platform CLI
gemini mcp add -e VOUCH_PRIVATE_KEY=<VOUCH_PRIVATE_KEY> -e VOUCH_DID=<VOUCH_DID> -e VOUCH_MCP_TRANSPORT=<VOUCH_MCP_TRANSPORT> -e VOUCH_MCP_HOST=<VOUCH_MCP_HOST> -e VOUCH_MCP_PORT=<VOUCH_MCP_PORT> vouch-mcp uvx vouch-mcpReplace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vouch-mcp <command>
Step by step, with commands for each platform: How to add an MCP server to Claude Code, Codex, Cursor, VS Code, Gemini CLI and more
Questions about vouch-mcp
How do I install vouch-mcp in Claude Code?
Add the server with claude mcp add vouch-mcp -e VOUCH_PRIVATE_KEY=<VOUCH_PRIVATE_KEY> -e VOUCH_DID=<VOUCH_DID> -- uvx vouch-mcp. Replace the placeholders with your private key and DID.
What does vouch-mcp do?
It gives an MCP client access to Vouch tools for creating identities, signing and verifying credentials, finding exposed keys, and decoding DIDs.
What values does Claude Code setup require?
The install command takes VOUCH_PRIVATE_KEY and VOUCH_DID. Optional transport settings use VOUCH_MCP_TRANSPORT, VOUCH_MCP_HOST, and VOUCH_MCP_PORT.
