# vouch-mcp

Give an MCP client tools to create agent identities, sign credentials, and check signatures. Useful when agent actions need cryptographic authorization.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI · ★ 28
- Author: vouch-protocol
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/vouch-protocol/vouch
- Updated: 2026-10-19
- HTML: https://affpapa.org/en/nevibecode/mcp/vouch-mcp

## What it does

vouch-mcp connects Vouch capabilities to an MCP client. An agent can create an identity, sign or verify credentials, look for exposed Vouch keys in code, and decode DIDs. The server runs separately from the Vouch command-line tools.

Set `VOUCH_PRIVATE_KEY` and `VOUCH_DID` for signing; transport, host, and port settings are available through `VOUCH_MCP_TRANSPORT`, `VOUCH_MCP_HOST`, and `VOUCH_MCP_PORT`. In Claude Code, the server starts with `uvx vouch-mcp`. The setup command needs both the private key and DID values.

## Requirements
- Needs: Python and uv (commands run via uvx)
- Environment variables: `VOUCH_PRIVATE_KEY`, `VOUCH_DID`, `VOUCH_MCP_TRANSPORT`, `VOUCH_MCP_HOST`, `VOUCH_MCP_PORT` — keys and tokens: ask the human for the values, never commit them or put them in shared files.

## Install

### Claude Code (native platform)

**Platform CLI**
```bash
claude mcp add --env VOUCH_PRIVATE_KEY=<VOUCH_PRIVATE_KEY> --env VOUCH_DID=<VOUCH_DID> --env VOUCH_MCP_TRANSPORT=<VOUCH_MCP_TRANSPORT> --env VOUCH_MCP_HOST=<VOUCH_MCP_HOST> --env VOUCH_MCP_PORT=<VOUCH_MCP_PORT> --transport stdio vouch-mcp -- uvx vouch-mcp
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vouch-mcp <command>

### Codex

**Platform CLI**
```bash
codex mcp add vouch-mcp --env VOUCH_PRIVATE_KEY=<VOUCH_PRIVATE_KEY> --env VOUCH_DID=<VOUCH_DID> --env VOUCH_MCP_TRANSPORT=<VOUCH_MCP_TRANSPORT> --env VOUCH_MCP_HOST=<VOUCH_MCP_HOST> --env VOUCH_MCP_PORT=<VOUCH_MCP_PORT> -- uvx vouch-mcp
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vouch-mcp <command>

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "vouch-mcp": {
            "command": "uvx",
            "args": [
                "vouch-mcp"
            ],
            "env": {
                "VOUCH_PRIVATE_KEY": "<VOUCH_PRIVATE_KEY>",
                "VOUCH_DID": "<VOUCH_DID>",
                "VOUCH_MCP_TRANSPORT": "<VOUCH_MCP_TRANSPORT>",
                "VOUCH_MCP_HOST": "<VOUCH_MCP_HOST>",
                "VOUCH_MCP_PORT": "<VOUCH_MCP_PORT>"
            }
        }
    }
}
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vouch-mcp <command>

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "vouch-mcp": {
            "type": "stdio",
            "command": "uvx",
            "args": [
                "vouch-mcp"
            ],
            "env": {
                "VOUCH_PRIVATE_KEY": "<VOUCH_PRIVATE_KEY>",
                "VOUCH_DID": "<VOUCH_DID>",
                "VOUCH_MCP_TRANSPORT": "<VOUCH_MCP_TRANSPORT>",
                "VOUCH_MCP_HOST": "<VOUCH_MCP_HOST>",
                "VOUCH_MCP_PORT": "<VOUCH_MCP_PORT>"
            }
        }
    }
}
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vouch-mcp <command>

### Gemini CLI

**Platform CLI**
```bash
gemini mcp add -e VOUCH_PRIVATE_KEY=<VOUCH_PRIVATE_KEY> -e VOUCH_DID=<VOUCH_DID> -e VOUCH_MCP_TRANSPORT=<VOUCH_MCP_TRANSPORT> -e VOUCH_MCP_HOST=<VOUCH_MCP_HOST> -e VOUCH_MCP_PORT=<VOUCH_MCP_PORT> vouch-mcp uvx vouch-mcp
```
Replace <…> with your own values. uvx runs the command named after the package; if the README names another one, use uvx --from vouch-mcp <command>

## When to use it
- create an agent identity
- sign agent credentials
- verify credential signatures
- scan code for exposed Vouch keys
- decode a DID

## Example prompts
- Create a Vouch identity for this agent.
- Sign these credentials and verify the signature.
- Scan the project for exposed Vouch keys.

## Similar
- [REA](https://affpapa.org/en/nevibecode/mcp/rea.md) — MCP server · ★ 386989
- [GitHub](https://affpapa.org/en/nevibecode/mcp/github.md) — MCP server · ★ 33918
- [Netdata](https://affpapa.org/en/nevibecode/mcp/netdata.md) — MCP server · ★ 81115
- [browser-use](https://affpapa.org/en/nevibecode/mcp/browser-use.md) — MCP server · ★ 119160
- [Codebase Memory](https://affpapa.org/en/nevibecode/mcp/codebase-memory.md) — MCP server · ★ 47392
- [mcp-server](https://affpapa.org/en/nevibecode/mcp/mcp-server.md) — MCP server · ★ 43872

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md