vouch

vouch

MCP.Pizza Chef: vouch-protocol

Vouch lets you create secure digital identities for AI assistants and verify their authenticity in apps like Claude Desktop, Cursor, and Goose. It helps you sign git commits with verified badges, detect leaked private keys in your code, and keep signing keys safe from AI prompt exposure. While it requires developer-level setup, Vouch ensures your AI agents are accountable and trustworthy by managing their identity and credentials continuously.

Coding
Other

Use This MCP server To

Create a secure digital identity for my AI assistant Sign and verify git commits with a verified badge Check if my code accidentally exposes private keys Verify AI agent credentials in my apps Keep AI signing keys safe from prompt leaks Monitor trust status of AI agents continuously

README

Vouch Protocol™

Vouch Protocol

Vouch Protocol™ is a common-law trademark.

The Open Standard for Identity & Provenance of AI Agents

C2PA Member CAI Member DIF Member Linux Foundation Member

vouch FAQ

Can I use Vouch to verify the identity of AI agents in Claude Desktop?
Yes — Vouch works with Claude Desktop, Cursor, and Goose to create and verify AI agent identities.
Do I need an API key or account to use Vouch?
No — Vouch is open source and does not require an API key or account to use.
How difficult is it to set up Vouch?
It requires developer-level setup, including installing via pip and running command-line configuration.
Can I use Vouch to sign and verify git commits?
Yes — Vouch can cryptographically sign your git commits and verify them with a badge on GitHub.
Does Vouch protect my signing keys from being exposed to AI prompts?
Yes — it keeps signing keys separate from the AI model context to prevent prompt injection leaks.
Can Vouch detect leaked private keys or credentials in my code?
Yes — it includes scanning tools to find leaked key material before code ships.