Developers

OSS, local-first, OTel-compatible.

Wire your agent to a Living Cert in five minutes. The whole stack is Apache-2.0 and runs on your laptop or in your VPC.

Quickstart.

Three lines, one Living Cert.

quickstart.ts

// 1. install
npm i @vouch/sdk

// 2. wrap your model client
import { instrumentOpenAI, scan } from "@vouch/sdk";
import OpenAI from "openai";

const openai = instrumentOpenAI(new OpenAI(), {
  agentId: "refund-agent",
  baseUrl: process.env.VOUCH_BASE_URL,
});

// 3. ship — every call is now traced, scanned, certified
const reply = await openai.chat.completions.create({ ... });

Build with us.

Everything is hackable.

TypeScript & Python SDKs

Drop-in instrumentation for OpenAI, Anthropic, LangChain, MCP. One line wraps the client; traces, firewall scans, and findings flow automatically.

vouchctl CLI

Verify a public cert, fetch JWKS, mint test tokens, and run smoke from the terminal. Public-endpoint only — useful for procurement.

OTel + REST + tRPC

Trace ingestion is OpenTelemetry-compatible. Public REST for cert verification + JWKS. tRPC for the dashboard surface.

Apache-2.0 monorepo

Web app, worker, firewall, SDKs, and Vouch-AI offensive agent are all open-source. Self-host the entire stack with one Docker compose.