AI Skill Hub 推荐使用:Vouch 是一款优质的Agent工作流。AI 综合评分 7.5 分,在同类工具中表现稳健。如果你正在寻找可靠的Agent工作流解决方案,这是一个值得深入了解的选择。
Vouch 是一套完整的 AI Agent 自动化工作流方案。通过可视化的节点编排,将复杂的多步骤任务拆解为清晰的自动化流程,实现全程无人值守的智能处理。支持与数百种外部服务和 API 无缝集成,适合构建数据处理管线、业务自动化和 AI 辅助决策系统。
Vouch 是一套完整的 AI Agent 自动化工作流方案。通过可视化的节点编排,将复杂的多步骤任务拆解为清晰的自动化流程,实现全程无人值守的智能处理。支持与数百种外部服务和 API 无缝集成,适合构建数据处理管线、业务自动化和 AI 辅助决策系统。
# 方式一:pip 安装(推荐)
pip install vouch
# 方式二:虚拟环境安装(推荐生产环境)
python -m venv .venv
source .venv/bin/activate # Windows: .venv\Scripts\activate
pip install vouch
# 方式三:从源码安装(获取最新功能)
git clone https://github.com/vouch-protocol/vouch
cd vouch
pip install -e .
# 验证安装
python -c "import vouch; print('安装成功')"
# 命令行使用
vouch --help
# 基本用法
vouch input_file -o output_file
# Python 代码中调用
import vouch
# 示例
result = vouch.process("input")
print(result)
# vouch 配置文件示例(config.yml) app: name: "vouch" debug: false log_level: "INFO" # 运行时指定配置文件 vouch --config config.yml # 或通过环境变量配置 export VOUCH_API_KEY="your-key" export VOUCH_OUTPUT_DIR="./output"
<p align="center"> <img src="docs/assets/vouch-wordmark.png" alt="Vouch Protocol" width="400"> </p>
<sub><em>Vouch Protocol™ — common-law trademark.</em></sub>
<p align="center">The Open Standard for Identity & Provenance of AI Agents</strong> </p>
<p align="center"> <a href="https://c2pa.org"><img src="https://img.shields.io/badge/C2PA-Member-0891b2?style=for-the-badge&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCIgZmlsbD0id2hpdGUiPjxwYXRoIGQ9Ik0xMiAyQzYuNDggMiAyIDYuNDggMiAxMnM0LjQ4IDEwIDEwIDEwIDEwLTQuNDggMTAtMTBTMTcuNTIgMiAxMiAyek0xMCAMTdsLTUtNSAxLjQxLTEuNDFMMTAgMTQuMTdsNy41OS03LjU5TDE5IDhsLTkgOXoiLz48L3N2Zz4=" alt="C2PA Member"></a> <a href="https://contentauthenticity.org"><img src="https://img.shields.io/badge/CAI-Member-f97316?style=for-the-badge&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCIgZmlsbD0id2hpdGUiPjxwYXRoIGQ9Ik0xMiAxTDMgNXY2YzAgNS41NSAzLjg0IDEwLjc0IDkgMTIgNS4xNi0xLjI2IDktNi40NSA5LTEyVjVsLTktNHptMCAyLjE4bDcgMy4xMnY1LjdjMCA0LjgzLTMuMjMgOS4zNi03IDEwLjU4VjMuMTh6Ii8+PC9zdmc+" alt="CAI Member"></a> <a href="https://identity.foundation"><img src="https://img.shields.io/badge/DIF-Member-6F2DA8?style=for-the-badge&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCIgZmlsbD0id2hpdGUiPjxwYXRoIGQ9Ik0xMiAyQzYuNDggMiAyIDYuNDggMiAxMnM0LjQ4IDEwIDEwIDEwIDEwLTQuNDggMTAtMTBTMTcuNTIgMiAxMiAyem0tMiAxNWwtNS01IDEuNDEtMS40MUwxMCAxNC4xN2w3LjU5LTcuNTlMMTkgOGwtOSA5eiIvPjwvc3ZnPg==" alt="DIF Member"></a> <a href="https://lfaidata.foundation"><img src="https://img.shields.io/badge/Linux_Foundation-Member-333333?style=for-the-badge&logo=linux-foundation&logoColor=white" alt="Linux Foundation Member"></a> </p>
<p align="center"> <a href="https://github.com/vouch-protocol/vouch"><img src="https://img.shields.io/badge/Protected_by-Vouch_Protocol-00C853?style=flat&labelColor=333&logo=data:image/svg+xml;base64,PHN2ZyB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHZpZXdCb3g9IjAgMCAyNCAyNCIgd2lkdGg9IjI0IiBoZWlnaHQ9IjI0Ij48cGF0aCBmaWxsPSIjMDBDODUzIiBkPSJNMTIgMjBMMiA0aDRsNiAxMC41TDE4IDRoNEwxMiAyMHoiLz48L3N2Zz4=" alt="Protected by Vouch"></a> <a href="https://www.bestpractices.dev/projects/11688"><img src="https://www.bestpractices.dev/projects/11688/badge" alt="OpenSSF Silver"></a> <a href="https://codecov.io/gh/vouch-protocol/vouch"><img src="https://codecov.io/gh/vouch-protocol/vouch/branch/main/graph/badge.svg" alt="Code Coverage"></a> <a href="https://discord.gg/mMqx5cG9Y"><img src="https://img.shields.io/badge/Discord-Join_Community-7289da?logo=discord&logoColor=white" alt="Discord"></a> </p>
<p align="center"> <a href="https://github.com/vouch-protocol/vouch/blob/main/LICENSE"><img src="https://img.shields.io/badge/License-Apache_2.0-blue.svg" alt="Apache 2.0 License"></a> </p>
---
Vouch Protocol v1.0 aligns directly with the open standard:
eddsa-jcs-2022 cryptosuite (no JOSE, no Base64-wrapped payload, the credential remains human-readable JSON).hybrid-eddsa-mldsa44-jcs-2026) as an optional add-on for regulated deployments aligning with NIST CNSA 2.0 / NSM-10 timelines.The legacy v0.x JWS API (Signer.sign(), Verifier.verify()) continues to work unchanged for a deprecation window. New code should prefer Signer.sign_credential() and Verifier.verify_credential(). See the Specification at vouch-protocol.com/specs/SPEC/ for the full specification.
---
The Open Standard for AI Agent Identity & Accountability When Anthropic launched MCP, they solved "how agents call tools." They didn't solve "how we TRUST those agents." Vouch Protocol is the SSL certificate for AI agents.
Read the spec → | Join Discord →
---
hybrid-eddsa-mldsa44-jcs-2026) for regulated deployments aligning with NIST CNSA 2.0 / NSM-10 migration timelinescredential = signer.sign_credential_hybrid(intent={ 'action': 'submit_clinical_finding', 'target': 'trial:NCT00000001', 'resource': 'https://fda-submissions.example.com/api/findings', })
```
---
pip install vouch-protocol
```bash pip install vouch-protocol
```python
vouch git init
v1.0 path:
from fastapi import FastAPI, Request, HTTPException
from vouch import Verifier
app = FastAPI()
@app.post("/api/resource")
async def protected_route(request: Request):
credential = await request.json()
public_key = '{"kty":"OKP", ...}' # Resolved from did:web or trusted root
is_valid, passport = Verifier.verify_credential(credential, public_key=public_key)
if not is_valid:
raise HTTPException(status_code=401, detail="Untrusted Agent")
return {
"status": "Verified",
"agent": passport.sub,
"intent": passport.intent,
}
Legacy v0.x path:
from vouch import Verifier
@app.post("/api/legacy")
def legacy_route(vouch_token: str = Header(alias="Vouch-Token")):
is_valid, passport = Verifier.verify(vouch_token, public_key_jwk=public_key)
if not is_valid:
raise HTTPException(status_code=401, detail="Untrusted Agent")
return {"status": "Verified", "agent": passport.sub}
That's it. A few lines to sign, a few to verify, on either path.
---
4 Simple Steps: 1. Generate Identity: Create an Ed25519 keypair and a DID, publish a DID Document with a Multikey verification method. 2. Sign Action: Agent's sidecar issues a Verifiable Credential carrying action, target, and resource, secured by an eddsa-jcs-2022 Data Integrity proof. 3. Send to API: Transmit the credential as the HTTP request body with Content-Type: application/vc+vouch (or via the legacy Vouch-Token header for v0.x compatibility; the prior application/vouch+credential+json Content-Type is retained as a transitional alias). 4. Verify: API resolves the issuer's DID, validates the Data Integrity proof, checks temporal claims and the resource binding, returns a CredentialPassport.
Works with all major AI frameworks out-of-the-box:
---
| Feature | Vouch Protocol | DIY JWT |
|---|---|---|
| **Agent-specific** | ✅ (designed for agents) | ❌ (generic) |
| **MCP integration** | ✅ (native) | ❌ (manual) |
| **Framework integrations** | ✅ (LangChain, CrewAI, etc.) | ❌ |
| **Audit trail format** | ✅ (VC standardized) | ❌ (custom) |
| **standards-aligned** | ✅ (eddsa-jcs-2022 Data Integrity) | ❌ |
| **Multikey verification methods** | ✅ (algorithm-agnostic) | ❌ |
| **Hybrid post-quantum signatures** | ✅ (hybrid-eddsa-mldsa44-jcs-2026) | ❌ |
| **Cross-implementation interop tests** | ✅ (Python, TypeScript, Go) | ❌ |
| **Security best practices** | ✅ (built-in) | ⚠️ (easy to mess up) |
---
Vouch Protocol 是一个开放标准,用于身份认证和 AI 代理的可信赖性。它旨在为 AI 代理提供一个可信赖的身份认证系统,确保其行为和决策的可信赖性。
Vouch Protocol v1.0 支持以下功能:可验证凭证、数据完整性证明、多键验证方法和混合后量子安全性等。它还支持企业级功能,如密钥轮换、语音 AI 签名、云 KMS 等。
Vouch Protocol v1.0 需要 pip 安装 pqcrypto 库。它支持多种加密算法和安全性特性,包括 eddsa-jcs-2022 和 ML-DSA-44 等。
安装 Vouch Protocol 可以使用 pip 安装 vouch-protocol 包。还可以使用 Docker 镜像进行部署。
使用 Vouch Protocol 可以通过以下步骤进行:首先安装 Vouch Protocol,接着使用签名和验证功能等。
配置 Vouch Protocol 可以使用 vouch git init 命令进行。还可以通过环境变量和关键参数进行配置。
Vouch Protocol 提供了一个 API 接口,用于发送和验证凭证。它支持 JSON 格式的凭证和数据完整性证明等。
Vouch Protocol 的工作流包括以下步骤:首先,AI 代理通过委托凭证进行身份认证;接着,Vouch Credential 被生成和签名;最后,凭证被验证和确认。
Vouch提供了AI代理身份与问责的开源标准,具有较高的参考价值
该工具使用 NOASSERTION 协议,商用场景请仔细阅读协议条款,必要时咨询法律意见。
AI Skill Hub 为第三方内容聚合平台,本页面信息基于公开数据整理,不对工具功能和质量作任何法律背书。
建议在沙箱或测试环境中充分验证后,再部署至生产环境,并做好必要的安全评估。
📄 NOASSERTION — 请查阅原始协议条款了解具体使用限制。
总体来看,Vouch 是一款质量良好的Agent工作流,在同类工具中具备一定竞争力。AI Skill Hub 将持续追踪其更新动态,建议收藏备用,结合自身场景选择合适时机引入使用。
| 原始名称 | vouch |
| 原始描述 | 开源AI工作流:The Open Standard for AI Agent Identity & Accountability。⭐26 · Python |
| Topics | AI工作流身份验证 |
| GitHub | https://github.com/vouch-protocol/vouch |
| License | NOASSERTION |
| 语言 | Python |
收录时间:2026-06-02 · 更新时间:2026-06-06 · License:NOASSERTION · AI Skill Hub 不对第三方内容的准确性作法律背书。
选择 Agent 类型,复制安装指令后粘贴到对应客户端