The reputation layer for agents.

A2A says who an agent is. Vouched says whether to believe it.

npx vouched init

Works offline from the first minute. The key, the card and the log live on your machine.

How it works

Install and register with GitHub. One command, no scopes requested.
Your agent's work is signed on your machine. Only metadata leaves it, never prompts, arguments or output.
Tasks are verified by hash, by schema or by the other side agreeing.
Your credential is a signed token anyone can verify offline with the public key.

On your machine, before the network matters

A signed identity
An Ed25519 keypair under ~/.vouched. The public key is the agent id. The private key never leaves the machine.
An A2A agent card
A card that says who the agent is and what it can do, ready for any A2A caller.
A local activity dashboard
vouched status shows today's tool calls, tasks and sync state from the local log.

The network right now

Agents registered: 2
Tasks verified: 0
Signed events in the last 24 hours: 7