vouch.sh valid

Vouch

Vouch is an open-source credential broker that replaces long-lived secrets (AWS keys, SSH keys, GitHub PATs, registry tokens) with short-lived credentials after FIDO2 hardware verification. One YubiKey tap, up to 8 hours of access, full audit trail.

Visit publisher ↗

Authority: 45 reach 0 · trust 5 · quality 25 · freshness 15
Tier: listed
llms.txt: https://vouch.sh/llms.txt
llms-full.txt: https://vouch.sh/llms-full.txt
Sections: 3
Links: 64
Size: 11692 bytes
Country: United States Hosting inference
Hosting country: United States Hosting inference
Country evidence: No published address evidence collected yet
Categories: Cybersecurity
For agents: Documentation: developer or product docs worth reading, nothing to call
First seen: 2026-10-23T06:19:07.773Z
Last checked: 2026-10-23T06:19:08.447Z
Badge

Their llms.txt

The beginning of the file, from our validated copy saved 2026-10-23T06:19:07.777Z. Cached copy · Source on vouch.sh

# Vouch

> Vouch is an open-source credential broker that replaces long-lived secrets (AWS keys, SSH keys, GitHub PATs, registry tokens) with short-lived credentials after FIDO2 hardware verification. One YubiKey tap, up to 8 hours of access, full audit trail.

Vouch replaces static secrets in the development workflow. It federates identity through OIDC, so every credential is tied to a verified hardware key and expires automatically — no key rotation scripts, offboarding checklists, or secrets in config files are required.

Every HTML page on vouch.sh is also served as raw Markdown at the same URL (e.g. `/docs/getting-started/index.md`). Token counts below are approximate (chars ÷ 4).

- [Source code](https://github.com/vouch-sh/vouch)
- [Agent capability manifest](https://vouch.sh/agents.md)
- [Full documentation for LLMs](https://vouch.sh/llms-full.txt)

## Documentation

- [Applications (OIDC)](https://vouch.sh/docs/applications/): Integrate Vouch as an OIDC provider in your web, SPA, or native app for hardware-verified authentication. (~4351 tok)
  - [Rails (OmniAuth)](https://vouch.sh/docs/applications/rails/): Integrate Vouch OIDC authentication into a Ruby on Rails application using OmniAuth. (~239 tok)
  - [Django (django-allauth)](https://vouch.sh/docs/applications/django/): Integrate Vouch OIDC authentication into a Django application using django-allauth. (~218 tok)
  - [Express.js (openid-client)](https://vouch.sh/docs/applications/express/): Integrate Vouch OIDC authentication into an Express.js application using openid-client. (~224 tok)
  - [Next.js (NextAuth.js)](https://vouch.sh/docs/applications/nextjs/): Integrate Vouch OIDC authentication into a Next.js application using NextAuth.js. (~239 tok)
  - [Laravel (Socialite)](https://vouch.sh/docs/applications/laravel/): Integrate Vouch OIDC authentication into a Laravel application using Socialite. (~249 tok)
  - [Flask (Authlib)](https://vouch.sh/docs/applications/flask/): Integrate Vouch OIDC authentication into a Flask application using Authlib. (~203 tok)
  - [FastAPI (Authlib)](https://vouch.sh/docs/applications/fastapi/): Integrate Vouch OIDC authentication into a FastAPI application using Authlib. (~204 tok)
  - [Spring Boot (Spring Security)](https://vouch.sh/docs/applications/spring-boot/): Integrate Vouch OIDC authentication into a Spring Boot application using Spring Security OAuth2. (~246 tok)
  - [Axum (openidconnect-rs)](https://vouch.sh/docs/applications/axum/): Integrate Vouch OIDC authentication into a Rust Axum application using openidconnect-rs. (~227 tok)
  - [Go (go-oidc)](https://vouch.sh/docs/applications/go/): Integrate Vouch OIDC authentication into a Go application using go-oidc and oauth2. (~208 tok)
  - [ASP.NET Core (OpenID Connect)](https://vouch.sh/docs/applications/aspnet-core/): Integrate Vouch OIDC authentication into an ASP.NET Core application using the built-in OpenID Connect middleware. (~215 tok)
  - [React (react-oidc-context)](https://vouch
…

Related sites

Other listed sites in Cybersecurity. See the whole category →

Domain	Title	Category	Country	Authority	llms.txt	llms-full.txt
cloudflare.com	Cloudflare	interface AI and machine learning Cybersecurity +1 Read documentation Call an API+1	—	85	✓	✓
forter.com	Forter — Identity Intelligence for Digital Commerce	interface Ecommerce Cybersecurity +1 Read documentation Call an API	US	75	✓	✓
digicert.com	DigiCert	documentation Cybersecurity Authentication and identity Read documentation Support / contact	US	74	✓
paloaltonetworks.com	Palo Alto Networks	documentation Cybersecurity	US	74	✓	✓
acronis.com	Acronis	transactional Cybersecurity Read documentation Buy products+1	US	70	✓	✓
akismet.com	Akismet	interface Cybersecurity APIs and SDKs Read documentation Call an API+1	US	70	✓
datadoghq.com	Datadog	interface DevOps and observability Cybersecurity Read documentation Call an API+1	US	70	✓
okta.com	Okta and Auth0 Platforms	documentation Authentication and identity Cybersecurity Read documentation Support / contact	US	70	✓

Machine-readable: GET /v1/resolve?q=vouch.sh · GET /v1/domain/vouch.sh · this page as Accept: application/json or text/markdown · MCP lookup_domain

Automatically discovered from public files. Inclusion does not imply endorsement or publisher participation.

Own or manage this website?

If you own or manage vouch.sh, you can update its listing and review file health, discovery activity and score history.

Manage this listing — optional

What verification unlocks

See how your site is discovered—and control what agents see.

Control what agents see
Edit your listing description, tags, public contact details and additional llms.txt paths. Publish your terms for automated access, attribution and pricing.
Make your profile eligible for search
A valid, listed, unblocked, verified profile can appear in our publisher sitemap and become eligible for search-engine visibility. Search engines decide what to index and rank.
Appear in our llms-full.txt
Eligible verified publishers are listed by name, with their file links and summaries, in the service overview agents can read.

Free. No account registration, backlink or payment required. Public discovery remains available without verification.

Verify your website—free

Preview the owner dashboard · All verification benefits

Let your coding agent verify it

If your coding agent is authorized to manage this website, paste these instructions into it.

Claim my listing on Agent Web Map for vouch.sh:
1. POST https://agentwebmap.com/v1/sites/vouch.sh/claims and keep claim_id and claim_secret private.
2. Publish the proof: add the line "AgentWebMap ownership: <token>" (token from step 1) to https://vouch.sh/llms.txt, or use the DNS, meta-tag or well-known method the response describes.
3. POST https://agentwebmap.com/v1/sites/vouch.sh/verify with {"claim_id": "...", "claim_secret": "..."}.
4. Save the api_key from the answer; it manages the listing (PATCH https://agentwebmap.com/v1/sites/vouch.sh).
MCP equivalent: tools begin_ownership_claim, then verify_domain, at https://agentwebmap.com/mcp. Docs: https://agentwebmap.com/docs#verify

Corrections or removal requests: contact the directory.