c2pa-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| C2PA_TRUST_LIST_URL | No | Comma-separated PEM URLs. Add the Interim Trust List (ITL) here to verify pre-2026 content. Default is the official C2PA Conformance trust list. | https://raw.githubusercontent.com/c2pa-org/conformance-public/main/C2PA-TRUST-LIST.pem |
| C2PA_MAX_FETCH_BYTES | No | Max download size for verify_c2pa_url (100 MB). | 104857600 |
| C2PA_TRUST_TTL_SECONDS | No | Cache lifetime for the fetched trust list. | 86400 |
Capabilities
Features and capabilities supported by this server
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| verify_c2pa_fileA | Verify the C2PA Content Credentials (provenance) of a local image, video, audio, or PDF file. Returns a plain-language verdict (trusted / valid_untrusted / invalid / no_credentials), the signer, whether the content is AI-generated, its edit history, provenance lineage, and any validation issues. Use this when you have a file path on disk. The file is read locally and never uploaded. |
| verify_c2pa_urlA | Download a remote image, video, audio, or PDF over https and verify its C2PA Content Credentials. Returns the same plain-language verdict, signer, AI-generation status, lineage, and issues as verify_c2pa_file. Use this for a web URL. Only public https URLs are allowed (private/internal hosts are refused). |
| scan_c2pa_directoryA | Audit a folder of media files: report which ones carry C2PA Content Credentials, their verdict, signer, and whether each is AI-generated. Non-recursive. Use this to triage a directory of images/videos at once. |
| c2pa_infoA | Report the verification engine version, the media types this server can verify, and the active trust-list configuration. Use this to check capabilities before verifying. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/harelrech/c2pa-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server