Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for the Sidearm API — protect media from AI training, detect AI-generated content, and search for stolen work.
This package exposes the Sidearm REST API as Model Context Protocol (MCP) tools that AI agents (Cursor, Claude Desktop, Windsurf, etc.) can call directly.
Sign up at sdrm.io and create an API key at sdrm.io/api-keys.
Add to your MCP configuration file:
Cursor (.cursor/mcp.json):
{
"mcpServers": {
"sdrm": {
"command": "npx",
"args": ["-y", "@sidearmdrm/mcp"],
"env": {
"SDRM_API_KEY": "sk_live_..."
}
}
}
}Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"sdrm": {
"command": "npx",
"args": ["-y", "@sidearmdrm/mcp"],
"env": {
"SDRM_API_KEY": "sk_live_..."
}
}
}
}Windsurf (~/.codeium/windsurf/mcp_config.json):
{
"mcpServers": {
"sdrm": {
"command": "npx",
"args": ["-y", "@sidearmdrm/mcp"],
"env": {
"SDRM_API_KEY": "sk_live_..."
}
}
}
}That's it. Your agent can now call Sidearm tools.
| Tool | Description |
|---|---|
list_algorithms | Browse available protection algorithms. Filter by category or media type. |
| Tool | Description |
|---|---|
run_algorithm | Run specific algorithms on media by ID. Returns a job for async processing. |
protect_media | Protect media with a preset level (standard/maximum). Auto-selects algorithms. |
extract_embeddings | Extract raw embedding vectors from media for downstream similarity search or ML pipelines. |
| Tool | Description |
|---|---|
check_job | Poll async job status. Returns progress and results when complete. |
| Tool | Description |
|---|---|
detect_ai | Detect whether media was AI-generated. Supports image, video, audio, text. |
detect_fingerprint | Check if media has been previously registered using fingerprint matching. |
detect_membership | Test whether your content was used to train a suspect AI model. |
| Tool | Description |
|---|---|
search_media | Search for similar media across your indexed library. |
list_searches | List previous searches on your account. |
| Tool | Description |
|---|---|
register_media | Register and index media with optional protection mode (register, search_ready, standard, maximum). |
list_media | List media assets in your library (paginated, filterable). |
get_media | Get details of a specific media asset including protection status and algorithms applied. |
update_media | Update media metadata (e.g., original URL). |
delete_media | Permanently delete a media asset and all associated data. |
| Tool | Description |
|---|---|
get_account | Get your account details — ID, name, email, credit balance, and plan info. |
get_rights | Get C2PA, IPTC, and rights information for a media asset. |
get_billing | View credit balance, usage breakdown, per-algorithm costs, and billing portal link. |
| Tool | Description |
|---|---|
get_provenance | Get the full provenance chain for an asset — algorithms, C2PA manifest, membership results. |
identify_media | Identify media by its embedded Sidearm fingerprint and extract its C2PA provenance chain. |
| Tool | Description |
|---|---|
create_share | Create a shareable link for a detection, search, or provenance result (starts private). |
get_share | Get a shared result by its share ID. |
publish_share | Make a shared result publicly accessible. |
| Tool | Description |
|---|---|
list_deletions | List deletion records documenting permanently deleted assets. |
get_deletion | Get details of a specific deletion record including purged algorithms and storage status. |
| Tool | Description |
|---|---|
search_docs | Search the Sidearm API documentation. Returns relevant sections from the full developer reference. |
navigate_ui | Look up how to perform actions in the Sidearm dashboard. Returns step-by-step instructions. |
"Protect this image from AI training"
>
Agent callsprotect_mediawith the image URL, thencheck_jobto get the protected file.
"What algorithms are available for audio?"
>
Agent callslist_algorithmswithmedia_type: "audio".
"Run Nightshade and Glaze on my artwork"
>
Agent callsrun_algorithmwithalgorithms: ["nightshade", "glaze"].
"Is this photo AI-generated?"
>
Agent callsdetect_aiwith the image, thencheck_jobfor results.
"Was my artwork used to train Stable Diffusion?"
>
Agent calls detect_membership with your media IDs and the model name."How do I upload files in the dashboard?"
>
Agent callsnavigate_uiwithquery: "upload files"for step-by-step instructions.
| Variable | Required | Description |
|---|---|---|
SDRM_API_KEY | Yes | Your Sidearm API key (sk_live_... or sk_test_...) |
SDRM_BASE_URL | No | Override the API base URL (default: https://api.sdrm.io) |
git clone https://github.com/sidearmDRM/mcp-server.git
cd mcp-server
npm install
npm run buildTest locally with the MCP Inspector:
SDRM_API_KEY=sk_test_... npx @modelcontextprotocol/inspector node dist/index.jsMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.