Veritap docs
 v1.0.0
Get help
● Providers · Image, video, audio

Content Credentials
origin written into the file.

Cameras and editing tools can write signed Content Credentials (C2PA) into images, videos and recordings. Veritap reads them on your own server: nothing is sent out and no account is needed.

C2PAruns on your serveron by default

01What it does

  • Shows who signed the file and what the credentials say about how it was made or edited.
  • Credentials that declare a generative AI source make the label "Likely AI-made or altered".
  • A file whose credentials no longer match it (changed after signing) is reported as such, and can never reach "No signs found".
  • A file without credentials is normal: most files have none. That is a note, not a warning, and it moves nothing.
"Proven origin" needs trusted signers

A signature proves origin only if you trust the signer. Paste the certificates of the signers you trust into Extra trust anchors (PEM). Without them, the app can show who signed a file but never "Proven origin"; a valid signature from an untrusted signer is treated like a file without credentials.

02Settings

  • Console, Content Credentials: Read Content Credentials is on by default. With it off, no image can reach "No signs found".
  • Extra trust anchors (PEM): one or more certificates starting with -----BEGIN CERTIFICATE-----. Each must parse as a certificate; a URL, a private key or other text is refused.

Content Credentials are not listed on the app's consent screen, because nothing leaves your server for them.

03How the reader is installed

The reader is a native program (@contentauth/c2pa-node 0.10.1) that npm ci downloads from the official C2PA release for your system. The server's install step then compares it with fixed SHA-256 fingerprints of the official files and prints c2pa: native binary verified for …; a different file stops the install. If no file exists for your system, the install only warns and the app lists Content Credentials as not checked. Prebuilt files exist for macOS (Apple silicon and Intel), Linux x64 and arm64 with glibc, and Windows x64; Alpine Linux is not covered. The console's Status page shows whether the reader works on your server.

04Cost

None. It runs on your server.