C2PALab

C2PA URL Checker

Inspect C2PA Content Credentials directly from a public image, video, audio, or PDF URL. Verified locally in your browser with zero data storage.

Sample URLs to try:
Zero Server Storage: Remote media is streamed directly to your browser for local WebAssembly verification. Files are never stored or logged on our servers.
ℹSupports JPEG, PNG, WebP, AVIF, HEIC/HEIF, SVG, MP4, MOV, MP3, WAV, and PDF up to 200 MB.

How to read the result

Verified & Trusted

The exposed credential and applicable checks passed, and the signer is trusted by this reader.

Valid — Untrusted Signer

The exposed credential and applicable integrity checks passed, but the signer is not recognized by this reader.

Verification failed

A credential was found, but one or more applicable checks failed. This is not automatically proof of malicious editing.

Verification unavailable

A credential was found, but the reader could not determine a complete verification result.

No Content Credentials found

No readable C2PA manifest was found in this media. This does not mean the file is fake, altered, or AI-generated.

How URL inspection works

  1. 1

    1. Enter Media URL

    Paste a direct link to any publicly accessible image, video, audio file, or PDF.

  2. 2

    2. Smart Zero-Storage Stream

    C2PA Lab requests the file directly from your browser. If CORS blocks direct access, our streaming proxy transfers the bytes to your browser without storing a single byte on disk.

  3. 3

    3. Local WebAssembly Verification

    The official C2PA engine parses and cryptographically validates the manifest store directly on your device.

Why inspect Content Credentials by URL?

Fact-checking & News Journalism

Verify the provenance of breaking news photographs and videos directly from newsrooms or social content CDNs without downloading them manually.

Generative AI Disclosure Auditing

Check whether public AI-generated imagery carries declared c2pa.actions such as “c2pa.created” or digital watermarks from models like DALL-E, Firefly, or Midjourney.

Creative Asset Provenance

Inspect author signatures, publisher identities, and ingredient edit chains from online portfolios, stock archives, and press kits.

Frequently asked questions

Does C2PA Lab save or cache the media fetched by URL?

No. All remote media is streamed directly into your browser’s memory. The streaming proxy acts purely as a transport pipe and never writes any data to disk or persistent storage.

What is the maximum file size supported?

You can inspect files up to 200 MB. Larger files are rejected upfront to preserve browser responsiveness.

Why do some URLs fail to fetch?

Some websites protect assets with Cloudflare Bot Management, CAPTCHAs, hotlink protections, or require user login/cookies. In such cases, download the file and drag it into our local checker.

What formats can be checked via URL?

All C2PA-compatible formats: JPEG, PNG, WebP, AVIF, HEIC/HEIF, SVG, MP4, MOV, MP3, WAV, and PDF documents.