# 402utils C2PA Content Credentials Verifier

> 402utils C2PA Content Credentials Verifier is a paid API for AI agents from 402utils.com, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-11).

Verifies C2PA/Content Credentials provenance and tamper detection in an image, returning trust status, signature validity, trust-chain issuer, and asset-hash checks.

## Facts

- Endpoint: POST https://402utils.com/v1/c2pa-verify?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-11
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/402utils-c2pa-content-credentials-verifier-f04da16e
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_b1w_ZP2aFPj23vi2BITQk

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability 402utils-c2pa-content-credentials-verifier-f04da16e -d '<json body>'
```

Example prompt: Check the C2PA content credentials on this image — https://example.com/photo.jpg — tell me whether it's Trusted, Valid, Invalid, or has None, who signed it, and whether the asset hash checks out.

## When to prefer this

Use this endpoint when you need to verify C2PA/Content Credentials embedded in an image to check provenance, detect tampering, or confirm trust-chain validity — especially for EU AI Act Art. 50 compliance, media authenticity workflows, or vetting AI-generated or manipulated images. It handles both URL-based and byte-based image input and can optionally produce a signed Ed25519 attestation for an audit trail.

## Known failure modes

- Image URL is not publicly accessible — returns error or None status
- Image has no embedded C2PA manifest — returns status None
- Signature is cryptographically invalid — returns Invalid status
- Unsupported image format — may return error
- Network timeout fetching the image URL
- Malformed request body — returns 400-level error

## How this service works

Verify C2PA / Content Credentials (provenance & tamper detection) in an image: send the image bytes or a JSON {url}. Returns Trusted/Valid/Invalid/None with per-manifest signature, trust-chain (issuer) and asset-hash checks plus C2PA actions. 'Trusted' only if the signer chains to the C2PA trust list, otherwise 'Valid'. Relevant to EU AI Act Art. 50. Verification only (embedded manifests) — not generation.

## Output

Returns a trust status of Trusted (signer chains to C2PA trust list), Valid (valid signature but not on trust list), Invalid (tampered or bad signature), or None (no embedded manifest). Also includes per-manifest signature details, trust chain issuer identity, asset hash verification result, and declared C2PA actions recorded in the manifest.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "type": "string",
   "format": "uri",
   "description": "Public http(s) URL of an image (alternative to sending bytes)."
  },
  "attest": {
   "type": "string",
   "description": "Set to 1 for an Ed25519-signed attestation of the result (audit trail)."
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/402utils-c2pa-content-credentials-verifier-f04da16e/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from 402utils.com](https://www.zero.xyz/host/402utils.com/llms.txt)