Yes, Checkaifree is free to use.

How do I install Checkaifree?

Checkaifree is a local plugin. Install it using npm package: checkaifree-mcp and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Checkaifree safe to use?

Checkaifree scored 5.1/10 (moderate risk) in MCP Marketplace's automated security scan. It has 2 high or critical findings to review. It's listed, but review the security report on this page before installing.

What AI apps work with Checkaifree?

Checkaifree uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Checkaifree MCP Server

by Hyai Dev

Developer ToolsModerate5.1MCP RegistryLocal

Free

Server data from the Official MCP Registry

Inspect editable image source clues. No C2PA signature verification or authenticated origin.

About

Inspect editable image source clues. No C2PA signature verification or authenticated origin.

Security Report

5.1

Moderate5.1Moderate Risk

The server needs no credentials and its image-upload behavior is clearly disclosed, so it is a reasonable developer tool. Its main concerns are that user-selected images, including any embedded EXIF or location data, are sent to a third-party backend, and that the SSRF guard on image_url can be bypassed through automatic HTTP redirects and DNS names that resolve to private addresses. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

7 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "com-checkaifree-ai-image-detector": {
      "args": [
        "-y",
        "checkaifree-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Check AI Free MCP server

Official MCP adapter for Check AI Free. It uploads a selected image for source/header inspection and returns editable metadata observations with limitations. It does not verify C2PA signatures, authenticate an origin or identify an exact generator.

Install

{
  "mcpServers": {
    "checkaifree": {
      "command": "npx",
      "args": ["-y", "checkaifree-mcp"]
    }
  }
}

Use this stdio configuration in an MCP client that supports local commands. No service API key or account is required; rate limits and availability apply.

Tools

detect_ai_image: accepts one of image_url, file_path, or image_base64. Read source observations; metadata-only readings do not display a model percentage.
inspect_c2pa_provenance: accepts image_url or file_path. The historical tool name is retained for compatibility. It observes source markers and camera fields; signatures, asset binding and certificate trust are not verified.

Supported inputs: JPEG, PNG and WebP up to 10 MiB. A supplied URL is fetched by this Node process; the selected image bytes and filename are then sent to the Check AI Free backend. Local files and base64 input are also uploaded. This adapter is not an in-browser/local-only checker. Do not supply sensitive images without reviewing image handling.

The current adapter calls the source/header endpoint. It does not run the website's separate image re-encoding/pixel-model fallback. Missing metadata can therefore remain inconclusive. Use the website for the full user-facing flow. Source text is editable; no metadata observation or model estimate is proof of authenticity or account identity.

Reading example

An illustrative source-only response might say:

Source text suggests AI generation. No completed model score; source clues alone do not establish a probability. Source fields are editable. C2PA signatures are not verified.

This is an explanation of output semantics, not an accuracy benchmark. The method page documents the product's capabilities and limits.

Development and release checks

npm ci
npm test
npm pack --dry-run

The default tests are offline: output semantics, protocol initialization/tool discovery and missing-input rejection. test:live retains the legacy integration runner and requires explicit review of its fixtures and network requests before use. Release checks do not need paid provider calls.

Source: hyai-dev/checkaifree-mcp. MIT license; see LICENSE.

Reviews

No reviews yet

Be the first to review this server!

4.7

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.