Server data from the Official MCP Registry
Verify a photo's capture time and provenance: C2PA validation, EXIF/XMP, and pixel forensics.
Verify a photo's capture time and provenance: C2PA validation, EXIF/XMP, and pixel forensics.
The ChronoVerify MCP server is a straightforward image verification tool with appropriate authentication via optional API keys and well-scoped permissions. Code quality is clean with proper input validation via Zod and error handling. The primary concerns are minor: unrestricted filesystem read access (file_path parameter accepts any absolute path) and the potential for verbose error messages. These findings do not significantly impact the security posture for a developer tool designed to verify images. Supply chain analysis found 2 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.
3 files analyzed · 6 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: CHRONOVERIFY_API_KEY
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-beeswaxpat-chronoverify": {
"env": {
"CHRONOVERIFY_API_KEY": "your-chronoverify-api-key-here"
},
"args": [
"-y",
"chronoverify-mcp"
],
"command": "npx"
}
}
}From the project's GitHub README.
An MCP server for ChronoVerify. It gives any MCP-compatible AI agent (Claude Desktop, Cursor, Cline, and others) one tool, verify_image, to check a photo's capture time and provenance: C2PA Content Credentials, EXIF and XMP metadata, and classical pixel forensics, fused into one verdict (provenance_confirmed, consistent, inconclusive, metadata_anomaly, or manipulation_indicated) with a 0 to 100 confidence.
Provenance-first, not a deepfake detector. Results are investigative triage to support human review, not proof.
Get an API key (the first 100 verifications each month are included): https://chronoverify.com/pricing . Without a key, the server uses the free, rate-limited public path.
Add it to your MCP client config. For Claude Desktop (claude_desktop_config.json) or any MCP client:
{
"mcpServers": {
"chronoverify": {
"command": "npx",
"args": ["-y", "chronoverify-mcp"],
"env": { "CHRONOVERIFY_API_KEY": "cv_live_..." }
}
}
}
Omit the env block to use the free public path.
verify_image takes exactly one of:
url: a publicly reachable image URL (the server fetches it),file_path: an absolute path to a local image, orimage_base64: base64-encoded image bytes.It returns the verdict, the confidence, the capture time and device when present, the C2PA status, and the SHA-256 of the file.
MIT
Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.