Rightis

io.github.Backers-ShawnPublished by GitHub account Backers-Shawnv1.0.0Updated Oct 24, 2026

Identity-rights registry lookups before AI generation: is a face, voice or persona registered?

VerifiedStreamable HTTPWeb executableSecurity & MonitoringAI & ML

Overview

AI-generated overview

Remote Rightis registry that lets an assistant check whether a real person or character is registered and what AI uses they allow before generating a…

What you can do
  • Look up a registered identity by rights ID and see which AI uses are allowed, need approval or are refused, including whether training is prohibited
  • Search the registry by display name in Korean or English to find a rights ID and public permission summary
  • Read guidance on how the registry works, partner keys for licensing, usage logging and persona policy
When to use it
Use it before image, video, voice or avatar generation that depicts a real person or registered character, or when you only have a name and need to find the matching registration first.
Requirements
A remote MCP endpoint; the README describes a keyless public server. No account, key or environment variable is declared for the MCP server itself.
Before you install
A lookup result is not clearance: allowed means a licence must still be requested, unspecified is not a yes, and not registered or a failed lookup does not mean the person is unregistered. Do not generate on a denied decision or an error. Queries send names and rights IDs to a third-party registry.

Installation

In SourceWeft

  1. Open Rightis in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.Backers-Shawn%2Frightis/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "rightis": {
      "type": "http",
      "url": "https://rightis.org/api/public-mcp/mcp"
    }
  }
}

README

rightis-js

Use this before your code generates a real person's face, voice or persona. Image, video and voice models, face swap, voice cloning, AI avatars and chat personas of real people or registered characters: ask Rightis first, on the server, before the generation call.

Rightis is a public registry of identity rights. People and rights holders register a likeness and say which AI uses they allow, want to approve, or refuse. This repository is the JavaScript SDK and CLI.

PackagePathWhat it is
@rightis/sdkpackages/sdkTyped client: rights checks, licences, usage, webhook verification
rightispackages/clinpx rightis: check from the terminal, log in, get a sandbox key

30-second quickstart

bash
npm install @rightis/sdknpx rightis check BR-XXXX-XXXX-XXXX --use "instagram ad" --asset face --public
ts
import { Rightis } from '@rightis/sdk';
const rightis = new Rightis(); // server only; reads RIGHTIS_SECRET_KEY, keyless without itconst result = await rightis.rights.check({  rights_id: 'BR-XXXX-XXXX-XXXX',  use_type: 'instagram ad',  ai_methods: ['image_generation'],  asset_types: ['face'],  territory: ['US'],});console.log(result.decision, result.next_action.type, result.next_action.url);

Read next_action, not just decision:

decisionnext_action.typeMeaning
allowedrequest_licensePre-approved scopes. Not free use: the licence request is approved without the holder reviewing it if the fee clears their floor. Still request it.
requires_approvalrequest_licenseThe holder decides each request.
unspecifiedrequest_licenseThe holder has said nothing. Not a yes.
deniedstopRefused. Do not generate.
nullnot_registeredNot in the registry. Not cleared.
nulldescribe_useRegistered, but no use was described. Add use_type, ai_methods, asset_types.

A failed lookup is not "not registered": on any RightisError, do not generate. The SDK deliberately ships no boolean that turns a decision into "go ahead".

Only have a name? rightis.rights.search('name') returns listed registrations with their Rights ID. No match is not clearance.

For AI coding assistants

  • Claude Code skill: skills/rightis/SKILL.md. Copy it to .claude/skills/rightis/SKILL.md in your project (or ~/.claude/skills/rightis/).
  • Cursor rule: .cursor/rules/rightis.mdc. Copy it to .cursor/rules/ in your project.
  • Codex and other agents: AGENTS.md, including a snippet to paste into your own AGENTS.md or CLAUDE.md.
  • Keyless MCP server: https://rightis.org/api/public-mcp/mcp (rights_lookup, rights_search, registry_info).

Links

Sandbox

bash
npx rightis login                                   # browser sign-in (OAuth with PKCE)npx rightis init                                    # sandbox key into .env.local, plus an example filenpx rightis people                                  # the sandbox sample peoplenpx rightis check BR-SANDBOX-... --use "social media ad" --asset facenode --env-file=.env.local rightis-example.mjs      # the same check from code

Develop

bash
pnpm installpnpm -r buildpnpm -r testpnpm -r typecheck

Node 20 or later. Point the SDK and CLI at a local server with RIGHTIS_API_URL=http://localhost:3000 (or --base-url).

Publish with pnpm publish --access public from packages/sdk, then packages/cli. Not npm publish: the CLI's workspace:^ dependency is rewritten only by pnpm.

License

MIT, The Backers Inc.

Source: README.md at commit 24b8bf9

Tools

3

rights_lookup

Look up a person or character on Rightis

Check whether a person or character is registered with Rightis by rights_id (BR-XXXX-XXXX-XXXX) and which AI uses they allow, require approval for, or refuse. do_not_train=true means their data must not be used for training. Call this before generating a likeness, voice or persona of a real person.

Parametersrights_idrequired

registry_info

How Rightis works for AI services

How Rightis works for AI services: what the public lookup answers, how to get a partner key for licensing, usage logging and persona policy, and where the machine-readable signals live. Call it first when you are unsure how to use the registry.

Takes no parameters.

Version history

1
  1. v1.0.0LatestOct 9, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts