Sidearm

io.github.ebadros由 GitHub 账号 ebadros 发布v0.9.2更新于 Oct 24, 2026

Protect media from AI training, detect AI-generated content, and find stolen work.

已验证STDIO仅桌面安全与监控媒体与设计AI 与机器学习

概览

AI 生成的概览

Sidearm 将 Sidearm 媒体保护 API 封装为 MCP 工具，让助手保护媒体免于 AI 训练、检测 AI 生成内容并查找被盗用的作品。

可以做什么
  • 浏览保护算法并运行，或按预设级别保护媒体、提取嵌入向量
  • 轮询异步任务并查看进度与结果
  • 检测媒体是否由 AI 生成、指纹是否匹配，以及内容是否被用于训练模型
  • 注册、列出、查看、更新并永久删除媒体库中的素材
  • 搜索相似媒体，查看账户、权利、账单与来源信息，并通过指纹识别媒体
  • 创建、读取和公开发布结果分享链接，列出删除记录，检索文档与仪表盘操作说明
适用场景
适合需要助手处理媒体权利与来源事务的场景：为画作或影像防止被用于 AI 训练、判断图片或视频是否为 AI 生成，或调查自己的内容是否被用于训练模型，均通过你的 Sidearm 账户完成。
运行要求
以 stdio 本地运行，通常通过 npm 包用 npx 启动，需要 Node.js。需要 Sidearm 账户，并在 SDRM_API_KEY 环境变量中提供 API 密钥；可用 SDRM_BASE_URL 覆盖 API 地址。需要访问 Sidearm API 的网络连接。
安装前请注意
SDRM_API_KEY 中的 API 密钥是正式凭据（sk_live_ 前缀），可访问账户与额度，请勿放入共享配置。工具可注册、更新并永久删除媒体素材、将分享结果公开发布，且每个算法会消耗付费额度，执行删除或消费类操作前应先确认。媒体与元数据会发送至 Sidearm API。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Sidearm，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

@sidearmdrm/mcp

MCP server for the Sidearm API — protect media from AI training, detect AI-generated content, and search for stolen work.

This package exposes the Sidearm REST API as Model Context Protocol (MCP) tools that AI agents (Cursor, Claude Desktop, Windsurf, etc.) can call directly.

Quick Start

1. Get an API key

Sign up at sdrm.io and create an API key at sdrm.io/api-keys.

2. Configure your agent

Add to your MCP configuration file:

Cursor (.cursor/mcp.json):

json
{  "mcpServers": {    "sdrm": {      "command": "npx",      "args": ["-y", "@sidearmdrm/mcp"],      "env": {        "SDRM_API_KEY": "sk_live_..."      }    }  }}

Claude Desktop (claude_desktop_config.json):

json
{  "mcpServers": {    "sdrm": {      "command": "npx",      "args": ["-y", "@sidearmdrm/mcp"],      "env": {        "SDRM_API_KEY": "sk_live_..."      }    }  }}

Windsurf (~/.codeium/windsurf/mcp_config.json):

json
{  "mcpServers": {    "sdrm": {      "command": "npx",      "args": ["-y", "@sidearmdrm/mcp"],      "env": {        "SDRM_API_KEY": "sk_live_..."      }    }  }}

That's it. Your agent can now call Sidearm tools.

Tools (27)

Discovery

ToolDescription
list_algorithmsBrowse available protection algorithms. Filter by category or media type.

Protection & Extraction

ToolDescription
run_algorithmRun specific algorithms on media by ID. Returns a job for async processing.
protect_mediaProtect media with a preset level (standard/maximum). Auto-selects algorithms.
extract_embeddingsExtract raw embedding vectors from media for downstream similarity search or ML pipelines.

Jobs

ToolDescription
check_jobPoll async job status. Returns progress and results when complete.

Detection

ToolDescription
detect_aiDetect whether media was AI-generated. Supports image, video, audio, text.
detect_fingerprintCheck if media has been previously registered using fingerprint matching.
detect_membershipTest whether your content was used to train a suspect AI model.

Search

ToolDescription
search_mediaSearch for similar media across your indexed library.
list_searchesList previous searches on your account.

Media Management

ToolDescription
register_mediaRegister and index media with optional protection mode (register, search_ready, standard, maximum).
list_mediaList media assets in your library (paginated, filterable).
get_mediaGet details of a specific media asset including protection status and algorithms applied.
update_mediaUpdate media metadata (e.g., original URL).
delete_mediaPermanently delete a media asset and all associated data.

Account, Rights & Billing

ToolDescription
get_accountGet your account details — ID, name, email, credit balance, and plan info.
get_rightsGet C2PA, IPTC, and rights information for a media asset.
get_billingView credit balance, usage breakdown, per-algorithm costs, and billing portal link.

Provenance & Identification

ToolDescription
get_provenanceGet the full provenance chain for an asset — algorithms, C2PA manifest, membership results.
identify_mediaIdentify media by its embedded Sidearm fingerprint and extract its C2PA provenance chain.

Shares

ToolDescription
create_shareCreate a shareable link for a detection, search, or provenance result (starts private).
get_shareGet a shared result by its share ID.
publish_shareMake a shared result publicly accessible.

Deletion Records

ToolDescription
list_deletionsList deletion records documenting permanently deleted assets.
get_deletionGet details of a specific deletion record including purged algorithms and storage status.

Documentation

ToolDescription
search_docsSearch the Sidearm API documentation. Returns relevant sections from the full developer reference.
navigate_uiLook up how to perform actions in the Sidearm dashboard. Returns step-by-step instructions.

Example Agent Conversations

"Protect this image from AI training"

Agent calls protect_media with the image URL, then check_job to get the protected file.

"What algorithms are available for audio?"

Agent calls list_algorithms with media_type: "audio".

"Run Nightshade and Glaze on my artwork"

Agent calls run_algorithm with algorithms: ["nightshade", "glaze"].

"Is this photo AI-generated?"

Agent calls detect_ai with the image, then check_job for results.

"Was my artwork used to train Stable Diffusion?"

Agent calls detect_membership with your media IDs and the model name.

"How do I upload files in the dashboard?"

Agent calls navigate_ui with query: "upload files" for step-by-step instructions.

Environment Variables

VariableRequiredDescription
SDRM_API_KEYYesYour Sidearm API key (sk_live_... or sk_test_...)
SDRM_BASE_URLNoOverride the API base URL (default: https://api.sdrm.io)

Development

bash
git clone https://github.com/sidearmDRM/mcp-server.gitcd mcp-servernpm installnpm run build

Test locally with the MCP Inspector:

bash
SDRM_API_KEY=sk_test_... npx @modelcontextprotocol/inspector node dist/index.js

License

MIT

来源：README.md，提交 8d055fe

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

1
  1. v0.9.2最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分