Sidearm

io.github.ebadros由 GitHub 帳號 ebadros 發布v0.9.2更新於 Oct 24, 2026

Protect media from AI training, detect AI-generated content, and find stolen work.

已驗證STDIO僅桌面安全與監控媒體與設計AI 與機器學習

概覽

AI 產生的概覽

Sidearm 將 Sidearm 媒體保護 API 包裝成 MCP 工具，讓助理保護媒體免於被用於 AI 訓練、偵測 AI 生成內容並尋找被盜用的作品。

可以做什麼
  • 瀏覽保護演算法並執行，或依預設等級保護媒體、擷取嵌入向量
  • 輪詢非同步工作並查看進度與結果
  • 偵測媒體是否為 AI 生成、指紋是否相符，以及內容是否被用於訓練模型
  • 註冊、列出、檢視、更新並永久刪除媒體庫中的素材
  • 搜尋相似媒體，查看帳戶、權利、帳務與來源資訊，並以指紋辨識媒體
  • 建立、讀取與公開發布結果分享連結，列出刪除紀錄，檢索文件與儀表板操作說明
適用情境
適合需要助理處理媒體權利與來源事務的情境：為畫作或影像防止被用於 AI 訓練、判斷圖片或影片是否為 AI 生成，或調查自己的內容是否被用於訓練模型，皆透過你的 Sidearm 帳戶完成。
執行需求
以 stdio 在本機執行，通常透過 npm 套件以 npx 啟動，需要 Node.js。需要 Sidearm 帳戶，並在 SDRM_API_KEY 環境變數提供 API 金鑰；可用 SDRM_BASE_URL 覆寫 API 位址。需要連線至 Sidearm API 的網路存取。
安裝前請注意
SDRM_API_KEY 中的 API 金鑰是正式憑證（sk_live_ 前綴），可存取帳戶與額度，請勿放入共用設定。工具可註冊、更新並永久刪除媒體素材、將分享結果公開，且每個演算法會消耗付費額度，執行刪除或消費類操作前應先確認。媒體與中繼資料會傳送至 Sidearm API。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Sidearm，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

@sidearmdrm/mcp

MCP server for the Sidearm API — protect media from AI training, detect AI-generated content, and search for stolen work.

This package exposes the Sidearm REST API as Model Context Protocol (MCP) tools that AI agents (Cursor, Claude Desktop, Windsurf, etc.) can call directly.

Quick Start

1. Get an API key

Sign up at sdrm.io and create an API key at sdrm.io/api-keys.

2. Configure your agent

Add to your MCP configuration file:

Cursor (.cursor/mcp.json):

json
{  "mcpServers": {    "sdrm": {      "command": "npx",      "args": ["-y", "@sidearmdrm/mcp"],      "env": {        "SDRM_API_KEY": "sk_live_..."      }    }  }}

Claude Desktop (claude_desktop_config.json):

json
{  "mcpServers": {    "sdrm": {      "command": "npx",      "args": ["-y", "@sidearmdrm/mcp"],      "env": {        "SDRM_API_KEY": "sk_live_..."      }    }  }}

Windsurf (~/.codeium/windsurf/mcp_config.json):

json
{  "mcpServers": {    "sdrm": {      "command": "npx",      "args": ["-y", "@sidearmdrm/mcp"],      "env": {        "SDRM_API_KEY": "sk_live_..."      }    }  }}

That's it. Your agent can now call Sidearm tools.

Tools (27)

Discovery

ToolDescription
list_algorithmsBrowse available protection algorithms. Filter by category or media type.

Protection & Extraction

ToolDescription
run_algorithmRun specific algorithms on media by ID. Returns a job for async processing.
protect_mediaProtect media with a preset level (standard/maximum). Auto-selects algorithms.
extract_embeddingsExtract raw embedding vectors from media for downstream similarity search or ML pipelines.

Jobs

ToolDescription
check_jobPoll async job status. Returns progress and results when complete.

Detection

ToolDescription
detect_aiDetect whether media was AI-generated. Supports image, video, audio, text.
detect_fingerprintCheck if media has been previously registered using fingerprint matching.
detect_membershipTest whether your content was used to train a suspect AI model.

Search

ToolDescription
search_mediaSearch for similar media across your indexed library.
list_searchesList previous searches on your account.

Media Management

ToolDescription
register_mediaRegister and index media with optional protection mode (register, search_ready, standard, maximum).
list_mediaList media assets in your library (paginated, filterable).
get_mediaGet details of a specific media asset including protection status and algorithms applied.
update_mediaUpdate media metadata (e.g., original URL).
delete_mediaPermanently delete a media asset and all associated data.

Account, Rights & Billing

ToolDescription
get_accountGet your account details — ID, name, email, credit balance, and plan info.
get_rightsGet C2PA, IPTC, and rights information for a media asset.
get_billingView credit balance, usage breakdown, per-algorithm costs, and billing portal link.

Provenance & Identification

ToolDescription
get_provenanceGet the full provenance chain for an asset — algorithms, C2PA manifest, membership results.
identify_mediaIdentify media by its embedded Sidearm fingerprint and extract its C2PA provenance chain.

Shares

ToolDescription
create_shareCreate a shareable link for a detection, search, or provenance result (starts private).
get_shareGet a shared result by its share ID.
publish_shareMake a shared result publicly accessible.

Deletion Records

ToolDescription
list_deletionsList deletion records documenting permanently deleted assets.
get_deletionGet details of a specific deletion record including purged algorithms and storage status.

Documentation

ToolDescription
search_docsSearch the Sidearm API documentation. Returns relevant sections from the full developer reference.
navigate_uiLook up how to perform actions in the Sidearm dashboard. Returns step-by-step instructions.

Example Agent Conversations

"Protect this image from AI training"

Agent calls protect_media with the image URL, then check_job to get the protected file.

"What algorithms are available for audio?"

Agent calls list_algorithms with media_type: "audio".

"Run Nightshade and Glaze on my artwork"

Agent calls run_algorithm with algorithms: ["nightshade", "glaze"].

"Is this photo AI-generated?"

Agent calls detect_ai with the image, then check_job for results.

"Was my artwork used to train Stable Diffusion?"

Agent calls detect_membership with your media IDs and the model name.

"How do I upload files in the dashboard?"

Agent calls navigate_ui with query: "upload files" for step-by-step instructions.

Environment Variables

VariableRequiredDescription
SDRM_API_KEYYesYour Sidearm API key (sk_live_... or sk_test_...)
SDRM_BASE_URLNoOverride the API base URL (default: https://api.sdrm.io)

Development

bash
git clone https://github.com/sidearmDRM/mcp-server.gitcd mcp-servernpm installnpm run build

Test locally with the MCP Inspector:

bash
SDRM_API_KEY=sk_test_... npx @modelcontextprotocol/inspector node dist/index.js

License

MIT

來源：README.md，提交 8d055fe

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.9.2最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分