
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@sidearmdrm/mcp
Advanced tools
MCP server exposing Sidearm media protection tools — watermarking, AI detection, and similarity search for AI agents
MCP server for the Sidearm API — protect media from AI training, detect AI-generated content, and search for stolen work.
This package exposes the Sidearm REST API as Model Context Protocol (MCP) tools that AI agents (Cursor, Claude Desktop, Windsurf, etc.) can call directly.
Sign up at sdrm.io and create an API key at sdrm.io/api-keys.
Add to your MCP configuration file:
Cursor (.cursor/mcp.json):
{
"mcpServers": {
"sdrm": {
"command": "npx",
"args": ["-y", "@sidearmdrm/mcp"],
"env": {
"SDRM_API_KEY": "sk_live_..."
}
}
}
}
Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"sdrm": {
"command": "npx",
"args": ["-y", "@sidearmdrm/mcp"],
"env": {
"SDRM_API_KEY": "sk_live_..."
}
}
}
}
Windsurf (~/.codeium/windsurf/mcp_config.json):
{
"mcpServers": {
"sdrm": {
"command": "npx",
"args": ["-y", "@sidearmdrm/mcp"],
"env": {
"SDRM_API_KEY": "sk_live_..."
}
}
}
}
That's it. Your agent can now call Sidearm tools.
| Tool | Description |
|---|---|
list_algorithms | Browse available protection algorithms. Filter by category or media type. |
| Tool | Description |
|---|---|
run_algorithm | Run specific algorithms on media by ID. Returns a job for async processing. |
protect_media | Protect media with a preset level (standard/maximum). Auto-selects algorithms. |
extract_embeddings | Extract raw embedding vectors from media for downstream similarity search or ML pipelines. |
| Tool | Description |
|---|---|
check_job | Poll async job status. Returns progress and results when complete. |
| Tool | Description |
|---|---|
detect_ai | Detect whether media was AI-generated. Supports image, video, audio, text. |
detect_fingerprint | Check if media has been previously registered using fingerprint matching. |
detect_membership | Test whether your content was used to train a suspect AI model. |
| Tool | Description |
|---|---|
search_media | Search for similar media across your indexed library. |
list_searches | List previous searches on your account. |
| Tool | Description |
|---|---|
register_media | Register and index media with optional protection mode (register, search_ready, standard, maximum). |
list_media | List media assets in your library (paginated, filterable). |
get_media | Get details of a specific media asset including protection status and algorithms applied. |
update_media | Update media metadata (e.g., original URL). |
delete_media | Permanently delete a media asset and all associated data. |
| Tool | Description |
|---|---|
get_account | Get your account details — ID, name, email, credit balance, and plan info. |
get_rights | Get C2PA, IPTC, and rights information for a media asset. |
get_billing | View credit balance, usage breakdown, per-algorithm costs, and billing portal link. |
| Tool | Description |
|---|---|
get_provenance | Get the full provenance chain for an asset — algorithms, C2PA manifest, membership results. |
identify_media | Identify media by its embedded Sidearm fingerprint and extract its C2PA provenance chain. |
| Tool | Description |
|---|---|
create_share | Create a shareable link for a detection, search, or provenance result (starts private). |
get_share | Get a shared result by its share ID. |
publish_share | Make a shared result publicly accessible. |
| Tool | Description |
|---|---|
list_deletions | List deletion records documenting permanently deleted assets. |
get_deletion | Get details of a specific deletion record including purged algorithms and storage status. |
| Tool | Description |
|---|---|
search_docs | Search the Sidearm API documentation. Returns relevant sections from the full developer reference. |
navigate_ui | Look up how to perform actions in the Sidearm dashboard. Returns step-by-step instructions. |
"Protect this image from AI training"
Agent calls
protect_mediawith the image URL, thencheck_jobto get the protected file.
"What algorithms are available for audio?"
Agent calls
list_algorithmswithmedia_type: "audio".
"Run Nightshade and Glaze on my artwork"
Agent calls
run_algorithmwithalgorithms: ["nightshade", "glaze"].
"Is this photo AI-generated?"
Agent calls
detect_aiwith the image, thencheck_jobfor results.
"Was my artwork used to train Stable Diffusion?"
Agent calls
detect_membershipwith your media IDs and the model name.
"How do I upload files in the dashboard?"
Agent calls
navigate_uiwithquery: "upload files"for step-by-step instructions.
| Variable | Required | Description |
|---|---|---|
SDRM_API_KEY | Yes | Your Sidearm API key (sk_live_... or sk_test_...) |
SDRM_BASE_URL | No | Override the API base URL (default: https://api.sdrm.io) |
git clone https://github.com/sidearmDRM/mcp-server.git
cd mcp-server
npm install
npm run build
Test locally with the MCP Inspector:
SDRM_API_KEY=sk_test_... npx @modelcontextprotocol/inspector node dist/index.js
MIT
FAQs
MCP server exposing Sidearm media protection tools — watermarking, AI detection, and similarity search for AI agents
The npm package @sidearmdrm/mcp receives a total of 513 weekly downloads. As such, @sidearmdrm/mcp popularity was classified as not popular.
We found that @sidearmdrm/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.