
Sidearm
- Updated March 11, 2026
- sidearmDRM/mcp-server
Sidearm is an MCP server that helps protect media from AI training, detect AI-generated content, and find stolen creative work via Sidearm DRM APIs.
About
Sidearm is a Model Context Protocol server from Sidearm DRM that connects agents to services for protecting creative media from AI training misuse, spotting AI-generated content, and investigating stolen work. developers who ship illustrations, photography, UI mockups, or course media face growing risk that assets are scraped for training or impersonated online; this MCP wraps those checks into agent-callable tools instead of a separate dashboard-only workflow. Install @sidearmdrm/mcp over stdio; set SDRM_API_KEY when you need live API calls (sk_live_ or sk_test_), while documentation-oriented tools can run keyless for exploration. Override SDRM_BASE_URL only if you target a non-default API host. It complements legal pages and watermarking—it does not replace copyright enforcement—but fits a security pass before launch. Version 0.9.2 is declared in the server schema.
- Tools to protect media from being used in AI model training
- Detection signals for AI-generated content in your pipeline
- Capabilities to help find stolen or republished creative work
- npm package @sidearmdrm/mcp with stdio MCP transport
- Optional SDRM_API_KEY; documentation tools work without a key
Sidearm by the numbers
- Data as of Jul 7, 2026 (Skillselion catalog sync)
claude mcp add --env SDRM_API_KEY=YOUR_SDRM_API_KEY --env SDRM_BASE_URL=YOUR_SDRM_BASE_URL sidearm -- npx -y @sidearmdrm/mcpAdd your badge
Show developers this MCP server is listed on Skillselion. Paste this into your README.
| Package | @sidearmdrm/mcp |
|---|---|
| Transport | STDIO |
| Auth | Required |
| Last updated | March 11, 2026 |
| Repository | sidearmDRM/mcp-server ↗ |
What it does
Guard photos and media from unauthorized AI training, flag synthetic media, and trace misuse before you ship creative assets.
Who is it for?
Best when you're shipping original media and want agent-driven rights and authenticity checks in the release checklist.
Skip if: Pure code-only SaaS with no media surface, or teams that only need generic secret scanning.
What you get
Your agent can run Sidearm DRM checks and lookups through MCP before and after release, with optional API-key-backed live calls.
- Agent-invokable media protection and monitoring actions
- Documented Sidearm API workflows inside the agent session
- Configurable connection to api.sdrm.io (or custom SDRM_BASE_URL)
By the numbers
- Server version 0.9.2
- Package: @sidearmdrm/mcp (npm, stdio)
- Default API base: https://api.sdrm.io
README.md
@sidearmdrm/mcp
MCP server for the Sidearm API — protect media from AI training, detect AI-generated content, and search for stolen work.
This package exposes the Sidearm REST API as Model Context Protocol (MCP) tools that AI agents (Cursor, Claude Desktop, Windsurf, etc.) can call directly.
Quick Start
1. Get an API key
Sign up at sdrm.io and create an API key at sdrm.io/api-keys.
2. Configure your agent
Add to your MCP configuration file:
Cursor (.cursor/mcp.json):
{
"mcpServers": {
"sdrm": {
"command": "npx",
"args": ["-y", "@sidearmdrm/mcp"],
"env": {
"SDRM_API_KEY": "sk_live_..."
}
}
}
}
Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"sdrm": {
"command": "npx",
"args": ["-y", "@sidearmdrm/mcp"],
"env": {
"SDRM_API_KEY": "sk_live_..."
}
}
}
}
Windsurf (~/.codeium/windsurf/mcp_config.json):
{
"mcpServers": {
"sdrm": {
"command": "npx",
"args": ["-y", "@sidearmdrm/mcp"],
"env": {
"SDRM_API_KEY": "sk_live_..."
}
}
}
}
That's it. Your agent can now call Sidearm tools.
Tools (27)
Discovery
| Tool | Description |
|---|---|
list_algorithms |
Browse available protection algorithms. Filter by category or media type. |
Protection & Extraction
| Tool | Description |
|---|---|
run_algorithm |
Run specific algorithms on media by ID. Returns a job for async processing. |
protect_media |
Protect media with a preset level (standard/maximum). Auto-selects algorithms. |
extract_embeddings |
Extract raw embedding vectors from media for downstream similarity search or ML pipelines. |
Jobs
| Tool | Description |
|---|---|
check_job |
Poll async job status. Returns progress and results when complete. |
Detection
| Tool | Description |
|---|---|
detect_ai |
Detect whether media was AI-generated. Supports image, video, audio, text. |
detect_fingerprint |
Check if media has been previously registered using fingerprint matching. |
detect_membership |
Test whether your content was used to train a suspect AI model. |
Search
| Tool | Description |
|---|---|
search_media |
Search for similar media across your indexed library. |
list_searches |
List previous searches on your account. |
Media Management
| Tool | Description |
|---|---|
register_media |
Register and index media with optional protection mode (register, search_ready, standard, maximum). |
list_media |
List media assets in your library (paginated, filterable). |
get_media |
Get details of a specific media asset including protection status and algorithms applied. |
update_media |
Update media metadata (e.g., original URL). |
delete_media |
Permanently delete a media asset and all associated data. |
Account, Rights & Billing
| Tool | Description |
|---|---|
get_account |
Get your account details — ID, name, email, credit balance, and plan info. |
get_rights |
Get C2PA, IPTC, and rights information for a media asset. |
get_billing |
View credit balance, usage breakdown, per-algorithm costs, and billing portal link. |
Provenance & Identification
| Tool | Description |
|---|---|
get_provenance |
Get the full provenance chain for an asset — algorithms, C2PA manifest, membership results. |
identify_media |
Identify media by its embedded Sidearm fingerprint and extract its C2PA provenance chain. |
Shares
| Tool | Description |
|---|---|
create_share |
Create a shareable link for a detection, search, or provenance result (starts private). |
get_share |
Get a shared result by its share ID. |
publish_share |
Make a shared result publicly accessible. |
Deletion Records
| Tool | Description |
|---|---|
list_deletions |
List deletion records documenting permanently deleted assets. |
get_deletion |
Get details of a specific deletion record including purged algorithms and storage status. |
Documentation
| Tool | Description |
|---|---|
search_docs |
Search the Sidearm API documentation. Returns relevant sections from the full developer reference. |
navigate_ui |
Look up how to perform actions in the Sidearm dashboard. Returns step-by-step instructions. |
Example Agent Conversations
"Protect this image from AI training"
Agent calls
protect_mediawith the image URL, thencheck_jobto get the protected file.
"What algorithms are available for audio?"
Agent calls
list_algorithmswithmedia_type: "audio".
"Run Nightshade and Glaze on my artwork"
Agent calls
run_algorithmwithalgorithms: ["nightshade", "glaze"].
"Is this photo AI-generated?"
Agent calls
detect_aiwith the image, thencheck_jobfor results.
"Was my artwork used to train Stable Diffusion?"
Agent calls
detect_membershipwith your media IDs and the model name.
"How do I upload files in the dashboard?"
Agent calls
navigate_uiwithquery: "upload files"for step-by-step instructions.
Environment Variables
| Variable | Required | Description |
|---|---|---|
SDRM_API_KEY |
Yes | Your Sidearm API key (sk_live_... or sk_test_...) |
SDRM_BASE_URL |
No | Override the API base URL (default: https://api.sdrm.io) |
Development
git clone https://github.com/sidearmDRM/mcp-server.git
cd mcp-server
npm install
npm run build
Test locally with the MCP Inspector:
SDRM_API_KEY=sk_test_... npx @modelcontextprotocol/inspector node dist/index.js
License
MIT
Recommended MCP Servers
How it compares
Rights and media-integrity MCP integration, not a code vulnerability scanner or generic LLM guardrail skill.
FAQ
Who is Sidearm for?
Developers and creators who publish media and want MCP tools for AI-training protection, synthetic-media detection, and theft discovery.
When should I use Sidearm?
Use it in ship security review before launch and when investigating suspected copying or AI-generated impersonation of your assets.
How do I add Sidearm to my agent?
Add the npm @sidearmdrm/mcp stdio server to your MCP config, set SDRM_API_KEY for live API tools, and optionally SDRM_BASE_URL if not using https://api.sdrm.io.