> ## Documentation Index > Fetch the complete documentation index at: https://docs.zebratruth.ai/llms.txt > Use this file to discover all available pages before exploring further. # Inspect Content Credentials on an image or video > Reads the C2PA manifest on an asset and reports whether it is present, valid and signed by a trusted signer, together with a SHA-256 of the bytes and a distribution durability assessment. Send the file as multipart, or a JSON body with a URL. Synchronous. Credits are reserved before any fetch and committed on success. Requires the `provenance:inspect` key scope. ## OpenAPI ````yaml /openapi/zebratruth-v1.yaml post /media/provenance/inspect openapi: 3.1.0 info: title: ZebraTruth Compliance API version: 1.0.0 description: > AI-powered compliance checking for advertising content. Check text and images against jurisdiction laws, platform policies, and rights clearance requirements. Results include embeddable annotations mapped to content locations (text spans, video timestamps, image regions). contact: name: ZebraTruth Support email: support@zebratruth.ai url: https://developers.zebratruth.ai license: name: MIT url: https://opensource.org/licenses/MIT servers: - url: https://api.zebratruth.ai/v1 description: Production security: - bearerAuth: [] tags: - name: Video Compliance description: > **Primary endpoint.** Async compliance analysis for video ads. 3-step flow: get an upload URL, upload the video bytes, submit for analysis. Poll or receive an HMAC-signed webhook with the report. Returns timestamped findings citing stable evidence IDs (`audio_NNN`, `frame_NNN`, `ocr_NNN`, `signal_NNN`). 3-180 second videos. mp4 / webm / quicktime. Built for ad agencies and creators. - name: Authentication description: Validate API keys and check account status - name: Compliance description: >- Run compliance checks on text + image content (sync). For video, use the Video Compliance endpoints above. - name: Agents description: Discover and invoke individual compliance agents - name: Jobs description: Poll async job status and view execution traces - name: Reports description: Retrieve and replay compliance reports - name: Observability description: Request logs and webhook delivery status - name: Billing description: Subscriptions, plan changes, and credit balance - name: Documents description: Extract text from PDF and Word documents before or as part of a check - name: Check History description: List and retrieve past compliance checks for the workspace - name: Provenance description: Inspect and sign Content Credentials (C2PA) on images and video - name: Corpus description: >- Review queue for proposed changes to the governed legal corpus (dashboard session) - name: Webhooks description: Saved webhook endpoints (dashboard session) and delivery logs paths: /media/provenance/inspect: post: tags: - Provenance summary: Inspect Content Credentials on an image or video description: > Reads the C2PA manifest on an asset and reports whether it is present, valid and signed by a trusted signer, together with a SHA-256 of the bytes and a distribution durability assessment. Send the file as multipart, or a JSON body with a URL. Synchronous. Credits are reserved before any fetch and committed on success. Requires the `provenance:inspect` key scope. operationId: inspectProvenance parameters: - name: Idempotency-Key in: header required: false schema: type: string requestBody: required: true content: multipart/form-data: schema: $ref: '#/components/schemas/ProvenanceInspectMultipartRequest' application/json: schema: $ref: '#/components/schemas/ProvenanceInspectUrlRequest' responses: '200': description: Inspection result content: application/json: schema: $ref: '#/components/schemas/ProvenanceInspectResponse' '400': description: >- `data.code`: `file_part_missing`, `invalid_request`, `url_not_permitted`, `too_many_redirects`, `fetch_failed`. content: application/json: schema: $ref: '#/components/schemas/CodedError' '401': $ref: '#/components/responses/Unauthorized' '402': $ref: '#/components/responses/InsufficientCredits' '413': $ref: '#/components/responses/PayloadTooLarge' '415': $ref: '#/components/responses/UnsupportedMediaType' '429': $ref: '#/components/responses/RateLimited' components: schemas: ProvenanceInspectMultipartRequest: type: object required: - file properties: file: type: string format: binary description: An `image/*` (up to 20 MB) or `video/*` (up to 64 MB) file. ProvenanceInspectUrlRequest: type: object required: - url properties: url: type: string format: uri description: >- Publicly fetchable image or video URL. Redirects are followed to a limit. ProvenanceInspectResponse: type: object required: - requestId - inspectedAt - c2pa - durableAttribution - distributionDurability - asset - billing properties: requestId: type: string inspectedAt: type: string format: date-time c2pa: type: object properties: status: $ref: '#/components/schemas/C2paStatus' present: type: boolean valid: type: boolean trusted: type: boolean embedded: type: boolean nullable: true claimGenerator: type: string nullable: true title: type: string nullable: true assertions: type: array items: type: string trustVerification: $ref: '#/components/schemas/TrustVerificationInfo' inspectionError: type: string durableAttribution: type: object properties: sha256Original: type: string perceptualFingerprint: type: string nullable: true verificationUrl: type: string nullable: true visibleWatermark: type: string enum: - none invisibleWatermark: type: string enum: - not_supported distributionDurability: type: object properties: level: type: string enum: - fragile - medium - strong - unknown reason: type: string asset: type: object properties: kind: type: string enum: - image - video contentType: type: string byteSize: type: integer sourceUrl: type: string format: uri description: Present for URL input; the final URL after redirects. billing: $ref: '#/components/schemas/ProvenanceBilling' CodedError: type: object description: > Standard error envelope. `data.code` is the stable discriminator to branch on; `statusMessage` is the human-readable reason. Unless a response documents extra named fields, `data` is reduced to `{ code }` before it is sent. required: - statusCode - message properties: error: type: boolean example: true url: type: string format: uri statusCode: type: integer statusMessage: type: string message: type: string data: type: object required: - code properties: code: type: string example: review_scope_not_enabled additionalProperties: true C2paStatus: type: string enum: - present_trusted - present_untrusted - present_invalid - absent - unsupported - inspection_failed description: > `present_trusted`: a valid manifest signed by a trusted signer. `present_untrusted`: valid manifest, signer not on the trust list. `present_invalid`: a manifest is present but fails validation. `absent`: no manifest. `unsupported`: the format cannot carry one. `inspection_failed`: the inspection itself errored. TrustVerificationInfo: type: object properties: enabled: type: boolean source: type: string enum: - refreshed - pinned - unavailable version: type: string fetchedAt: type: string format: date-time anchorCount: type: integer signerVerdict: type: string enum: - trusted - untrusted - not_reported ProvenanceBilling: type: object properties: feature: type: string enum: - media.provenance.inspect - media.provenance.sign creditsCharged: type: number cached: type: boolean responses: Unauthorized: description: | Invalid, missing, or expired API key. Standard error envelope — read `message` for the human-readable reason. content: application/json: schema: type: object description: Standard error envelope. required: - statusCode - message properties: error: type: boolean example: true url: type: string format: uri example: https://api.zebratruth.ai/v1/whoami statusCode: type: integer example: 401 statusMessage: type: string example: Invalid API key message: type: string description: Canonical human-readable reason — pattern-match on this field. example: Invalid API key InsufficientCredits: description: > Not enough credits in the tenant's current period to process this request. Standard error envelope plus a `data` object with credit specifics and an upgrade URL. content: application/json: schema: type: object description: Standard error envelope with a `data` payload. required: - statusCode - message properties: error: type: boolean example: true url: type: string format: uri statusCode: type: integer example: 402 statusMessage: type: string example: Insufficient credits message: type: string example: Insufficient credits data: type: object description: >- Per-error context. On the wire this is reduced to `{ code }` plus, where documented, a small set of named fields. properties: creditsRemaining: type: number example: 3 creditsNeeded: type: number upgradeUrl: type: string format: uri example: https://developers.zebratruth.ai/dashboard/billing PayloadTooLarge: description: > The upload exceeds a limit. `data.code` is one of `document_too_large`, `document_too_many_pages`, `document_too_much_text`, `text_exceeds_tier_limit`, `payload_too_large` (provenance; also carries `limitBytes`), `video_upload_too_large`. content: application/json: schema: $ref: '#/components/schemas/CodedError' UnsupportedMediaType: description: > The file type is not accepted. `data.code` is one of `document_format_unsupported` (legacy `.doc`, unknown signature, or a filename that does not match the bytes), `document_encrypted`, `unknown_content_type`, `video_signing_unavailable`, `unsupported_container`. content: application/json: schema: $ref: '#/components/schemas/CodedError' RateLimited: description: | Per-tenant rate limit exceeded. Read the `Retry-After` header for the wait duration. Body is the standard error envelope plus a `data` object with limit context. headers: Retry-After: schema: type: integer description: Seconds to wait before retrying. content: application/json: schema: type: object description: Standard error envelope with a `data` payload. required: - statusCode - message properties: error: type: boolean example: true url: type: string format: uri statusCode: type: integer example: 429 statusMessage: type: string example: Rate limit exceeded message: type: string example: Rate limit exceeded data: type: object description: >- Per-error context. On the wire this is reduced to `{ code }` plus, where documented, a small set of named fields. properties: retryAfter: type: integer description: >- Mirrors the `Retry-After` header for clients that prefer body fields. example: 5 limit: type: integer description: Tenant's requests-per-minute cap. example: 60 remaining: type: integer description: Requests remaining in the current window. example: 0 securitySchemes: bearerAuth: type: http scheme: bearer description: | API key starting with `zt_live_` (production) or `zt_test_` (sandbox). Get your key at https://developers.zebratruth.ai ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.