Validate Content Credentials finding by finding.
Content Credentials are signed information that a camera, editor, or other tool can attach to a file. ChaosMark validates those credentials on supported files and reports its findings, finding by finding. It does not create or sign Content Credentials.
ChaosMark is a C2PA Conformant Validator Product. ChaosMark’s C2PA Conformant Validator Product is listed under record 01a06d52-857e-72da-9ef7-709193669393. Use hosted validation to check seven media formats and download a report that identifies its validator build. The program listing and the exact technical scope follow below.
Two ways to use it.
Free Verify shows whether a file carries Content Credentials. Paid C2PA validation checks the signature, the bindings and trust, and returns a full report.
Free Verify: is a credential there?
Upload a file in the browser. Free Verify looks for Content Credentials and answers present — not evaluated, none detected when it read the whole file, or not checked when it could read only part of it. It also reports whether the file exactly matches a supported ChaosMark record. It is a fast presence check, not the full validator evaluation: it does not validate a signature, a binding, or trust.
Review every manifest finding.
Hosted validation evaluates the manifest and reports each finding separately: the signature, bindings to the file bytes, trust-list status, manifest and ingredients. The crJSON report names the validator and version that produced it. Paid customers can upload all seven supported formats from their account without an API key; developers use the same validation and billing pipeline through the API.
Compare formats · Subscribe and validate · API reference · Explore Enterprise
What you can do with each format today.
Recorded validate scope: JPEG, PNG, WebP, MP4, MP3, WAV, M4A.
Hosted paid availability: JPEG, PNG, WebP, MP3, WAV, M4A and MP4.
Customer paths: browser upload from a paid account, or the developer API.
The listed product's recorded scope covers seven formats. What you can use today depends on where you run the check. Free Verify uploads your file to our server, which looks for Content Credentials; it does not validate them.
| Format | In the listed product's recorded scope | Presence check at /verify | Hosted validation plan |
|---|---|---|---|
| JPEG | Yes | Yes | Browser or API · files up to 16 MiB · 2 Evidence Units per completed validation |
| PNG | Yes | Yes | Browser or API · files up to 1 MiB · 2 Evidence Units per completed validation |
| WebP | Yes | Paid validation | Browser or API · files up to 16 MiB · 2 Evidence Units per completed validation |
| MP3 | Yes | Paid validation | Browser or API · files up to 16 MiB · 2 Evidence Units per completed validation |
| WAV | Yes | Paid validation | Browser or API · files up to 16 MiB · 2 Evidence Units per completed validation |
| M4A | Yes | Paid validation | Browser or API · files up to 16 MiB · 2 Evidence Units per completed validation |
| MP4 | Yes | Paid validation | Browser or API · files up to 16 MiB · 2 Evidence Units per completed validation. |
Free Verify checks JPG and PNG photos up to 1 MB for credential presence and supported ChaosMark records. Paid validation evaluates signatures, file bindings, manifests and trust findings across all seven formats, through the browser or API.
Hosted limits: PNG files up to 1 MiB. JPEG, WebP, MP3 and WAV files up to 16 MiB. M4A and MP4 files up to 16 MiB; each must be single-file and non-fragmented.
Reports and usage: 2 Evidence Units per completed report. Rejected files use none, there is no overage, and account reports have a published limited recovery window.
Pricing and purchase disclosures are offered in seven languages. Account recovery, uploads and report screens are currently in English.
Outside the seven formats. Live video is not in the listed product's recorded scope, and no ChaosMark product checks it. No other format is in the recorded scope.
01a06d52-857e-72da-9ef7-709193669393It is not a Generator Product claim, certification, approval, endorsement, legal or regulatory compliance claim, or a claim about truth, authenticity, ownership, authorization, or media and functions outside the recorded scope. The listing names the evaluated product; it does not attach to the changed bytes of the successor build that hosted validation uses.
Why Content Credentials matter, beyond the rules.
Content Credentials are useful beyond any regulation: they help build trust with audiences and partners, spot edited files and missing credentials, keep supply chains auditable, and carry licensing and attribution with the work.
Trust with audiences and partners
Show where a file came from and how it was made, in a form anyone can check for themselves.
Spot edits and missing credentials
Validation shows when a file's bytes no longer match its credential, and a file that arrives without the credentials you expect is easy to flag.
Auditable supply chains
Credentials can record ingredients and edits along the way, so a production or partner pipeline can be checked step by step.
Licensing and attribution
Creator and licensing information can travel with the work, so partners can read what the credential states.
ChaosMark provides independently checkable digital evidence, not guarantees of content truth.
Validation reports findings.
A validator can evaluate a manifest’s cryptographic validity, trust-list status, ingredients, bindings, and asserted provenance. Those findings stay distinct.
Validation does not decide reality.
A valid signature does not establish that a depicted event happened, that an assertion is true, or that an action was authorized.