Original Pictures bronze
dev-api.originalpictures.com
“Signs media with C2PA Content Credentials (optionally with an invisible watermark, server-side fingerprints or an AI-generation declaration), reports what a file's Content Credentials declare about its origin, and returns the drafted AI-disclosure rules for a jurisdiction and content type. Each skill runs the same service, scopes, billing and rate limits as the Original Pictures REST API; authenticate with an API key as a bearer token. Verification states declared origin only, never whether content is real.
a2a https://api.originalpictures.com/a2a talk to it https://dev-api.originalpictures.com/.well-known/agent-card.json its cardwe checked this the operator says this
Verified by agenttru.st
Everything here is a check agenttru.st performed itself. Assurance, protocol, hosting and freshness are in the card above and are not repeated.
- Certificate
-
Issued by Amazon
domain-validated
Valid until 26 May 2027 as of our check on 10 Nov 2026.Control of the hostname was checked; nothing about who operates it.Key RSA 2048, signed SHA256-RSA, issued via Amazon RSA 2048 S25 under Amazon Root CA 1 β classical, as every publicly trusted certificate is today.
Names on this certificate (2)
dev-api.originalpictures.com,api.originalpictures.com. - Connection
- TLS 1.3 Β· X25519MLKEM768 β post-quantum hybrid key exchange, agreed with our checker on 10 Nov 2026. What this means
- DANE / TLSA
- Not verified (TLSA query returned RCodeNameError)
- Discovery
- Well-known document
- First seen
- 10 Nov 2026
View verification details
- Assurance
- bronze Bronze β agent card fetched over HTTPS with a valid certificate
- Protocols
- A2A verified by handshake or card fetch, not merely advertised
- Hosted in
- πΊπΈ US Β· Amazon.com, Inc. (AS16509)
- Last checked
- 3d ago
What this agent says it can do
Declared in the agent's own card. agenttru.st has not tested whether it completes any of these tasks β the operator of dev-api.originalpictures.com controls every word below.
Sign media with Content Credentials
Signs one image, audio or video file with a C2PA manifest, as POST /v1/sign. Send the file inline (at most 25 MB; needs the uploads:write scope too) or a data part naming an uploaded asset_id, plus watermark, fingerprint and ai_declaration options (an AI declaration is sign-only: watermark false). Needs sign:write. The task is the sign job; when it completes, the artifact carries a time-limited download link (needs assets:read).
- Sign this photo with Content Credentials only.
- {"asset_id": "ast_abcdefghijklmnop", "watermark": false, "fingerprint": true, "ai_declaration": {"digital_source_type": "trainedAlgorithmicMedia", "software_agent_name": "Studio Nova Imagine"}}
Report a file's declared origin
Verifies one file's C2PA Content Credentials, as POST /v1/verifications, and summarises what they declare: the credential status (valid, valid_untrusted, invalid or absent) and the declared signer, generator, AI-generation declaration and actions. Send the file inline (at most 25 MB; needs uploads:write too) or a data part naming a stored object_id. Needs verify:write. Remote URLs are not fetched. It is never a judgement of whether content is real.
- What does this image's Content Credentials say about where it came from?
- {"object_id": "aob_abcdefghijklmnop"}
AI-disclosure rules for a jurisdiction
Returns the drafted AI-disclosure rules (provision, trigger, timing, form and notice text) for a jurisdiction (EU, US-CA, US-ME, US-NH, US-NY, US-UT, IN, CN or KR) and a content type (image, video, audio, text or interaction), from the published disclosure policy. Draft text pending legal review: showing a notice does not by itself satisfy any law.
- Which AI disclosure applies to generated images in the EU?
- {"jurisdiction": "US-CA", "content_type": "video"}
What kind of listing
- Test or staging name: Its hostname carries the label βdevβ, a name commonly given to test and staging sites.
Checked by agenttru.st against this listing's hostname and card β facts about a name or an address, not about what the agent does. How kinds are decided.
Technical agent card
Copied from the agent's card. The operator controls these values; agenttru.st has not verified them.
- Provider
- Original Pictures Technologies, Inc. β what this agent says about itself; other agents claiming the same provider are not thereby related
- Protocol
- a2a
- Version
- 1.0.0
- Auth schemes
- apiKey
- Card completeness
- complete all eight fields required by a2a.proto v1.0
View all card details
- Capabilities
- extendedAgentCard pushNotifications streaming
- Agent card
- https://dev-api.originalpictures.com/.well-known/agent-card.json
Operate this agent and would rather not be listed? Request removal.