C2PA Python library

The c2pa-python repository provides a Python library that can:

Read and validate C2PA manifest data from media files in supported formats.
Create and sign manifest data, and attach it to media files in supported formats.

Features:

Create and sign C2PA manifests using various signing algorithms.
Verify C2PA manifests and extract metadata.
Add assertions and ingredients to assets.
Examples and unit tests to demonstrate usage.

For the best experience, read the docs on the CAI Open Source SDK documentation website.

If you want to view the documentation in GitHub, see:

Using the Python library
Supported formats
Configuring the SDK using Context and Settings
Using Builder intents to ensure spec-compliant manifests
Using working stores and archives
Selectively constructing manifests by filtering actions and ingredients
Diagram of public classes in the Python library and their relationships
Release notes

Prerequisites

This library requires Python version 3.10+.

Package installation

Install the c2pa-python package from PyPI by running:

pip install c2pa-python

To use the module in Python code, import the module like this:

import c2pa

Building from local c2pa-rs sources

Using a virtual environment with local builds

The make targets honor an active virtualenv. Create a virtual environment ./.venv and activate it before running them so commands use the project interpreter rather than the global Python interpreter:

make create-venv && source .venv/bin/activate

Build steps

By default the build downloads a prebuilt native library from a c2pa-rs release. To test the Python bindings against a local, unreleased c2pa-rs checkout, you can instead build the native library from source.

Prerequisites:

A local clone of c2pa-rs.
The Rust toolchain (cargo on your PATH).

Point C2PA_RS_PATH at your c2pa-rs checkout and run the build-from-source target:

export C2PA_RS_PATH=/path/to/c2pa-rs
make build-from-source C2PA_RS_PATH=$C2PA_RS_PATH

This does a clean build of the c2pa-c-ffi crate (with the file_io feature, which the Python wrapper requires), stages the resulting library under both artifacts/ and src/c2pa/libs/, and installs the package in editable mode, replacing any prebuilt artifacts from make download-native-artifacts. By default, the build uses the release profile; to build the debug profile instead, pass EXTRA_BUILD_ARGS="--debug":

make build-from-source C2PA_RS_PATH=$C2PA_RS_PATH EXTRA_BUILD_ARGS="--debug"

Note on targets for macOS

On macOS this produces a universal (arm64+x86_64) library by default, which requires both Rust targets:

rustup target add aarch64-apple-darwin x86_64-apple-darwin

To build a single-architecture library instead, set C2PA_LIBS_PLATFORM to a specific platform (for example aarch64-apple-darwin).

Examples

See the examples directory for some helpful examples:

examples/read.py shows how to read and verify an asset with a C2PA manifest.
examples/sign.py shows how to sign and verify an asset with a C2PA manifest.
examples/training.py demonstrates how to add a "Do Not Train" assertion to an asset and verify it.

API reference documentation

Documentation is published at github.io/c2pa-python/api/c2pa.

To build documentation locally, refer to this section in Contributing to the project.

Contributing

Contributions are welcome! For more information, see Contributing to the project.

License

This project is licensed under the Apache License 2.0 and the MIT License. See the LICENSE-MIT and LICENSE-APACHE files for details.

Operating System
Programming Language
- Python :: 3

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

c2pa_python-0.37.4.tar.gz (112.9 kB view details)

Uploaded Aug 4, 2026 Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

c2pa_python-0.37.4-py3-none-win_arm64.whl (84.0 MB view details)

Uploaded Aug 4, 2026 Python 3Windows ARM64

c2pa_python-0.37.4-py3-none-win_amd64.whl (86.3 MB view details)

Uploaded Aug 4, 2026 Python 3Windows x86-64

c2pa_python-0.37.4-py3-none-manylinux_2_28_x86_64.whl (14.6 MB view details)

Uploaded Aug 4, 2026 Python 3manylinux: glibc 2.28+ x86-64

c2pa_python-0.37.4-py3-none-manylinux_2_28_aarch64.whl (14.0 MB view details)

Uploaded Aug 4, 2026 Python 3manylinux: glibc 2.28+ ARM64

c2pa_python-0.37.4-py3-none-macosx_11_0_arm64.whl (13.8 MB view details)

Uploaded Aug 4, 2026 Python 3macOS 11.0+ ARM64

c2pa_python-0.37.4-py3-none-macosx_10_9_x86_64.whl (14.1 MB view details)

Uploaded Aug 4, 2026 Python 3macOS 10.9+ x86-64

c2pa_python-0.37.4-py3-none-macosx_10_9_universal2.whl (16.2 MB view details)

Uploaded Aug 4, 2026 Python 3macOS 10.9+ universal2 (ARM64, x86-64)

File details

Details for the file c2pa_python-0.37.4.tar.gz.

File metadata

Download URL: c2pa_python-0.37.4.tar.gz
Upload date: Aug 4, 2026
Size: 112.9 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for c2pa_python-0.37.4.tar.gz
Algorithm	Hash digest
SHA256	`6aebfe6f669077d0662dcd9ad3612c40baf888ae22d2f4866d383a9f7dd46aee`
MD5	`aa2b4accc645ec1e956e54ca06f9dfdc`
BLAKE2b-256	`456c0e28502553bc32dc98f38a5415e20fa444e15e19ee7d17c8992cc8b23a28`

See more details on using hashes here.

Provenance

The following attestation bundles were made for c2pa_python-0.37.4.tar.gz:

Publisher: build.yml on contentauth/c2pa-python

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: c2pa_python-0.37.4.tar.gz
- Subject digest: 6aebfe6f669077d0662dcd9ad3612c40baf888ae22d2f4866d383a9f7dd46aee
- Sigstore transparency entry: 2341447122
- Sigstore integration time: Aug 4, 2026
Source repository:
- Permalink: contentauth/c2pa-python@ea17c8778be9cbb24369ba339a234f91bb296524
- Branch / Tag: refs/tags/v0.37.4
- Owner: https://github.com/contentauth
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: build.yml@ea17c8778be9cbb24369ba339a234f91bb296524
- Trigger Event: push

File details

Details for the file c2pa_python-0.37.4-py3-none-win_arm64.whl.

File metadata

Download URL: c2pa_python-0.37.4-py3-none-win_arm64.whl
Upload date: Aug 4, 2026
Size: 84.0 MB
Tags: Python 3, Windows ARM64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for c2pa_python-0.37.4-py3-none-win_arm64.whl
Algorithm	Hash digest
SHA256	`e183af9a6d511352cc427bed22611ea1b9dd1dd13620ec5555fb6c12643e6779`
MD5	`4ea4764422ea54d1536ae5bc0b09fcb4`
BLAKE2b-256	`19b6f933ea182270f8285c66181a420a8fbcfa8a83ba590f265dd5dc864e3c26`

See more details on using hashes here.

Provenance

The following attestation bundles were made for c2pa_python-0.37.4-py3-none-win_arm64.whl:

Publisher: build.yml on contentauth/c2pa-python

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: c2pa_python-0.37.4-py3-none-win_arm64.whl
- Subject digest: e183af9a6d511352cc427bed22611ea1b9dd1dd13620ec5555fb6c12643e6779
- Sigstore transparency entry: 2341447169
- Sigstore integration time: Aug 4, 2026
Source repository:
- Permalink: contentauth/c2pa-python@ea17c8778be9cbb24369ba339a234f91bb296524
- Branch / Tag: refs/tags/v0.37.4
- Owner: https://github.com/contentauth
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: build.yml@ea17c8778be9cbb24369ba339a234f91bb296524
- Trigger Event: push

File details

Details for the file c2pa_python-0.37.4-py3-none-win_amd64.whl.

File metadata

Download URL: c2pa_python-0.37.4-py3-none-win_amd64.whl
Upload date: Aug 4, 2026
Size: 86.3 MB
Tags: Python 3, Windows x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for c2pa_python-0.37.4-py3-none-win_amd64.whl
Algorithm	Hash digest
SHA256	`4133e8e99059eeb8be0023fcb01aea17a588fe23911458813d6dc451d6eff712`
MD5	`64f9a2b3c62fbf5cff314a9e315fb95a`
BLAKE2b-256	`56ef575cfa3f60be714056fa1e6118375b92dbc252c3a63e0d37893a521f62e5`

See more details on using hashes here.

Provenance

The following attestation bundles were made for c2pa_python-0.37.4-py3-none-win_amd64.whl:

Publisher: build.yml on contentauth/c2pa-python

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: c2pa_python-0.37.4-py3-none-win_amd64.whl
- Subject digest: 4133e8e99059eeb8be0023fcb01aea17a588fe23911458813d6dc451d6eff712
- Sigstore transparency entry: 2341447142
- Sigstore integration time: Aug 4, 2026
Source repository:
- Permalink: contentauth/c2pa-python@ea17c8778be9cbb24369ba339a234f91bb296524
- Branch / Tag: refs/tags/v0.37.4
- Owner: https://github.com/contentauth
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: build.yml@ea17c8778be9cbb24369ba339a234f91bb296524
- Trigger Event: push

File details

Details for the file c2pa_python-0.37.4-py3-none-manylinux_2_28_x86_64.whl.

File metadata

Download URL: c2pa_python-0.37.4-py3-none-manylinux_2_28_x86_64.whl
Upload date: Aug 4, 2026
Size: 14.6 MB
Tags: Python 3, manylinux: glibc 2.28+ x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for c2pa_python-0.37.4-py3-none-manylinux_2_28_x86_64.whl
Algorithm	Hash digest
SHA256	`8e2b1b214ea4e885178e1bd6c330d2c4c0c0d3aaa9cdb3bc28f7e7a7144ee5c0`
MD5	`275ac22036612bde4576f44d14d82348`
BLAKE2b-256	`7972be5e4db496a4c52134970ffcd14bd557c7c25c6b9fa6f55166c08776a80f`

See more details on using hashes here.

Provenance

The following attestation bundles were made for c2pa_python-0.37.4-py3-none-manylinux_2_28_x86_64.whl:

Publisher: build.yml on contentauth/c2pa-python

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: c2pa_python-0.37.4-py3-none-manylinux_2_28_x86_64.whl
- Subject digest: 8e2b1b214ea4e885178e1bd6c330d2c4c0c0d3aaa9cdb3bc28f7e7a7144ee5c0
- Sigstore transparency entry: 2341447138
- Sigstore integration time: Aug 4, 2026
Source repository:
- Permalink: contentauth/c2pa-python@ea17c8778be9cbb24369ba339a234f91bb296524
- Branch / Tag: refs/tags/v0.37.4
- Owner: https://github.com/contentauth
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: build.yml@ea17c8778be9cbb24369ba339a234f91bb296524
- Trigger Event: push

File details

Details for the file c2pa_python-0.37.4-py3-none-manylinux_2_28_aarch64.whl.

File metadata

Download URL: c2pa_python-0.37.4-py3-none-manylinux_2_28_aarch64.whl
Upload date: Aug 4, 2026
Size: 14.0 MB
Tags: Python 3, manylinux: glibc 2.28+ ARM64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for c2pa_python-0.37.4-py3-none-manylinux_2_28_aarch64.whl
Algorithm	Hash digest
SHA256	`baa39c2befedcb1c45c0cb439a3b2b4f0c428ab3126e56c02b59a2e3700212f9`
MD5	`30e0062f9fc2643a57027a0db9782c39`
BLAKE2b-256	`73f24ba5294e9f32d97bb79ae8ea6ca0c9401c36e4e783fef3dcf1ebe6099830`

See more details on using hashes here.

Provenance

The following attestation bundles were made for c2pa_python-0.37.4-py3-none-manylinux_2_28_aarch64.whl:

Publisher: build.yml on contentauth/c2pa-python

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: c2pa_python-0.37.4-py3-none-manylinux_2_28_aarch64.whl
- Subject digest: baa39c2befedcb1c45c0cb439a3b2b4f0c428ab3126e56c02b59a2e3700212f9
- Sigstore transparency entry: 2341447198
- Sigstore integration time: Aug 4, 2026
Source repository:
- Permalink: contentauth/c2pa-python@ea17c8778be9cbb24369ba339a234f91bb296524
- Branch / Tag: refs/tags/v0.37.4
- Owner: https://github.com/contentauth
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: build.yml@ea17c8778be9cbb24369ba339a234f91bb296524
- Trigger Event: push

File details

Details for the file c2pa_python-0.37.4-py3-none-macosx_11_0_arm64.whl.

File metadata

Download URL: c2pa_python-0.37.4-py3-none-macosx_11_0_arm64.whl
Upload date: Aug 4, 2026
Size: 13.8 MB
Tags: Python 3, macOS 11.0+ ARM64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for c2pa_python-0.37.4-py3-none-macosx_11_0_arm64.whl
Algorithm	Hash digest
SHA256	`243260fdd577549185175daaf9fdb4f30c8e940aaaf555b34c3579c6b4549c6c`
MD5	`748f359cb5edb2c59705dd4c38ed89d5`
BLAKE2b-256	`a7797f9c670d644eb1681cf304fc22d5b31ea26cf9b9bece37a2ca4b1c5cd624`

See more details on using hashes here.

Provenance

The following attestation bundles were made for c2pa_python-0.37.4-py3-none-macosx_11_0_arm64.whl:

Publisher: build.yml on contentauth/c2pa-python

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: c2pa_python-0.37.4-py3-none-macosx_11_0_arm64.whl
- Subject digest: 243260fdd577549185175daaf9fdb4f30c8e940aaaf555b34c3579c6b4549c6c
- Sigstore transparency entry: 2341447179
- Sigstore integration time: Aug 4, 2026
Source repository:
- Permalink: contentauth/c2pa-python@ea17c8778be9cbb24369ba339a234f91bb296524
- Branch / Tag: refs/tags/v0.37.4
- Owner: https://github.com/contentauth
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: build.yml@ea17c8778be9cbb24369ba339a234f91bb296524
- Trigger Event: push

File details

Details for the file c2pa_python-0.37.4-py3-none-macosx_10_9_x86_64.whl.

File metadata

Download URL: c2pa_python-0.37.4-py3-none-macosx_10_9_x86_64.whl
Upload date: Aug 4, 2026
Size: 14.1 MB
Tags: Python 3, macOS 10.9+ x86-64
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for c2pa_python-0.37.4-py3-none-macosx_10_9_x86_64.whl
Algorithm	Hash digest
SHA256	`839123d8854802848695ce24c7dd56661be56fbb815818de19f0d6a6d8d2bc16`
MD5	`4610047b8e270240c4545aff46c4eb57`
BLAKE2b-256	`d222199a897c0b526fec6c109c947db6c2010da70b782841e9a3f6c72af026de`

See more details on using hashes here.

Provenance

The following attestation bundles were made for c2pa_python-0.37.4-py3-none-macosx_10_9_x86_64.whl:

Publisher: build.yml on contentauth/c2pa-python

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: c2pa_python-0.37.4-py3-none-macosx_10_9_x86_64.whl
- Subject digest: 839123d8854802848695ce24c7dd56661be56fbb815818de19f0d6a6d8d2bc16
- Sigstore transparency entry: 2341447151
- Sigstore integration time: Aug 4, 2026
Source repository:
- Permalink: contentauth/c2pa-python@ea17c8778be9cbb24369ba339a234f91bb296524
- Branch / Tag: refs/tags/v0.37.4
- Owner: https://github.com/contentauth
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: build.yml@ea17c8778be9cbb24369ba339a234f91bb296524
- Trigger Event: push

File details

Details for the file c2pa_python-0.37.4-py3-none-macosx_10_9_universal2.whl.

File metadata

Download URL: c2pa_python-0.37.4-py3-none-macosx_10_9_universal2.whl
Upload date: Aug 4, 2026
Size: 16.2 MB
Tags: Python 3, macOS 10.9+ universal2 (ARM64, x86-64)
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for c2pa_python-0.37.4-py3-none-macosx_10_9_universal2.whl
Algorithm	Hash digest
SHA256	`d2814c7d9c2759a7dec6404779aead36104fe807886ecf6c6cbd2af26c2ab3f0`
MD5	`aabaeac83c902d09cf8c0a6b6eb7c783`
BLAKE2b-256	`44b63b8041a3d163168489d1458e63c56cb7a782d36298520f8eac83b7da928c`

See more details on using hashes here.

Provenance

The following attestation bundles were made for c2pa_python-0.37.4-py3-none-macosx_10_9_universal2.whl:

Publisher: build.yml on contentauth/c2pa-python

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: c2pa_python-0.37.4-py3-none-macosx_10_9_universal2.whl
- Subject digest: d2814c7d9c2759a7dec6404779aead36104fe807886ecf6c6cbd2af26c2ab3f0
- Sigstore transparency entry: 2341447154
- Sigstore integration time: Aug 4, 2026
Source repository:
- Permalink: contentauth/c2pa-python@ea17c8778be9cbb24369ba339a234f91bb296524
- Branch / Tag: refs/tags/v0.37.4
- Owner: https://github.com/contentauth
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: build.yml@ea17c8778be9cbb24369ba339a234f91bb296524
- Trigger Event: push

Release history Release notifications | RSS feed

0.37.6

Aug 10, 2026

0.37.5

Aug 5, 2026

This release

0.37.4

Aug 4, 2026

0.37.3

Aug 4, 2026

0.37.2

Jul 27, 2026

0.37.1

Jul 23, 2026

0.37.0

Jul 17, 2026

0.36.0

Jun 22, 2026

0.35.2

Jun 22, 2026

0.35.1

Jun 17, 2026

0.35.0

Jun 15, 2026

0.34.0

Jun 12, 2026

0.32.14

Jun 9, 2026

0.32.13

Jun 9, 2026

0.32.12

Jun 3, 2026

0.32.11

Jun 3, 2026

0.32.10

Jun 2, 2026

0.32.9

May 27, 2026

0.32.8

May 26, 2026

0.32.7

May 26, 2026

0.32.6

May 1, 2026

0.32.5

May 1, 2026

0.32.4

Apr 29, 2026

0.32.3

Apr 17, 2026

0.32.2

Apr 9, 2026

0.32.1

Apr 8, 2026

0.32.0

Apr 6, 2026

0.30.0

Mar 26, 2026

0.29.0

Mar 17, 2026

0.28.0

Jan 20, 2026

0.27.1

Oct 14, 2025

0.27.0

Oct 13, 2025

0.26.0

Oct 7, 2025

0.25.0

Oct 4, 2025

0.24.1

Oct 3, 2025

0.24.0

Oct 2, 2025

0.23.1

Sep 24, 2025

0.23.0

Sep 19, 2025

0.22.0

Sep 16, 2025

0.21.0

Sep 10, 2025

0.20.0

Sep 3, 2025

0.19.0

Sep 3, 2025

0.18.0

Aug 29, 2025

0.17.0

Aug 29, 2025

0.16.0

Aug 28, 2025

0.15.0

Aug 28, 2025

0.14.0

Aug 27, 2025

0.13.0

Aug 25, 2025

0.12.1

Aug 21, 2025

0.12.0

Jun 26, 2025

0.11.1

Jun 20, 2025

0.11.0

Jun 18, 2025

0.10.0

Jun 16, 2025

0.9.0

May 9, 2025

0.8.3 yanked

Apr 27, 2025

Reason this release was yanked:

This was an incomplete test. Please use 0.8.0

0.8.0

May 7, 2025

0.6.1

Nov 6, 2024

0.6.0

Oct 24, 2024

0.5.3

Oct 9, 2024

0.5.2

Sep 17, 2024

0.5.1

Aug 19, 2024

0.5.0

Jul 26, 2024

0.4.0

Jan 29, 2024

0.3.1

Dec 20, 2023

0.3.0

Dec 20, 2023

0.2.2

Oct 13, 2023

0.2.1

Oct 3, 2023

0.2.0

Oct 3, 2023

0.1.0

Sep 29, 2023

c2pa-python 0.37.4

C2PA Python library

Prerequisites

Package installation

Building from local c2pa-rs sources

Using a virtual environment with local builds

Build steps

Note on targets for macOS

Examples

API reference documentation

Contributing

License

Project links

Key dates

2 maintainers

Credits

GitHub Statistics

License

Requires

Classifiers

Download files

Source Distribution

Built Distributions

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

Release history Release notifications | RSS feed