Trufo

Open-source library to simplify interactions with the Trufo Provenance Service (TPS).

The library is currently in an alpha release state. Please be advised that until the library enters a beta release state, there may be drift in the library schema.

The Trufo Provenance Platform is under active beta development, with new provenance features and product workflows being added regularly. If you are building against the platform and have questions about the right integration path, please contact support@trufo.ai. We are happy to help.

Optional Provenance Engine

Note: Production usage of this feature is still pending C2PA Conformance Approval.

When using the standard C2PA Signing API, the raw digital media content is sent to the Trufo server for processing. In cases where data privacy is important or where the content file is large, a distributed API is available where most media processing is local (and signing is remote, on Trufo servers). To enable this functionality, please install the provenance extra:

pip install "trufo[provenance]"

Note: Currently, the provenance installation is only supported on Linux machines.

Workflow Examples (Quickstart)

There are a number of documents to get you started quickly with specific use cases:

Use case	Trufo Product	Quickstart
Auth Setup	—	docs/quickstart/0_auth.md
C2PA Signing Certificate CSRs	C2PA Signing Certificates	docs/quickstart/1_c2pa_cert.md
AI Labeling	C2PA & CAWG Signing API	docs/quickstart/2_ai_labeling.md
Organization Stamping & Assertions	C2PA & CAWG Signing API	docs/quickstart/3_cawg_publish.md
Distributed Signing	C2PA & CAWG Signing API	docs/quickstart/4_distributed_signing.md

Reference Documentation

The full reference documentation is spread across the following files:

Service	Document	Description
Auth	docs/api/api_auth.md	Headers, access tokens, sessions
TPS	docs/api/api_c2pa.md	C2PA signing endpoints
TCA	docs/api/tca_ca.md	Certificate Authority — enrollment, revocation, timestamping
TCA	docs/api/tca_ra.md	Registration Authority — instances, credentials, CSR JWTs
CLI	docs/cli.md	Credential management (dev tool; use the Python API in prod)

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

trufo-0.5.0.tar.gz (26.6 kB view details)

Uploaded Jul 21, 2026 Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

trufo-0.5.0-py3-none-any.whl (34.7 kB view details)

Uploaded Jul 21, 2026 Python 3

File details

Details for the file trufo-0.5.0.tar.gz.

File metadata

Download URL: trufo-0.5.0.tar.gz
Upload date: Jul 21, 2026
Size: 26.6 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/6.1.0 CPython/3.13.14

File hashes

Hashes for trufo-0.5.0.tar.gz
Algorithm	Hash digest
SHA256	`a9ac71916d2740b73dbca7fefcef655ab7a92cda0985c95e087bc98be97933ff`
MD5	`3a75b4b7e76cb37a952277a9eff616d6`
BLAKE2b-256	`2b32a5e870c5561f79a9c32d09f7ca38f087e7b312fdce50baae4192e69032cd`

See more details on using hashes here.

Provenance

The following attestation bundles were made for trufo-0.5.0.tar.gz:

Publisher: publish.yml on trufo-ai/trufo-py

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Statement:
- Statement type: https://in-toto.io/Statement/v1
- Predicate type: https://docs.pypi.org/attestations/publish/v1
- Subject name: trufo-0.5.0.tar.gz
- Subject digest: a9ac71916d2740b73dbca7fefcef655ab7a92cda0985c95e087bc98be97933ff
- Sigstore transparency entry: 2210689729
- Sigstore integration time: Jul 21, 2026
Source repository:
- Permalink: trufo-ai/trufo-py@1bf34f2f51b905bdbfa084050213ca35de37f0c6
- Branch / Tag: refs/tags/v0.5.0
- Owner: https://github.com/trufo-ai
- Access: public
Publication detail:
- Token Issuer: https://token.actions.githubusercontent.com
- Runner Environment: github-hosted
- Publication workflow: publish.yml@1bf34f2f51b905bdbfa084050213ca35de37f0c6
- Trigger Event: release