API Reference

Detect AI content, stamp provenance, and verify origin. REST API + Python SDK.

Overview

The 0byte API has three core endpoints:

Analyze — detect if content is AI-generated (neural classifier + metadata + registry lookup)
Stamp — create a cryptographic proof of origin when content is generated
Verify — check content against the proof registry

Base URL: https://api.0byte.tech

Authentication

Analyze and stamp requests require an API key:

Authorization: Bearer 0b_key_...

Verify, proof lookup, and transparency endpoints are public — no key needed.

Rate Limits

Tier	Limit	Scopes
Free	60 requests/min	analyze, stamp, verify
Dev	300 requests/min	analyze, stamp, verify
Pro	1,000 requests/min	analyze, stamp, verify

Python SDK

Install:

pip install 0byte

Analyze

from zerobyte import Client

client = Client(api_key="0b_key_...")

# Detect if an image is AI-generated
result = client.analyze(open("photo.png", "rb").read())
print(result.verdict)        # "ai_generated"
print(result.confidence)     # 0.94
print(result.ai_probability) # 0.97

Stamp

proof = client.stamp(
    content=image_bytes,
    content_type="image/png",
    provider="stability",
    model="sdxl-turbo",
)

print(proof.id)          # "0b_a1b2c3d4-..."
print(proof.fingerprint) # perceptual content hash
print(proof.verify_url)  # "https://0byte.tech/proof/0b_a1b2c3d4-..."

Verify

result = client.verify(
    content=some_image_bytes,
    content_type="image/png",
)

print(result.matched)     # True / False
print(result.confidence)  # 0.0 — 1.0
print(result.proof)       # original proof if matched

Look up a proof

proof = client.get_proof("0b_a1b2c3d4-...")

print(proof.provider)   # "stability"
print(proof.model)      # "sdxl-turbo"
print(proof.signature)  # Ed25519 signature

REST API

Analyze

POST /v1/analyze — Detect whether an image is AI-generated. Requires API key.

Runs the neural classifier, checks metadata for generation artifacts, and queries the proof registry. Returns a weighted verdict combining all three signals.

Request:

curl -X POST https://api.0byte.tech/v1/analyze \
  -H "Authorization: Bearer 0b_key_..." \
  -H "Content-Type: application/json" \
  -d '{
    "content": "<base64_encoded_image>",
    "content_type": "image/png"
  }'

content — base64-encoded image
content_type — MIME type (image/png, image/jpeg, image/webp)

Response (no registry match):

{
  "verdict": "ai_generated",
  "confidence": 0.94,
  "ai_probability": 0.97,
  "signals": [
    {
      "signal_type": "neural_classifier",
      "score": 0.97,
      "weight": 0.75,
      "details": {"model_version": "v1", "generator_hint": "stable_diffusion"}
    },
    {
      "signal_type": "metadata_analysis",
      "score": 0.85,
      "weight": 0.25,
      "details": {"has_exif": false, "has_xmp": false}
    }
  ],
  "registry_match": {
    "matched": false,
    "proof": null
  },
  "processing_time_ms": 142
}

Response (with registry match):

{
  "verdict": "ai_generated",
  "confidence": 0.99,
  "ai_probability": 0.97,
  "signals": [
    {"signal_type": "neural_classifier", "score": 0.97, "weight": 0.75, "details": {}},
    {"signal_type": "metadata_analysis", "score": 0.85, "weight": 0.25, "details": {}},
    {"signal_type": "registry_match", "score": 1.0, "weight": 0.40, "details": {}}
  ],
  "registry_match": {
    "matched": true,
    "proof": {
      "id": "0b_a1b2c3d4-...",
      "provider": "openai",
      "model": "dall-e-3",
      "timestamp": "2026-03-12T10:30:00Z",
      "signature": "base64_ed25519_signature...",
      "verify_url": "https://0byte.tech/proof/0b_a1b2c3d4-..."
    }
  },
  "processing_time_ms": 87
}

verdict — ai_generated, likely_real, or uncertain
confidence — 0.0 to 1.0, weighted across all signals
ai_probability — raw neural classifier output
signals — breakdown of each signal with score and weight
registry_match — proof data if the content was found in the registry

Health Check

GET /v1/health — Returns server status, public key, and index size. No auth.

Stamp

POST /v1/stamp — Create a proof of origin. Requires API key with stamp scope.

Request:

curl -X POST https://api.0byte.tech/v1/stamp \
  -H "Authorization: Bearer 0b_key_..." \
  -H "Content-Type: application/json" \
  -d '{
    "content": "<base64_encoded_media>",
    "content_type": "image/png",
    "provider": "openai",
    "model": "dall-e-3",
    "metadata": {"prompt_hash": "abc123"}
  }'

Response:

{
  "id": "0b_a1b2c3d4-...",
  "fingerprint": "f0e1d2c3b4a59687",
  "provider": "openai",
  "model": "dall-e-3",
  "content_type": "image/png",
  "timestamp": "2026-03-12T10:30:00Z",
  "signature": "base64_ed25519_signature...",
  "signing_key_id": "3e1b03b9",
  "verify_url": "https://0byte.tech/proof/0b_a1b2c3d4-...",
  "metadata": {"prompt_hash": "abc123"}
}

content — base64-encoded media (max 50MB)
content_type — MIME type (image/png, image/jpeg, video/mp4, audio/mp3)
provider — AI provider name (e.g. openai, stability)
model — model identifier (e.g. dall-e-3, sdxl-turbo)
metadata — optional JSON object stored with the proof

Verify

POST /v1/verify — Check content against the registry. No auth required.

Request:

curl -X POST https://api.0byte.tech/v1/verify \
  -H "Content-Type: application/json" \
  -d '{
    "content": "<base64_encoded_media>",
    "content_type": "image/png"
  }'

Response:

{
  "matched": true,
  "confidence": 0.95,
  "proof": {
    "id": "0b_a1b2c3d4-...",
    "fingerprint": "f0e1d2c3b4a59687",
    "provider": "openai",
    "model": "dall-e-3",
    "content_type": "image/png",
    "timestamp": "2026-03-12T10:30:00Z",
    "signature": "base64_ed25519_signature...",
    "signing_key_id": "3e1b03b9",
    "verify_url": "https://0byte.tech/proof/0b_a1b2c3d4-..."
  }
}

Uses perceptual fingerprinting — works after re-encoding, cropping, or screenshotting.

Get Proof

GET /v1/proofs/:id — Fetch a specific proof by ID. No auth.

Request:

curl https://api.0byte.tech/v1/proofs/0b_a1b2c3d4-...

Response:

{
  "id": "0b_a1b2c3d4-...",
  "fingerprint": "f0e1d2c3b4a59687",
  "provider": "openai",
  "model": "dall-e-3",
  "content_type": "image/png",
  "timestamp": "2026-03-12T10:30:00Z",
  "signature": "base64_ed25519_signature...",
  "signing_key_id": "3e1b03b9",
  "verify_url": "https://0byte.tech/proof/0b_a1b2c3d4-...",
  "metadata": {}
}

API Keys

Manage API keys programmatically. All key endpoints require authentication.

Create Key

POST /v1/keys — Create a new API key. The raw key is returned once.

curl -X POST https://api.0byte.tech/v1/keys \
  -H "Authorization: Bearer 0b_key_..." \
  -H "Content-Type: application/json" \
  -d '{"name": "production"}'

{
  "id": "a1b2c3d4-...",
  "name": "production",
  "created_at": "2026-03-12T10:30:00",
  "key": "0b_key_new_raw_key_here"
}

List Keys

GET /v1/keys — List all keys (raw keys are never returned).

curl https://api.0byte.tech/v1/keys \
  -H "Authorization: Bearer 0b_key_..."

Revoke Key

DELETE /v1/keys/:id — Revoke a key. Can't revoke your own or the last remaining key.

curl -X DELETE https://api.0byte.tech/v1/keys/a1b2c3d4-... \
  -H "Authorization: Bearer 0b_key_..."

Transparency Log

Every proof is batched into a signed Merkle tree every 60 seconds. These endpoints let anyone independently verify that a proof was included in the log.

Tree Head

GET /v1/transparency/head — Latest Merkle tree root.

Request:

curl https://api.0byte.tech/v1/transparency/head

Response:

{
  "tree_id": 42,
  "root_hash": "a1b2c3d4e5f6...",
  "tree_size": 128,
  "published_at": "2026-03-12T10:31:00Z"
}

Inclusion Proof

GET /v1/transparency/inclusion/:proof_id — Verify a proof exists in the transparency log.

Request:

curl https://api.0byte.tech/v1/transparency/inclusion/0b_a1b2c3d4-...

Response:

{
  "proof_id": "0b_a1b2c3d4-...",
  "leaf_hash": "abc123...",
  "leaf_index": 7,
  "tree_id": 42,
  "root_hash": "a1b2c3d4e5f6...",
  "tree_size": 128,
  "published_at": "2026-03-12T10:31:00Z",
  "inclusion_path": [
    {"hash": "def456...", "direction": "left"},
    {"hash": "789abc...", "direction": "right"}
  ]
}

Error Codes

Code	Status	Description
AUTH_MISSING	401	No Authorization header
AUTH_INVALID	401	API key is invalid or revoked
SCOPE_DENIED	403	Key doesn't have the required scope for this endpoint
RATE_LIMITED	429	Too many requests for your tier
INVALID_BASE64	400	Content is not valid base64
INVALID_IMAGE	400	Content is not a valid image
PAYLOAD_TOO_LARGE	413	Content exceeds 50MB limit
PROOF_NOT_FOUND	404	No proof with that ID
NOT_YET_ANCHORED	404	Proof not yet in transparency log (wait ~60s)
KEY_NOT_FOUND	404	No API key with that ID
CANNOT_DELETE_SELF	400	Can't revoke the key you're authenticating with
LAST_KEY	400	Can't revoke the last remaining key