Which GPS, serial-number and owner EXIF tags an image carries (keys only)

$0.005 USDC per call · Developer and security · POST /api/v1/exif-report · Id exif-report

Lists which privacy-relevant EXIF tags exist in a JPEG, TIFF, PNG (eXIf) or WebP (EXIF) image, for an agent that is about to publish, upload or forward a photo. Reports tag ids and names for GPS, body and lens serial numbers, camera owner, artist, unique image id, device, software, timestamps and thumbnails; values are never returned. Input is the image as base64 (up to 96 KiB, enough for the metadata block of a larger file). It does not decode XMP, IPTC or MakerNote contents (their presence returns unknown), does not strip metadata, and does not read pixels.

What you get

A photo posted with GPSLatitude and BodySerialNumber still in it is a doxxing incident; this names the tags before upload.

Call it

Send the JSON body below to https://agents.writerslogic.com/api/v1/exif-report. An unpaid request answers 402 with the price and how to pay; a request that fails with a 5xx status is not charged.

curl -i -X POST https://agents.writerslogic.com/api/v1/exif-report \
  -H 'content-type: application/json' \
  -d '{"data":"/9j/4QBeRXhpZgAASUkqAAgAAAADAA8BAgABAAAAWAAAAGmHBAABAAAAMgAAACWIBAABAAAARAAAAAAAAAABADGkAgAEAAAAMTIzNAAAAAABAAEAAgACAAAATgAAAAAAAAD/2Q=="}'

Input

FieldTypeRequiredDescription
datastring; length 0..131072yesPadded base64 of the image file or its first 96 KiB (the metadata block must be inside it).
forbidarray<string; one of "gps", "serial", "owner", "unique-id", "device", "software", "datetime", "description", "makernote", "thumbnail", "copyright">; max 11 itemsnoCategories whose presence fails the check. Default gps, serial, owner.

Example request body

{
  "data": "/9j/4QBeRXhpZgAASUkqAAgAAAADAA8BAgABAAAAWAAAAGmHBAABAAAAMgAAACWIBAABAAAARAAAAAAAAAABADGkAgAEAAAAMTIzNAAAAAABAAEAAgACAAAATgAAAAAAAAD/2Q=="
}

Result

The response is { "data": ..., "_provenance": ... }. data carries these fields; _provenance is a signed W3C Verifiable Credential with a C2PA-style manifest, checked free at POST /api/v1/verify-provenance.

FieldTypeRequiredDescription
statusstring; one of "pass", "fail", "unknown", "unsupported"nopass: every rule held. fail: a rule was violated (see witnesses). unknown: the input lacks the evidence to decide. unsupported: outside what this engine covers. Missing evidence is never a pass.
containerstring; one of "jpeg", "tiff", "png", "webp", "unknown"no
bytesCheckedintegerno
byteOrderone ofnonull when no Exif block was found.
exifFoundbooleanno
tagsarray<object>noUp to 256 tag keys {ifd, id, name, category}; name is null for tags outside the Exif 2.3 tables.
categoriesarray<string>no
gpsobjectno
serialarray<string>no
ownerarray<string>no
unknownTagIdsarray<integer>no
opaqueobjectno
malformedarray<string>no
witnessesarray<object>no
versionsobjectnoEvery semantic dependency of this answer (engine, tables and their as-of dates, tokenizer, calendar, rounding profile).
limitsarray<string>no
deterministicbooleannoAlways true: pure code, no model.

Pay and connect

Available through: x402 (USDC on Base), MCP. MCP clients reach it through the infra-preflight-kit package.

Machine-readable