Documentation

Everything you need to integrate 0byte into your AI pipeline.

Overview

0byte creates cryptographic proofs of origin for AI-generated content. The API has two sides:

Stamp — create a proof when content is generated (requires API key)
Verify — check any content against the registry (public, no key needed)

Base URL: https://api.0byte.tech

Authentication

Stamp requests require an API key passed as a Bearer token:

Authorization: Bearer 0b_key_...

Verify, proof lookup, and transparency endpoints are public — no authentication required.

Python SDK

Install the SDK:

pip install 0byte

Stamp content

from zerobyte import Client

client = Client(api_key="0b_key_...")

# After generating content with any AI provider
proof = client.stamp(
    content=image_bytes,
    content_type="image/png",
    provider="stability",
    model="sdxl-turbo",
)

print(proof.id)          # "0b_a1b2c3d4-..."
print(proof.fingerprint) # perceptual content hash
print(proof.verify_url)  # "https://0byte.tech/proof/0b_a1b2c3d4-..."

Verify content

result = client.verify(
    content=some_image_bytes,
    content_type="image/png",
)

print(result.matched)     # True / False
print(result.confidence)  # 0.0 — 1.0
print(result.proof)       # original proof if matched

Look up a proof

proof = client.get_proof("0b_a1b2c3d4-...")

print(proof.provider)   # "stability"
print(proof.model)      # "sdxl-turbo"
print(proof.signature)  # Ed25519 signature

API Reference

Health Check

GET /v1/health — Returns server status, public key, and index size. No auth required.

Stamp

POST /v1/stamp — Create a proof of origin. Requires API key.

Request:

curl -X POST https://api.0byte.tech/v1/stamp \
  -H "Authorization: Bearer 0b_key_..." \
  -H "Content-Type: application/json" \
  -d '{
    "content": "<base64_encoded_media>",
    "content_type": "image/png",
    "provider": "openai",
    "model": "dall-e-3",
    "metadata": {"prompt_hash": "abc123"}
  }'

Response:

{
  "id": "0b_a1b2c3d4-...",
  "fingerprint": "f0e1d2c3b4a59687",
  "provider": "openai",
  "model": "dall-e-3",
  "content_type": "image/png",
  "timestamp": "2026-03-12T10:30:00Z",
  "signature": "base64_ed25519_signature...",
  "signing_key_id": "3e1b03b9",
  "verify_url": "https://0byte.tech/proof/0b_a1b2c3d4-...",
  "metadata": {"prompt_hash": "abc123"}
}

content — base64-encoded media (max 50MB)
content_type — MIME type (image/png, image/jpeg, video/mp4, audio/mp3)
provider — AI provider name (e.g. openai, stability, anthropic)
model — model identifier (e.g. dall-e-3, sdxl-turbo)
metadata — optional JSON object stored with the proof

Verify

POST /v1/verify — Check content against the registry. No auth required.

Request:

curl -X POST https://api.0byte.tech/v1/verify \
  -H "Content-Type: application/json" \
  -d '{
    "content": "<base64_encoded_media>",
    "content_type": "image/png"
  }'

Response:

{
  "matched": true,
  "confidence": 0.95,
  "proof": {
    "id": "0b_a1b2c3d4-...",
    "fingerprint": "f0e1d2c3b4a59687",
    "provider": "openai",
    "model": "dall-e-3",
    "content_type": "image/png",
    "timestamp": "2026-03-12T10:30:00Z",
    "signature": "base64_ed25519_signature...",
    "signing_key_id": "3e1b03b9",
    "verify_url": "https://0byte.tech/proof/0b_a1b2c3d4-..."
  }
}

Matching uses perceptual fingerprinting — works even after re-encoding, cropping, or screenshotting. Confidence is a similarity score from 0.0 to 1.0.

Get Proof

GET /v1/proofs/:id — Fetch a specific proof by ID. No auth required.

Request:

curl https://api.0byte.tech/v1/proofs/0b_a1b2c3d4-...

Response:

{
  "id": "0b_a1b2c3d4-...",
  "fingerprint": "f0e1d2c3b4a59687",
  "provider": "openai",
  "model": "dall-e-3",
  "content_type": "image/png",
  "timestamp": "2026-03-12T10:30:00Z",
  "signature": "base64_ed25519_signature...",
  "signing_key_id": "3e1b03b9",
  "verify_url": "https://0byte.tech/proof/0b_a1b2c3d4-...",
  "metadata": {}
}

API Keys

Manage API keys programmatically. All key management endpoints require authentication.

Create Key

POST /v1/keys — Create a new API key. The raw key is returned once.

curl -X POST https://api.0byte.tech/v1/keys \
  -H "Authorization: Bearer 0b_key_..." \
  -H "Content-Type: application/json" \
  -d '{"name": "production"}'

{
  "id": "a1b2c3d4-...",
  "name": "production",
  "created_at": "2026-03-12T10:30:00",
  "key": "0b_key_new_raw_key_here"
}

List Keys

GET /v1/keys — List all API keys (raw keys are never returned).

curl https://api.0byte.tech/v1/keys \
  -H "Authorization: Bearer 0b_key_..."

Revoke Key

DELETE /v1/keys/:id — Revoke an API key. Cannot revoke your own key or the last remaining key.

curl -X DELETE https://api.0byte.tech/v1/keys/a1b2c3d4-... \
  -H "Authorization: Bearer 0b_key_..."

Transparency Log

Every proof is batched into a signed Merkle tree every 60 seconds. These endpoints let anyone independently verify that a proof was included in the log.

Tree Head

GET /v1/transparency/head — Get the latest Merkle tree root.

Request:

curl https://api.0byte.tech/v1/transparency/head

Response:

{
  "tree_id": 42,
  "root_hash": "a1b2c3d4e5f6...",
  "tree_size": 128,
  "published_at": "2026-03-12T10:31:00Z"
}

Inclusion Proof

GET /v1/transparency/inclusion/:proof_id — Verify a proof exists in the transparency log.

Request:

curl https://api.0byte.tech/v1/transparency/inclusion/0b_a1b2c3d4-...

Response:

{
  "proof_id": "0b_a1b2c3d4-...",
  "leaf_hash": "abc123...",
  "leaf_index": 7,
  "tree_id": 42,
  "root_hash": "a1b2c3d4e5f6...",
  "tree_size": 128,
  "published_at": "2026-03-12T10:31:00Z",
  "inclusion_path": [
    {"hash": "def456...", "direction": "left"},
    {"hash": "789abc...", "direction": "right"}
  ]
}

Error Codes

Code	Status	Description
AUTH_MISSING	401	No Authorization header provided
AUTH_INVALID	401	API key is invalid or revoked
INVALID_BASE64	400	Content is not valid base64
INVALID_IMAGE	400	Content is not a valid image
PAYLOAD_TOO_LARGE	413	Content exceeds 50MB limit
PROOF_NOT_FOUND	404	No proof exists with that ID
NOT_YET_ANCHORED	404	Proof not yet included in transparency log (wait ~60s)
KEY_NOT_FOUND	404	No API key exists with that ID
CANNOT_DELETE_SELF	400	Cannot revoke the key you are authenticating with
LAST_KEY	400	Cannot revoke the last remaining API key