Does Stability AI (hosted API) add Content Credentials?

Short answer

Documented: Stability AI says it implements C2PA through its API. It also says content provenance has not been implemented during generation for its openly released models.

Official sources: Stability AI: Stability AI's Annual Integrity Transparency Report · Stability AI: Stable Safety

C2PA: Documented: addsWatermark: Not documented

Covers: Stability AI Developer Platform API · Open-weight Stable Diffusion models (stated as not covered)

Stability AI (hosted API) at a glance
Outputimage
C2PA Content CredentialsDocumented: adds
WatermarkNot documented
Check tool from the vendorNone found in the pages we read
Sources read on3 November 2026

What the source says

Content Credentials (C2PA), hosted API

Stability AI’s annual integrity transparency report (published 2025-09-17).

“we implement Coalition for Content Provenance and Authenticity (C2PA) through our API to help users and content distribution platforms identify AI-generated content.”

Open-weight models

Documented: does not add

Same report, about models people run themselves.

“Content provenance has not been implemented during the content generation process for our openly released models.”

Content authenticity (Safety page)

Stable Safety page, about hosted services. On 6 October 2026 the same sentence read “content authenticity standards and watermarking”; on 3 November 2026 “and watermarking” was gone.

“We are implementing content authenticity standards so that users and platforms can identify AI-assisted content generated through our hosted services.** By distinguishing AI content, these standards can help ensure that users exercise appropriate care when interacting with AI content; help to limit the spread of misinformation; and help to protect human artists from unfair mimicry or passing off.”

If you publish Stability AI (hosted API) output in the EU

Marking outputs in a machine-readable way is the duty of the tool’s provider under Article 50(2) of the AI Act. If you use the output for work and it is a deepfake, the visible disclosure is yours (Article 50(4)), whatever Stability AI adds to the file. What that means for your content: AI images.

Scope and limits

  • Stability’s statements apply to content generated through its hosted API and services, not to open-weight models run elsewhere.
  • Stability’s Safety page no longer mentions watermarking (read 3 November 2026), and the 2025 report says non-C2PA watermarking caused quality degradation. We make no statement about an invisible watermark.
  • The developer API reference is a JavaScript app and could not be read.

If the credentials are removed

C2PA data travels inside the file, so a re-encode, screenshot or upload that does not carry it across leaves an image with no credentials. A watermark or fingerprint can help find a record again, if one was stored (see the C2PA specification’s soft bindings). Proofcan is independent of Stability AI: for images you mark with Proofcan it writes a C2PA manifest, an invisible watermark and a registry record. It does not change or vouch for how Stability AI marks its own outputs.

Check a file yourself

The Content Credentials checker reads the C2PA data in an image in your browser and shows who signed it, the generating tool and whether the signature still matches. It reads what a file declares; it does not detect AI from pixels, and a file with no credentials proves nothing either way. See why metadata gets stripped.

Questions

Does Stability AI (hosted API) add Content Credentials?
Documented: Stability AI says it implements C2PA through its API. It also says content provenance has not been implemented during generation for its openly released models.
Does Stability AI (hosted API) use an invisible watermark?
We did not find an invisible watermark described in the documentation we read.
How can I check an image from Stability AI (hosted API)?
Use the Content Credentials checker on Proofcan to read any C2PA data in the file. We did not find a verification tool for Stability AI (hosted API) in the pages we read.

This page reports what the cited sources say on the date shown. It is not an assessment of anyone’s product, it is not legal advice, and Proofcan does not guarantee compliance. Spotted something out of date? Write to support@proofcan.com.

Sources

Page reviewed . Proofcan is a technical tool, not legal advice, and does not guarantee compliance.