CAWG identity

llms.txt Ask agent

# CAWG identity

Source: https://docs.originalpictures.com/api/cawg-identity/
Full index for AI agents: https://docs.originalpictures.com/llms.txt

:::caution[Not available yet]
Identity assertions are built into the API but switched off. Until an identity certificate is
enrolled for your account, a sign request that asks for one is refused with
`409 IDENTITY_CREDENTIAL_NOT_ENROLLED`, and the console shows the control disabled with the reason
"CAWG: identity certificate not enrolled yet". Nothing in a signed file changes until then.
:::

A C2PA manifest says which product signed a file. A **CAWG identity assertion** (Creator Assertions
Working Group identity assertion) adds who stands behind it: your organisation, or an individual,
backed by an identity certificate issued to that organisation or person. It is signed separately
from the C2PA claim, with the identity certificate's own key.

## How it will work

1. Original Pictures enrols an identity certificate for your account: an **organisation**
   certificate for a company, or an **individual** certificate for a person. Enrolment is done by
   our operators; it is never a self-service API call, and the key is held in a signing service,
   never in the API.
2. [`GET /v1/identity-credentials`](/api/reference/identity-credentials/#listIdentityCredentials)
   (scope `capabilities:read`) lists the enrolled credentials and says whether identity assertions
   are available:

   ```json
   {
     "data": [],
     "cawg_available": false,
     "unavailable_reason": "CAWG: identity certificate not enrolled yet"
   }
   ```

   Once a credential is active, `data` lists it with its `credential_id` (`idc_…`), `kind`
   (`individual` or `organisation`), `subject_name`, `status` and validity dates, and
   `cawg_available` is `true`.

3. A sign request adds `identity` with that credential:

   ```json
   {
     "asset_id": "ast_…",
     "watermark": false,
     "fingerprint": false,
     "identity": { "credential_id": "idc_…" }
   }
   ```

   In a [workflow template](/api/workflow-templates/), the `cawg_identity` block does the same.

A request without `identity` is signed exactly as it is today, whether or not a credential is
enrolled.

## Pricing

CAWG identity keys are listed in the current catalog at $99 a year for an individual and $199 a
year for an organisation, **available on enrolment**. They are not sold or issued before then. See
[Retention and pricing](/api/retention-pricing/#platform-and-usage-catalog).

A C2PA manifest says which product signed a file. A CAWG identity assertion (Creator Assertions Working Group identity assertion) adds who stands behind it: your organisation, or an individual, backed by an identity certificate issued to that organisation or person. It is signed separately from the C2PA claim, with the identity certificate’s own key.

How it will work

Original Pictures enrols an identity certificate for your account: an organisation certificate for a company, or an individual certificate for a person. Enrolment is done by our operators; it is never a self-service API call, and the key is held in a signing service, never in the API.
GET /v1/identity-credentials (scope capabilities:read) lists the enrolled credentials and says whether identity assertions are available:
```
{
  "data": [],
  "cawg_available": false,
  "unavailable_reason": "CAWG: identity certificate not enrolled yet"
}
```
Once a credential is active, data lists it with its credential_id (idc_…), kind (individual or organisation), subject_name, status and validity dates, and cawg_available is true.

A sign request adds identity with that credential:

{
  "asset_id": "ast_…",
  "watermark": false,
  "fingerprint": false,
  "identity": { "credential_id": "idc_…" }
}

In a workflow template, the cawg_identity block does the same.

A request without identity is signed exactly as it is today, whether or not a credential is enrolled.

Pricing

CAWG identity keys are listed in the current catalog at $99 a year for an individual and $199 a year for an organisation, available on enrolment. They are not sold or issued before then. See Retention and pricing.