Image Metadata Inspector

By fazal 👁 18 views ▲ 0 votes

Adds the free metadataremoverai.com remote MCP server to OpenClaw, so your agent can check what a photo or video would leak before you share it. Give it a public image or video URL (JPEG, PNG, WebP, AVIF, HEIC, GIF, TIFF, MP4 or MOV, up to 15 MB) and it reports GPS coordinates, camera and lens, timestamps, software, C2PA Content Credentials, AI-generator signals and how many bytes are metadata. Read-only: the server downloads only the URL you pass, never modifies or stores the file, and receives no API key, account, local files or conversation history. To strip metadata, use metadataremoverai.com in the browser, where files stay on your device.

openclaw plugins install git:github.com/fazal-bhinder/openclaw-metadata-inspector

{
  "mcp": {
    "servers": {
      "metadata-inspector": { "url": "https://metadataremoverai.com/mcp", "transport": "streamable-http" }
    }
  }
}

# Image Metadata Inspector for OpenClaw

Report the hidden metadata in a public image or video URL: GPS location, camera, timestamps, software, C2PA Content Credentials and AI-generator tags. Read-only. Wraps the free remote MCP server at metadataremoverai.com.

This plugin adds the [metadataremoverai.com](https://metadataremoverai.com) remote MCP server to [OpenClaw](https://openclaw.ai). Nothing runs locally: OpenClaw connects to `https://metadataremoverai.com/mcp` over Streamable HTTP. No API key, no account, no config.

## Install

```bash
openclaw plugins install git:github.com/fazal-bhinder/openclaw-metadata-inspector
```

Or from a local checkout: `openclaw plugins install ./openclaw-metadata-inspector`. Then check it loaded with `openclaw plugins inspect metadata-inspector`. The tools are available from the next agent session.

## Usage

1. Install the plugin (see above) and start a new agent session.
2. Check it loaded: `openclaw plugins inspect metadata-inspector` should list the tools below.
3. Ask in plain language. The agent picks the tool. For example:

   - "Does this photo leak a GPS location? <public image URL>"
   - "Show the camera, date and software metadata of <public image URL>"
   - "Is there a C2PA or AI-generator label on <public image URL>?"

No setup or configuration is needed.

## Data and permissions

- The plugin adds one remote MCP server, `https://metadataremoverai.com/mcp` (Streamable HTTP). It has no local code, needs no permissions and runs nothing on your machine.
- Each tool call sends only its arguments to that server: the public image or video URL you give it. The server downloads that file (max 15 MB) to read its metadata and does not modify or store it. Only use URLs you are allowed to inspect.
- No API key, account, OpenClaw config, local files or conversation history are sent.
- How the server handles the URL: it accepts only `http(s)` URLs, downloads the file with a hard 15 MB cap, parses its metadata in memory for that one request and returns the report. The file isn't written to storage, cached or logged (see `functions/mcp.ts` in the site's source), and it's never modified.

## Tools

OpenClaw prefixes MCP tools with the server name, so they appear as `metadata-inspector__<tool>`.

| Tool | What it does |
|---|---|
| `metadata-inspector__inspect_metadata` | Fetch a public image or video URL (JPEG, PNG, WebP, AVIF, HEIC, GIF, TIFF, MP4, MOV; max 15 MB) and report GPS, camera and lens, timestamps, software, C2PA, AI-generator signals and how many bytes are metadata. Does not modify or store the file. |

## Try asking

- "Does this photo leak my location? https://example.com/photo.jpg"
- "Was this image made with an AI generator? Check its metadata."

The server only reads. To actually strip metadata, use [metadataremoverai.com](https://metadataremoverai.com) in your browser: files never leave your device and pixels are not re-encoded.

## Manual setup (without the plugin)

Add the server to your OpenClaw config yourself:

```json
{
  "mcp": {
    "servers": {
      "metadata-inspector": { "url": "https://metadataremoverai.com/mcp", "transport": "streamable-http" }
    }
  }
}
```

## Check

`npm test` (or `node check.mjs`) calls the live server and asserts a real result. Needs Node 18+ and no dependencies.

## Files

- `openclaw.plugin.json`: the native OpenClaw manifest. It declares the remote server under `mcpServers`.
- `.claude-plugin/plugin.json` and `.mcp.json`: the same server in the Claude bundle format, which OpenClaw and ClawHub also read.

## About

Made by [Fazal Singh Bhinder](https://github.com/fazal-bhinder), who also runs [metadataremoverai.com](https://metadataremoverai.com). The server is free and read-only. MIT licensed.