Resemble AI
by resemble-ai · remote · no sign-in to list tools · v1.1.0 · published by GitHub user resemble-ai
Resemble AI: deepfake detection, media intelligence, and watermarking actions, plus docs tools.
18 tools: 8 change things and 10 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things8Claude Code: ask: see these tools
- Only reads10Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http resemble https://mcp.resemble.ai/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
18 tools
Changes things 8Claude Code: ask
agent_detection_create_siteCreate an Agent Detection integration for a website and return its publishable key (pk_live_...) and the script snippet to install.No findings
Why it is in this group
- The name "agent_detection_create_site" says "create": a word for a change.
Description, as the server wrote it Create an Agent Detection integration for a website and return its publishable key (pk_live_...) and the script snippet to install. domain is the site's domain, e.g. example.com. If the team already has an integration for that domain, the existing one is returned instead of a duplicate. The publishable key is safe to put in a public web page: it only sends telemetry, only from the listed domains. Never put the Resemble API key in a page. Paste the snippet into the <head> of every page to cover; the page can then listen for the 'resemble:verdict' event or call ResembleAgentDetection.onVerdict().
agent_detection_update_siteReplace the list of domains an Agent Detection integration's publishable key is valid on (for example to add a staging or www host), and optionally rename it.No findings
Why it is in this group
- The name "agent_detection_update_site" says "update": a word for a change.
Description, as the server wrote it Replace the list of domains an Agent Detection integration's publishable key is valid on (for example to add a staging or www host), and optionally rename it. domains replaces the whole list, so include every domain to keep; at least one is required.
apply_watermarkEmbed an invisible Resemble provenance watermark into media (audio-first) and return the watermarked media URL.No findings
Why it is in this group
- The name "apply_watermark" says "apply": a word for a change.
Description, as the server wrote it Embed an invisible Resemble provenance watermark into media (audio-first) and return the watermarked media URL. strength 0.0-1.0 (image/video only).
ask_about_detectionAsk a natural-language question about a COMPLETED detection (e.g.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Ask a natural-language question about a COMPLETED detection (e.g. 'how confident is the model that this is fake?'). Returns the grounded answer.
detect_ai_textDetect whether TEXT (an essay, email, post, review, comment, article) was written by an AI language model.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Detect whether TEXT (an essay, email, post, review, comment, article) was written by an AI language model. Needs at least 25 words: shorter text comes back as prediction 'uncertain' with no model call - concatenate several messages from the same author to reach the minimum. Returns prediction ('ai' | 'human'), confidence (how sure the model is of that prediction; it is NOT an AI probability, so 'human' at 0.95 means strongly human), and the full result. Only the first ~400 words are read; chunk longer documents. A result can take several minutes when the model is cold or jobs are queued - if status is still 'processing' when the wait budget ends, resume with get_text_detection(uuid). Detection is probabilistic, not proof of authorship.
detect_deepfakeDetect whether media (audio, image, or video) at a public HTTPS URL is a deepfake / AI-generated.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Detect whether media (audio, image, or video) at a public HTTPS URL is a deepfake / AI-generated. Polls to completion and returns the verdict label, confidence score, and full result. Optional flags add media intelligence, audio source tracing, visualization, reverse image search (images), out-of-distribution detection, and zero-retention (auto-delete media after analysis). model_type: auto | image | talking_head.
detect_watermarkCheck whether media at a public HTTPS URL carries a Resemble invisible watermark (audio-first; per-channel verdict for audio).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Check whether media at a public HTTPS URL carries a Resemble invisible watermark (audio-first; per-channel verdict for audio).
run_detect_agent_investigationRun a managed Detect Agent investigation against media at a public HTTPS URL and return its verdict.No findings
Why it is in this group
- The name "run_detect_agent_investigation" says "run": a word for a change.
Description, as the server wrote it Run a managed Detect Agent investigation against media at a public HTTPS URL and return its verdict. preset_id is one of: investigate_social_content, review_insurance_claim, verify_breaking_news, verify_document, verify_evidence, verify_id (confirm with list_detect_agents). query states the investigation objective; check_urls adds URLs for the agent to check. Consumes a run of the team's allowance. `label`/`score` are the Detect evidence and are the only basis for an authenticity claim; `verdict` is the agent's written assessment. If timed_out is true the investigation is still running server-side — retrieve it later with get_detect_agent_run.
Only reads 10Claude Code: allow
agent_detection_get_analyticsSummarise who is visiting a website: people vs AI agents.No findings
Why it is in this group
- The name "agent_detection_get_analytics" says "get": a word for reading.
Description, as the server wrote it Summarise who is visiting a website: people vs AI agents. Returns totals (visits, decided, agents, people, agent_share, gated), counts per visitor class (human, computer_use_agent, browser_automation, scripted_client), and breakdowns by page, day, and network. Use this to show how much traffic comes from agents and which pages they use, so the site can be made easier for helpful agents and protected from harmful ones. Filters are optional: site_id (one integration), settled ('human' or 'agent'), page_path, and since/until as ISO 8601 times. agent_share is agents / decided visits, or null when nothing is decided yet.
agent_detection_get_sessionGet one website visit and the evidence behind its verdict: the feature vector it was decided from, plain-language observations, and each model read.No findings
Why it is in this group
- The name "agent_detection_get_session" says "get": a word for reading.
Description, as the server wrote it Get one website visit and the evidence behind its verdict: the feature vector it was decided from, plain-language observations, and each model read. When the visit was recorded, the raw event stream is available; it is omitted unless include_events is true, and then capped at the first 200 events. The verdict is advisory: it comes from browser signals, which a determined attacker can fake.
agent_detection_list_sessionsList individual website visits, newest first, each with its verdict (settled: human, agent, or null while still open), visitor_class, p_person, the page, referrer, user agent, and …No findings
Why it is in this group
- The name "agent_detection_list_sessions" says "list": a word for reading.
Description, as the server wrote it List individual website visits, newest first, each with its verdict (settled: human, agent, or null while still open), visitor_class, p_person, the page, referrer, user agent, and duration. Same filters as agent_detection_get_analytics plus a free-text search. per_page max 100.
agent_detection_list_sitesList this team's Agent Detection integrations.No findings
Why it is in this group
- The name "agent_detection_list_sites" says "list": a word for reading.
Description, as the server wrote it List this team's Agent Detection integrations. Agent Detection tells a website whether each visitor is a person or an AI agent (for example a personal assistant browsing on someone's behalf). Each integration is one website, with the domains its publishable key works on and the one-line script snippet to paste into the site's <head>.
analyze_mediaAnalyze media for structured intelligence: transcription, translation, language, speaker info, emotion, scene description, abnormalities, and misinformation analysis.No findings
Why it is in this group
- The name "analyze_media" says "analyze": a word for reading.
Description, as the server wrote it Analyze media for structured intelligence: transcription, translation, language, speaker info, emotion, scene description, abnormalities, and misinformation analysis. media_type: auto | audio | video | image.
get_detect_agent_runFetch a persisted Detect Agent investigation by run_id, including its full event transcript.No findings
Why it is in this group
- The name "get_detect_agent_run" says "get": a word for reading.
Description, as the server wrote it Fetch a persisted Detect Agent investigation by run_id, including its full event transcript. Use after run_detect_agent_investigation reported timed_out, or to re-read an earlier investigation.
get_detectionFetch a detection by UUID, polling until it completes (bounded).No findings
Why it is in this group
- The name "get_detection" says "get": a word for reading.
Description, as the server wrote it Fetch a detection by UUID, polling until it completes (bounded). Use after detect_deepfake when a long job exceeded its wait budget.
get_text_detectionFetch a text detection by UUID, polling until it completes (bounded).No findings
Why it is in this group
- The name "get_text_detection" says "get": a word for reading.
Description, as the server wrote it Fetch a text detection by UUID, polling until it completes (bounded). Use after detect_ai_text returned status 'processing' - typically a cold start.
list_detect_agentsList the managed Detect Agents — investigators that wrap detection in a multi-step workflow ending in a written assessment.No findings
Why it is in this group
- The name "list_detect_agents" says "list": a word for reading.
Description, as the server wrote it List the managed Detect Agents — investigators that wrap detection in a multi-step workflow ending in a written assessment. Returns each agent's preset_id plus this team's run allowance (free_runs_remaining, entitled), which is worth checking before starting a run.
trace_audio_sourceGet the audio source-tracing report for a detection (which AI platform generated the fake audio).No findings
Why it is in this group
- The description's first verb is "get": a word for reading.
Description, as the server wrote it Get the audio source-tracing report for a detection (which AI platform generated the fake audio). Only available when detection ran with audio_source_tracing and labeled the audio fake.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http resemble https://mcp.resemble.ai/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__resemble__get_detection",
"mcp__resemble__get_text_detection",
"mcp__resemble__analyze_media",
"mcp__resemble__trace_audio_source",
"mcp__resemble__list_detect_agents",
"mcp__resemble__get_detect_agent_run",
"mcp__resemble__agent_detection_list_sites",
"mcp__resemble__agent_detection_get_analytics",
"mcp__resemble__agent_detection_list_sessions",
"mcp__resemble__agent_detection_get_session"
],
"ask": [
"mcp__resemble__detect_deepfake",
"mcp__resemble__detect_ai_text",
"mcp__resemble__ask_about_detection",
"mcp__resemble__detect_watermark",
"mcp__resemble__apply_watermark",
"mcp__resemble__run_detect_agent_investigation",
"mcp__resemble__agent_detection_create_site",
"mcp__resemble__agent_detection_update_site"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as resemble. Review it before you use it.
