Open-source C2PA authoring for music

Content Credentials for Music

Create music with its origins, credits, ingredients, and rights attached.

Mix-O-Tron is an open-source C2PA authoring tool for the music industry. Create Content Credentials for original recordings, trace samples and remixes back to their sources, and carry licensing information with music as it moves into podcasts, video, and new works.

Built as an accessible entry point for small record labels, independent artists, and music platforms adopting C2PA.

  • Author
  • License
  • Verify
  • Follow the music
Features

Everything a release needs to carry its own history

From first upload to published work, Mix-O-Tron treats provenance as part of the authoring workflow — not an afterthought bolted on before release.

Waveform

Author C2PA Music

Turn finished music and video files into C2PA-enabled releases. Upload a completed MP3, MP4, or other supported media file and Mix-O-Tron will create a C2PA manifest describing the work, its creator, and its provenance.

Original works do not need to contain existing C2PA ingredients — Mix-O-Tron can establish the first Content Credential in a work's provenance history.

Layers

Build From Existing Music

Music rarely exists in isolation. Mix-O-Tron allows a new work to reference up to 20 existing C2PA-enabled media files as ingredients.

  • Samples
  • Remixes
  • Mashups
  • Podcast music
  • Video soundtracks
  • Collaborations
  • Derivative works
  • Incorporated recordings
Shield check

Verify Before You Publish

Before an ingredient becomes part of a new work, Mix-O-Tron can verify its existing Content Credentials and display:

  • The work
  • Artist / creator
  • Organization
  • Existing provenance
  • Previous ingredients
  • CAWG identity
  • Trust-registry records
  • Revocation status
Network

Follow Music Across Media

A song may begin as an original recording, then become a sample, background music in a podcast, part of a remix, or a video soundtrack. Each new work can reference the C2PA-enabled works that came before it.

A single recording can become part of a much larger provenance graph without losing its connection to the original work.

How it works

From finished track to published Content Credential

Six steps carry a release from your profile through authoring, signing, and publication.

1

Create your profile

Set up the information you want associated with the work you create. You decide which information is disclosed in the Content Credentials you create.

Artist nameMedia / label nameOrganizationWebsiteCAWG identifierSocial accounts
2

Add your finished work

Upload the final version of the music, podcast, video, remix, or other supported media you want to publish. Mix-O-Tron works with finished media rather than replacing professional production tools — create wherever you normally work, then bring the final file in.

3

Add your ingredients

If the work contains existing C2PA-enabled music, add those files as ingredients. Mix-O-Tron verifies their manifests and allows the resulting work to preserve those relationships.

A release can contain up to 20 ingredients plus the final output. If the work is completely original, simply continue without ingredients.

4

Review provenance and rights

Inspect the Content Credentials and trust information associated with your ingredients. Confirm who created the source material, where it came from, and whether any applicable licensing authorization exists.

5

Author the new manifest

Mix-O-Tron creates a C2PA manifest describing the final work and its ingredients. Signing is handled through Sign-O-Tron, a separate signing API designed to keep cryptographic signing infrastructure independent from the authoring interface.

6

Publish

Download the finished C2PA-enabled media and publish it normally. Its Content Credentials now carry the provenance relationships created during the Mix-O-Tron workflow.

Licensing music

License music, and prove you have permission to use it

Mix-O-Tron can support more than attribution. A deployment can offer a catalog of music the operator has permission to license to other creators — for example, a podcast producer selecting a song, purchasing a licence, and using it in a new episode.

Result

“This creator has permission to use this music.”

1

Select music

Browse music available for licensing through the Mix-O-Tron deployment.

2

Purchase a licence

Select the permitted use and complete the licensing transaction.

Licence
Song
Licensee
Permitted use
Use type
Commercial / non-commercial
Territory
Duration
Licence ID
Receipt
3

Create your work

Download the licensed music and use it in your podcast, video, remix, or other production. Mix-O-Tron does not need to replace your existing creative tools.

4

Upload the finished work

When the production is complete, upload the finished media to Mix-O-Tron.

5

Add the licensed song as an ingredient

The licensed recording becomes an ingredient in the new C2PA manifest.

6

Register the authorization

The licensing authorization is recorded in a separate trust registry. The resulting C2PA data can reference that authorization so a verifier can determine whether the creator has permission to use the music.

Provenance & ingredients

Music has a history

C2PA ingredients allow one digital work to declare that another digital work contributed to its creation. For music, that relationship is especially important.

Original RecordingSampleRemixPodcastVideo

Mix-O-Tron allows each new work to reference the C2PA-enabled works that contributed to it. Those relationships remain machine-readable and cryptographically verifiable — rather than reducing provenance to a single creator field, Mix-O-Tron can describe the lineage of a work.

20
Ingredients per project
  • Multiple samples
  • Multi-track remixes
  • Mashups
  • Podcast episodes with several songs
  • Videos with multiple pieces of music
  • Compound derivative works
Creator profiles

Add your identity once. Disclose it on your terms.

Add your identity once

Creators and labels often use the same identity information across many releases. Mix-O-Tron allows you to create a reusable profile so you do not need to enter the same information every time you author a new work.

Profiles can contain an artist name, media or release name, organization, website, CAWG identifier, and social media accounts.

You control what you disclose

Not every piece of identity information needs to appear in every release. Mix-O-Tron allows users to choose which profile information is disclosed when a new C2PA manifest is created — maintaining a richer creator profile while publishing only what's appropriate for a particular work.

Disclosed in this release
Artist name
Media / label name
Organization
Website
CAWG identifier
Social media accounts
Trust & licensing

Rights information that can be verified

Licensing information is maintained separately from the media itself using a trust-registry service. Mix-O-Tron uses a TRQP-style authorization model, so a verifier can determine whether a licence is currently valid without the entire licensing record being embedded in the media.

Authorization record
authority_id
entity_id
action
resource
context
context may include
  • Commercial or non-commercial rights
  • Territory
  • Duration
  • Licensee
  • Licence identifier
  • Permitted use

WORKING

The authorization is valid. Content Credentials referencing it can be trusted for the licensed use.

REVOKED

The authorization has been withdrawn. A verifier checking the registry will see the licence is no longer in force.

The Content Credentials for the final work can reference the relevant trust-registry authorization directly.

Open source

An open entry point to C2PA for music

Mix-O-Tron is designed as an open-source project for the music industry. Its primary goal is not to replace professional digital audio workstations, rights-management platforms, or label infrastructure — instead, it provides a practical starting point for organizations that want to experiment with or deploy C2PA for music without first building an entire provenance platform.

Finished TrackContent CredentialsPublished Music

Developers can use the project as a reference implementation, extend it for their own workflows, connect it to existing rights systems, or deploy it as the foundation for a commercial service.

Technical architecture

Small services, clear responsibilities

Mix-O-Tron separates authoring, signing, and authorization into distinct components.

Mix-O-Tron
Authoring & user experience

The primary web application. Handles media uploads, creator profiles, ingredient selection, and manifest authoring.

  • C2PA manifest inspection
  • Provenance presentation
  • Licensing workflows
  • Trust-registry verification

A future desktop version may use Electron while maintaining the same general workflow.

Sign-O-Tron
C2PA signing infrastructure

Mix-O-Tron does not need to directly manage all signing operations. Completed manifests are passed to Sign-O-Tron, a dedicated API responsible for C2PA signing.

Separating signing from the main application makes it easier to isolate signing credentials and operate signing infrastructure independently from the user interface.

Trust Registry
Authorization & licensing information

A separate microservice that stores and answers questions about rights and authorization.

Authority → Licensee → Action → Song → Licence Conditions

Mix-O-Tron can query this service when verifying source material, and reference the resulting authorization from newly authored Content Credentials.

Provenance

Provenance

Where did this music come from?

Identity

Identity

Who created or published it?

Rights

Rights

Does this person have permission to use it?

Content Credentials that describe more than a file — the lifecycle of music.