TIP Protocol

TIP Protocol is the WordPress plugin for content provenance, AI disclosure, and verified publisher identity. Sign every post with a cryptographic publisher key, label whether each piece was written by a human or with AI assistance, and let readers verify it all from any browser without installing an extension.

The plugin gives news outlets, blogs, marketing teams, academic publishers, and individual creators a practical way to answer the two questions readers and search engines increasingly demand: who actually published this, and how was it made? Every signed article carries a verifiable origin label (Original Human, AI-Assisted, AI-Generated, or Mixed), a post-quantum cryptographic signature, and a permanent record on the open TIP network.

If you have looked at Content Credentials, C2PA, or browser-based provenance extensions and wished there was a self-contained workflow inside WordPress, TIP Protocol is that workflow.

Why publishers and creators use TIP Protocol

• Verifiable AI content labels. Tag every post as Original Human (OH), AI-Assisted (AA), AI-Generated (AG), or Mixed (MX). The label is cryptographically signed, so it is not a self-claim that anyone can copy. Readers, search engines, and automated verifiers can all confirm it.
• Cryptographic publisher identity. A site-level TIP-ID and optional per-author TIP-IDs sign your content with post-quantum ML-DSA-65 signatures (FIPS 204). Readers see a verified trust badge; verifiers see a tamper-proof signature trail back to your domain.
• No browser extension required. Reader-facing verification works in any modern browser through HTTP response headers, HTML meta tags, JSON-LD provenance, and an accessible bundled <tip-badge> web component. Your audience does not need to install anything.
• Plays nicely with your SEO stack. When Yoast SEO or Rank Math is active, TIP Protocol merges provenance into the existing JSON-LD graph instead of competing with it. No duplicate schema, no conflicting article markup.
• Versioned and correction-aware. Each registration is versioned. An article that gets corrected, updated, or expanded later still resolves to a clean provenance trail with a clear change history.
• Encrypted-at-rest identities. Private signing keys never leave WordPress. They are AES-256-GCM encrypted with PBKDF2-derived keys using WordPress salts as input, and the admin UI never echoes them back to the browser.
• Open, free, and global. The TIP Protocol specification is open. The plugin is GPL-2.0-or-later. The workflow is the same whether you publish from Tokyo, Berlin, Sao Paulo, Lagos, Mumbai, or New York.

Who is this for

• News publishers and editorial teams that need verifiable authorship and AI-disclosure signals on every article.
• Independent bloggers and content creators who want to prove their work is genuine and protect against impersonation.
• Marketing, brand, and communications teams that have integrated AI into their content workflow and want to be transparent about how each piece was produced.
• Academic publishers, research organizations, and institutional websites that need an auditable provenance trail per article.
• Government, nonprofit, and public-interest websites where verified authorship and tamper evidence matter.
• Multi-author publications that need per-byline TIP-IDs alongside a single verified publisher identity.
• Publishers preparing for AI transparency expectations from regulators, search platforms, and discerning readers.

Key capabilities

• Register posts, pages, news items, events, products, and other public editor-supported content types on the TIP network with one click.
• Emit TIP verification response headers and provenance meta tags from WordPress on every public page.
• Enrich article JSON-LD schema with provenance fields, with smart handoff to Yoast SEO and Rank Math when they already manage the site schema graph.
• Render accessible verification badges with a bundled local web component so no third-party CDN is required by default.
• Manage publisher and creator TIP identities with encrypted private keys stored inside WordPress.
• Import reviewed publisher TIP-IDs from The AI Lab, or per-author creator TIP-IDs exported from vp.theailab.org, through the built-in .tip.json connection flow with optional DOB-based key unlock.
• Domain binding via .well-known/tip-protocol.json or DNS TXT records so the network can confirm a publisher legitimately claims a domain.
• Multi-author byline rosters with per-author roles (reporter, editor, photographer, columnist, guest, contributor) and optional per-author co-signatures.
• Audit log of registrations with CTID, change type, version history, signing officer roster, and registration status visible inside the admin.
• GDPR-friendly. Integrates with WordPress personal data export and erasure tooling.
• Optional WebAuthn biometric step-up for personal-mode signing. Opt-in per writer, never a barrier.

How TIP Protocol differs from other provenance systems

TIP Protocol is built for the publishing surface that already exists in WordPress, not for the camera-to-cloud capture flow that systems like C2PA Content Credentials were designed around. Where C2PA focuses on signing images and videos at the moment of capture, TIP Protocol focuses on signing the final published article (text, media manifest, author roster, origin label) at the moment a publisher hits Publish in WordPress. Both approaches can coexist; TIP Protocol fills the editorial gap.

Legal

This plugin is distributed under GPL-2.0-or-later.

Bundled legal and notice files:
* LICENSE.txt for the GPL software license notice
* NOTICE.txt for the bundle notice summary shown in the admin UI
* PATENTS.txt for informational patent disclosure
* TRADEMARKS.txt for informational trademark notice

Plugin attribution is optional and can be enabled in settings.

Accessibility

TIP Protocol includes keyboard-accessible verification badges, focus-visible controls, descriptive editor help text, semantic public trust UI, and screen-reader-friendly verification details. The public badge details panel supports keyboard open/close behavior and Escape to dismiss.

External services

This plugin connects to external TIP services to deliver its core provenance features.

TIP node API

The plugin sends registration, verification, and trust-score requests to the configured TIP node endpoint.

Data sent:
* publisher or creator TIP-ID
* content registration payloads
* canonical, exact, and perceptual hashes
* content signatures
* verification lookups for trust scores

Service provider: The AI Lab Intelligence Unobscured, Inc.
Service URLs: https://node.theailab.org by default, or your configured TIP node URL
Service purpose: content registration, provenance verification, trust score retrieval

Optional badge CDN

If you switch the badge delivery mode from Bundled local copy to CDN, reader browsers will load the public badge script from the TIP badge CDN.

Data sent:
* standard browser request metadata needed to fetch the script

Service provider: The AI Lab Intelligence Unobscured, Inc.
Service URL: https://badge.theailab.org
Service purpose: optional remote delivery of the TIP badge web component

Privacy

TIP Protocol adds suggested privacy-policy text in WordPress and integrates with WordPress personal data export and erasure tools for stored user TIP identity data.