An AI watermark remover hit 6,000 GitHub stars in days

An open-source tool that strips AI provenance marks passed 6,000 GitHub stars within days of release, and it arrived roughly two days after Anthropic switched invisible watermarks on in Claude’s output.

The interval is the story. A provenance system intended to survive in the wild was met with working removal code in under a week, published under a permissive license by a named developer rather than circulated privately.

What the tool removes, and what it cannot

Developer Guillaume Meyer published watermarks-remover under an MIT license. It strips invisible Unicode characters, C2PA manifests and embedded metadata from AI-generated content across PNG, JPEG, SVG, PDF, DOCX, HTML and Markdown, and names Claude, OpenAI and Gemini provenance marks as targets.

Meyer is unusually direct about the boundary of his own tool. Statistical watermarks are not stored in metadata at all; they are carried in the choice of wording, so removing one means heavily rewording the text. He also states that no tool can guarantee a given vendor’s detector will fail.

That splits AI watermarking into two unequal categories. The marks that are cheap to apply are cheap to strip. The marks that are hard to strip require rewriting the output, at which point the text is no longer quite the model’s.

Why the marks were contested before the tool existed

The removal code landed while Claude’s own users were still arguing about the watermarks. A thread on r/ClaudeAI titled “Some Claude users are mad that Anthropic’s new watermarks will catch them using it at their jobs, classes” drew 594 upvotes and 174 comments in a day.

The objection there was not about forgery. It was about detection in workplaces and classrooms, which is the use case the marks make possible whether or not that was the stated intent.

Where this leaves provenance

The sequence ran from rollout to public objection to working removal in about three days. That cadence, rather than any single tool, is what determines the practical value of watermarking AI text.

The unresolved question is whether provenance marks are meant to establish origin in disputes, where a cooperative party retains them, or to catch non-cooperative users, where the marks compete against a free script and lose the cheap half of the contest immediately.