
Research
/Security News
Coruna Respawned: Compromised art-template npm Package Leads to iOS Browser Exploit Kit
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.
@picahq/pica-mcp
Advanced tools
A Model Context Protocol (MCP) server that integrates with Pica, enabling seamless interaction with various third-party services through a standardized interface. This server provides direct access to platform integrations, actions, execution capabilities, and robust code generation capabilities.
PICA_SECRET, PICA_[PLATFORM]_CONNECTION_KEYnpm install @picahq/pica-mcp
PICA_SECRET=your-pica-secret-key
Get your Pica secret key from the Pica dashboard.
npx @picahq/pica-mcp
To use with Claude Desktop, add the server config:
On MacOS: ~/Library/Application\ Support/Claude/claude_desktop_config.json
On Windows: %APPDATA%/Claude/claude_desktop_config.json
{
"mcpServers": {
"pica": {
"command": "npx",
"args": ["@picahq/pica-mcp"],
"env": {
"PICA_SECRET": "your-pica-secret-key"
}
}
}
}
In the Cursor menu, select "MCP Settings" and update the MCP JSON file to include the following:
{
"mcpServers": {
"pica": {
"command": "npx",
"args": ["@picahq/pica-mcp"],
"env": {
"PICA_SECRET": "your-pica-secret-key"
}
}
}
}
Build the Docker Image:
docker build -t pica-mcp-server .
Run the Docker Container:
docker run -e PICA_SECRET=your_pica_secret_key pica-mcp-server
To install pica for Claude Desktop automatically via Smithery:
npx -y @smithery/cli install @picahq/pica --client claude
You can deploy this MCP server to Vercel for remote access:
Install dependencies including Vercel adapter:
npm install @vercel/mcp-adapter zod
Deploy to Vercel:
vercel
Configure your MCP client to use the remote server:
https://your-project.vercel.app/api/mcpnpx mcp-remote https://your-project.vercel.app/api/mcpSee DEPLOYMENT.md for detailed Vercel deployment instructions.
Build Email Form:
"Create me a React form component that can send emails using Gmail using Pica"
Linear Dashboard:
"Create a dashboard that displays Linear users and their assigned projects with filtering options using Pica"
QuickBooks Table:
"Build a paginatable table component that fetches and displays QuickBooks invoices with search and sort using Pica"
Slack Integration:
"Create a page with a form that can post messages to multiple Slack channels with message scheduling using Pica"
Gmail Example:
"Get my last 5 emails from Gmail using Pica"
Slack Example:
"Send a slack message to #general channel: 'Meeting in 10 minutes' using Pica"
Shopify Example:
"Get all products from my Shopify store using Pica"
list_pica_integrationsList all available Pica integrations and platforms. Always call this tool first to discover available platforms and connections.
Parameters: None
Returns:
get_pica_platform_actionsGet all available actions for a specific platform.
Parameters:
platform (string, required): Platform name in kebab-case format (e.g., 'ship-station', 'shopify')Returns:
get_pica_action_knowledgeGet comprehensive documentation for a specific action. Must be called before execute_pica_action to understand requirements.
Parameters:
action_id (string, required): Action ID from get_pica_platform_actionsplatform (string, required): Platform name in kebab-case formatReturns:
execute_pica_actionExecute a Pica action to perform operations on third-party platforms. Critical: Only call this when the user wants to execute an action, not when building applications.
Parameters:
platform (string, required): Platform nameaction (object, required): Action object with _id, path, and methodconnectionKey (string, required): Connection key for the platformdata (object, optional): Request body datapathVariables (object, optional): Variables to replace in the pathqueryParams (object, optional): Query parametersheaders (object, optional): Additional headersisFormData (boolean, optional): Send as multipart/form-dataisFormUrlEncoded (boolean, optional): Send as URL-encoded form dataReturns:
requestConfig: Sanitized request configurationresponseData: Actual API response from the platformThe server implements comprehensive error handling:
PICA_SECRETCurrent version: 2.0.0
GPL-3.0
For support, please contact support@picaos.com or visit https://picaos.com
FAQs
A Model Context Protocol Server for Pica
The npm package @picahq/pica-mcp receives a total of 17 weekly downloads. As such, @picahq/pica-mcp popularity was classified as not popular.
We found that @picahq/pica-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Compromised npm package art-template delivered a Coruna-like iOS Safari exploit framework through a watering-hole attack.

Company News
As AI accelerates how code is written and shipped, Socket is scaling to protect the software supply chain from the growing wave of attacks targeting open source dependencies.

Company News
Socket is scaling to defend open source against supply chain attacks as AI accelerates software development.