
Research
/Security News
737 Chrome VPN Extensions Linked to Brand Impersonation and Browser Traffic Redirection
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.
@picsha-ai/mcp-server
Advanced tools
The official Model Context Protocol (MCP) proxy server for the Picsha AI platform.
This package provides a secure, local stdio proxy that connects your LLM and AI agents (like Claude Desktop or OpenClaw) directly to your Picsha AI environment. By running locally, the server is natively enabled to securely read local files and utilize Picsha's direct-to-S3 upload pipelines.
You do not need to install this package permanently. You can run it dynamically via npx.
Add the following to your claude_desktop_config.json or openclaw.json:
{
"mcpServers": {
"picsha-ai": {
"command": "npx",
"args": [
"-y",
"@picsha-ai/mcp-server@latest"
],
"env": {
"PICSHA_API_TOKEN": "<YOUR_API_TOKEN_HERE>"
}
}
}
}
You can generate a PICSHA_API_TOKEN via your Picsha Admin Dashboard. By default, this token grants the AI agent administrative access across your entire organization's library.
Sandbox Mode (User Isolation): If you are embedding this MCP server for end-user Slack bots or customer facing SaaS products, you can dynamically restrict the agent's context to a specific user by injecting their User ID as an environment variable:
"env": {
"PICSHA_API_TOKEN": "<YOUR_API_TOKEN>",
"PICSHA_EXTERNAL_USER_ID": "user_123"
}
This MCP server provides the following capabilities to your LLM:
search_assets: Perform exact or hybrid semantic vector searches across your media.get_asset: Retrieve deep metadata profiles for resources.upload_asset: Automatically infers MIME types and effortlessly uploads local files into Picsha's asynchronous AI ingest pipeline.generate_render_url: Provides on-the-fly image transformations and AI generative fill parameters.trigger_url_ingest: Ingest public web media directly into the DAM.moderate_asset, link_assets, create_dam_group, update_asset, delete_asset ...and more!If you are using macOS and Claude Desktop gets stuck connecting to the MCP (or the tools never show up), it is likely due to npx dropping standard input/output streams. To fix this:
npx:
npm install -g @picsha-ai/mcp-server
claude_desktop_config.json to point directly to the installed binary:
{
"mcpServers": {
"picsha-ai": {
"command": "picsha-ai-mcp",
"args": [],
"env": {
"PICSHA_API_TOKEN": "<YOUR_API_TOKEN_HERE>"
}
}
}
}
FAQs
MCP Server for the Picsha AI API
The npm package @picsha-ai/mcp-server receives a total of 276 weekly downloads. As such, @picsha-ai/mcp-server popularity was classified as not popular.
We found that @picsha-ai/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
The campaign amassed more than 75,000 installs by targeting Russian-speaking users seeking access to blocked services.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.