
Security News
arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.
@withpica/mcp-server
Advanced tools
MCP Server for withPICA — enables AI assistants to interact with your withPICA music catalog
MCP server for withPICA — music catalog management through conversation. Works, recordings, credits, agreements, rights, royalties, enrichment and registration-ready exports, from Claude, ChatGPT, Cursor, or any MCP-compatible client.
Not the same product as
@picahq/mcp. That is Pica / picaos.com, an unrelated API-integrations tool that happens to share the short name. If your assistant starts talking about integrations it never set up, or asks you to paste credentials into a dashboard, you have the other one installed.
claude mcp add withpica -- npx --yes @withpica/mcp-server@latest
Or, in any client that reads an mcpServers config:
{
"mcpServers": {
"withpica": {
"command": "npx",
"args": ["@withpica/mcp-server"]
}
}
}
On stdio (this package), no API key is needed up front. Say "sign me in to withpica" in chat; pica_sign_in emails you a magic link, you click it, and your tools unlock. PICA_API_KEY in the environment also works and skips the link.
On the hosted HTTP transport (https://withpica.com/api/mcp) there is no in-chat sign-in — pica_sign_in and pica_sign_out are stdio-only, because the credential file they write would land on an ephemeral filesystem your client never reads. Connect over OAuth 2.1 instead (dynamic client registration + PKCE S256, discovery at https://withpica.com/.well-known/oauth-protected-resource), or send an API key as a Bearer token. A Bearer caller should call pica_introduce_self first: PICA stamps that declaration onto every audit row that follows, so the owner can later reconstruct what their agent did.
API keys are created and revoked at https://withpica.com/settings?tab=connections.
Over HTTP the server advertises a small meta-tool surface by default — pica_discover → pica_tool_details → pica_execute — so a schema-constrained client is not handed the whole registry at once. Every tool stays callable by name. Add ?layered=0 to the endpoint for the eager list.
Over stdio the full set is listed directly.
pica_skill_list / pica_skill_get load methodologies (catalog-audit, register-my-works, prepare-for-sync) as needed, rather than at handshake.
Read tools are annotated read-only and are safe to call freely. Write tools report what changed. Destructive tools (delete, merge) require a two-step confirmation token and an elevated scope that ordinary agent grants cannot hold.
| variable | required | meaning |
|---|---|---|
PICA_API_KEY | no | skips the magic-link flow |
PICA_API_URL | no | API base URL (default https://withpica.com/api) |
DEBUG | no | verbose logging to stderr (true / 1) |
349 tools, grouped below by the taxonomy pica_discover uses. The server's own tools/list is authoritative — not every registered tool is filed under a category yet, so the names below are a map, not a census.
works — manage your musical works
pica_works_query, pica_works_inspect, pica_works_create, pica_register_set, pica_works_update, pica_works_delete, pica_works_bulk_delete, pica_works_bulk_update, pica_works_bulk_link_artist, pica_works_bulk_add_collaborator, pica_work_writers_add, pica_works_bulk_copy_credits, pica_works_bulk_move_to_performances, pica_works_verify, pica_works_verify_registrations, pica_works_attest, pica_catalog_diligence
people — manage people in your catalog
pica_people_query, pica_people_inspect, pica_people_create, pica_people_update, pica_people_delete, pica_people_bulk_delete, pica_people_split_identity, pica_people_bulk_update_roles, pica_people_bulk_add_tags, pica_group_add_member, pica_group_remove_member, pica_group_list_members, pica_person_list_groups, pica_artist_projects, pica_profile_claims_invite, pica_profile_claims_status
groups — manage group → member relationships on people
pica_group_add_member, pica_group_remove_member, pica_group_list_members, pica_person_list_groups
recordings — manage recordings linked to works
pica_recordings_query, pica_recordings_inspect, pica_recordings_create, pica_recordings_update, pica_recordings_delete, pica_recordings_bulk_reassign_artist
credits — manage work credits, contributors, and first-party recording-side production credits
pica_credits_list, pica_credits_update
sharing — explain why a user or org can see a work, recording, or person — surfaces the chain of reasons (org membership, custody chain, share links, cross-org grants); send works to named recipients via withPICA-branded email
pica_share_trace, pica_share_send
explainability — explain dashboard / briefing count discrepancies — when a number doesn't match what the user sees elsewhere
pica_count_explain
multimedia — manage photos, videos, and media linked to works
pica_multimedia_search, pica_multimedia_create, pica_multimedia_import_url, pica_multimedia_link_youtube, pica_multimedia_link_work, pica_upload
audio — manage and analyze audio files
pica_audio_query, pica_audio_inspect, pica_audio_presigned_upload, pica_audio_complete_upload, pica_audio_analyze, pica_audio_identify, pica_audio_assign, pica_audio_bulk_assign_suggested, pica_audio_dismiss_match, pica_audio_update, pica_audio_bulk_update, pica_audio_delete, pica_upload, pica_audio_pipeline_status
projects — manage albums, EPs, and work groupings
pica_projects_query, pica_projects_inspect, pica_projects_create, pica_projects_update, pica_projects_delete, pica_projects_attach_works, pica_projects_participants, pica_projects_multimedia
releases — manage releases with dates, labels, and UPCs
pica_releases_query, pica_releases_inspect, pica_releases_create, pica_releases_update, pica_releases_delete, pica_releases_move_track, pica_releases_create_with_tracks, pica_releases_completeness_check, pica_releases_attach_track, pica_releases_attach_recording_with_work, pica_releases_detach_track, pica_releases_list_tracks, pica_releases_reorder_tracks, pica_release_show
sessions — track work sessions and studio time
pica_sessions_query, pica_sessions_inspect, pica_sessions_create, pica_sessions_types
notes — create and manage catalog notes
pica_notes_query, pica_notes_inspect, pica_notes_create, pica_notes_delete
duplicates — detect duplicate records and merge them (audio_files can be found but not merged — a duplicate file is deleted)
pica_find_duplicates, pica_merge_duplicates
import — import catalog data from files and streaming services, and see what happened to emails forwarded to PICA
pica_import_fields, pica_import_template, pica_import_analyze, pica_import_validate, pica_import_execute, pica_import_streaming_link, pica_import_documents_query, pica_import_documents_inspect, pica_import_emails_query, pica_import_youtube_link, pica_ingest_statement
export — export catalog data in various formats
pica_export_catalog_csv, pica_export_song_registration, pica_export_industry_ready, pica_export_catalog_asset_report, pica_export_ai_consent, pica_export_snapshot, pica_export_song_dossiers, pica_export_ownership_record, pica_export_rights_proof, pica_export_diligence_pack, pica_download, pica_export_my_data
search — search across the catalog and discover content
pica_search_all, pica_catalog_stats, pica_graph_traverse, pica_discoveries_query, pica_discoveries_review, pica_claim_credit, pica_claim_custody, pica_claim_artist
analytics — provenance, carbon, and catalog analytics
pica_provenance_stats, pica_provenance_work, pica_provenance_certificate, pica_provenance_certificate_get, pica_carbon_footprint, pica_carbon_live, pica_catalog_diligence, pica_run_person_cascade, pica_run_work_cascade, pica_cascade_health, pica_car_preview, pica_audit_list
documents — analyse documents with ai
pica_documents_analyse, pica_documents_query, pica_documents_inspect, pica_documents_link, pica_documents_delete, pica_upload
calendar — view catalog calendar events
pica_calendar_events
publishers — look up and create publishers
pica_publishers_query, pica_publishers_create
briefing — get your daily catalog briefing and dashboard
pica_dashboard_attention, pica_dashboard_briefing, pica_catalog_health, pica_catalog_health_plan, pica_catalog_health_fix, pica_integrity_waive
enrichment — enrich your catalog metadata from external sources
pica_resolve_work, pica_resolve_person, pica_resolve_recording, pica_resolve_release, pica_people_triangulate, pica_enrichment_candidates, pica_enrichment_compare, pica_registrations_compare, pica_enrichment_propose, pica_enrichment_proposal_apply, pica_enrichment_proposal_reject, pica_enrichment_proposals_list, pica_enrichment_proposals_bulk_reject, pica_enrichment_proposals_bulk_apply, pica_enrichment_clear
feedback — report problems and submit feedback to the PICA team — call proactively when you hit a workflow gap or the user says 'this is broken'
pica_report_issue, pica_my_reported_issues, pica_submit_feedback
onboarding — acknowledge MCP onboarding for OAuth-arrived users — call after walking the user through identity, security, and intent
pica_acknowledge_onboarding
agent hygiene — declare who you are, log workflow milestones, read what's been getting done, and check whether a deferred write has been approved — agent observability
pica_introduce_self, pica_outcome_log, pica_outcomes_recent, pica_approval_status
signup — create a new withPICA account from inside the agent — for users without a connection key. existing users use pica_sign_in instead.
pica_signup_start
memory — save and recall workspace memories across sessions; review your recent assistant activity
pica_memory_list, pica_memory_search, pica_memory_save, pica_memory_delete, pica_memory_update, pica_my_recent_questions
skills — discover and load PICA's named methodologies (catalog-audit, register-my-works, prepare-for-sync, etc.) — triggered by phrases like 'audit my catalog'
pica_skill_list, pica_skill_get
platform — platform release notes for the PICA MCP server — what's new, what changed, version history. NOT for catalog activity (use briefing / works / recordings for that)
pica_release_notes
account — check storage and integrations; connect your own cloud storage (BYOC) or revert to PICA-managed
pica_storage_status, pica_storage_configure_start, pica_storage_disconnect, pica_delete_my_account
subscription — what does pica cost, how do I pay, and what is pica holding — read your billing state and get a pay link
pica_subscription_status, pica_billing_pay, pica_subscription_manage
profile — manage your user, organisation, and directory profile
pica_user_profile, pica_organisation_profile, pica_directory_settings, pica_update_my_identity, pica_update_organisation_profile, pica_users_get_my_profile, pica_users_set_handle, pica_users_clear_handle, pica_users_set_bio, pica_users_set_avatar_url, pica_users_import_bio_from_person, pica_users_find_by_handle
privacy — self-service privacy & account controls — read/update marketing opt-ins, request GDPR data export, delete your account
pica_get_privacy_settings, pica_update_privacy_settings, pica_export_my_data, pica_delete_my_account, pica_export_ai_consent
uploads — upload files to the platform and share them out via secure delivery links
pica_upload, pica_upload_file, pica_upload_complete, pica_file_deliver, pica_file_revoke_delivery
agreements — manage agreements, agreement templates, and agreement types
pica_agreements_query, pica_agreements_inspect, pica_agreements_create, pica_agreements_create_from_template, pica_agreements_update, pica_agreements_delete, pica_agreements_link_work, pica_agreements_send_for_signature, pica_agreement_source_splits, pica_agreement_templates_duplicate, pica_agreement_templates_render, pica_agreement_templates_set_default, pica_agreement_types_query, pica_agreement_types_inspect, pica_agreement_types_create, pica_agreement_types_update, pica_agreement_types_delete
collaborators — invite, accept, dispute, and claim-by-code catalog collaborators
pica_collaborators_invite, pica_collaborators_invite_bulk, pica_collaborators_invite_resend, pica_collaborators_invites_list, pica_collaborators_incoming_list, pica_collaborators_accept, pica_collaborators_dispute, pica_disputes_list, pica_collaborators_claim_by_code, pica_collaborators_decline_by_code, pica_collaborators_invite_status, pica_collaborators_invite_revoke, pica_collaborations_received, pica_collaborators_counter_propose, pica_collaborators_accept_counter, pica_collaborators_decline_counter, pica_collaborators_counter_back
consent — read what the catalogue is cleared for under AI/usage consent, and who is blocking
pica_consent_readiness, pica_export_ai_consent
custody — manage catalog custody claims and reconciliation
pica_custody_list, pica_custody_history, pica_custody_claim, pica_custody_respond, pica_custody_reconcile, pica_custody_resolve_pending, pica_recording_custody_assign, pica_recording_provenance, pica_recording_samples_list, pica_recording_samples_add, pica_recording_samples_set_status, pica_recording_samples_remove, pica_claim_custody
physical assets — manage physical assets (master tapes, hardware, artefacts)
pica_physical_assets_query, pica_physical_assets_inspect, pica_physical_assets_create, pica_physical_assets_update, pica_physical_assets_delete, pica_physical_assets_export, pica_physical_assets_stats, pica_physical_assets_link_work, pica_physical_assets_link_recording, pica_physical_assets_unlink_work, pica_physical_assets_unlink_recording
recording splits — manage recording (master) splits between contributors
pica_recording_splits_list, pica_recording_splits_create, pica_recording_splits_update, pica_recording_splits_end, pica_recording_splits_verify, pica_split_sheet_generate, pica_recording_credits_update
royalties statements — view royalties and ingested statements
pica_royalties_list, pica_royalties_get, pica_statements_query, pica_statements_inspect, pica_ingest_statement, pica_statements_pending, pica_statement_ingest_document, pica_royalties_blockers, pica_royalties_unmatched, pica_royalties_attribute
rights — programmable rights — propose a song, master or share rule for the parties to confirm, check who has confirmed, see what money would be held and why, and what income would pay each party (computed, never paid)
pica_rights_inspect, pica_rights_status, pica_rights_propose, pica_rights_statements, pica_rights_record_income
selections — save, recall, and resolve named catalog selections — persisted predicates over the catalogue with an honest coverage report
pica_selections_create, pica_selections_query, pica_selections_inspect, pica_selections_update, pica_selections_delete
share links — create, inspect, update, and delete share links for catalog content
pica_share_links_create, pica_share_links_query, pica_share_links_inspect, pica_share_links_update, pica_share_links_delete
access simulation — simulate who would see what before mutating — share-link previews and access decisions
pica_access_simulate
split sheets — generate, send, and look up split sheets
pica_split_sheet_generate, pica_split_sheet_send, pica_split_sheet_get, pica_split_sheet_list
licensing — submit, list, and respond to license enquiries; search for sync
pica_submit_license_enquiry, pica_get_license_enquiry, pica_list_license_enquiries, pica_update_license_enquiry_status, pica_search_for_sync
bookings — search, list, and respond to internal-team booking enquiries (session/production requests)
pica_bookings_query, pica_bookings_update
sync placements — manage sync placements (films/TV/ads/games licensing your works) — placement records, evidence, verification state
pica_sync_placements_query, pica_sync_placements_inspect, pica_sync_placements_create, pica_sync_placements_update, pica_sync_placements_delete, pica_sync_placements_cite
notifications — list and schedule notifications to users and people
pica_notifications_list, pica_notifications_mark_read, pica_notify_user, pica_notify_user_at, pica_notify_user_cancel, pica_notify_user_list_pending, pica_notify_person, pica_notifications_recent, pica_notification_acknowledge
messaging — send and resend messages to collaborators and contacts
pica_send_message, pica_send_resend, pica_send_query, pica_send_cancel
agent identity — manage AI agent identities, grants, and activity
pica_create_agent_identity, pica_issue_agent_grant, pica_revoke_agent_grant, pica_list_my_agent_grants, pica_get_agent_activity
telegram — connect and inspect Telegram channel for the workspace
pica_telegram_connect, pica_telegram_status, pica_telegram_config
labels — look up and create record labels / distributors, and invite them to claim their organisation
pica_labels_query, pica_labels_create, pica_party_claim_invite, pica_party_claim_status
shows — log live shows and tour credits, and confirm setlist matches against your catalogue
pica_log_show, pica_shows_query, pica_setlist_match
Generated for @withpica/mcp-server@2.100.0. © 2024-2026 Withpica Ltd. All rights reserved. MIT licensed.
FAQs
MCP Server for withPICA — enables AI assistants to interact with your withPICA music catalog
The npm package @withpica/mcp-server receives a total of 473 weekly downloads. As such, @withpica/mcp-server popularity was classified as not popular.
We found that @withpica/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.