
Security News
GPT-6 Astra Attempts Supply Chain Attacks Against Open Source Maintainers in Testing
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.
@withpica/mcp-server
Advanced tools
MCP Server for withPICA — enables AI assistants to interact with your withPICA music catalog
Model Context Protocol (MCP) server for withPICA. Enables any MCP-compatible AI assistant to interact with your withPICA music catalog.
The Model Context Protocol (MCP) is an open standard that enables AI assistants to securely access external data and functionality. With this MCP server, any MCP-compatible AI can interact with your withPICA catalog.
Works Management (8 tools)
pica_works_list - List musical workspica_works_get - Get work detailspica_works_create - Create new workpica_works_update - Update workpica_works_delete - Delete workpica_works_verify - Verify workpica_works_search - Search workspica_works_bulk_delete - Delete multiple worksPeople Management (8 tools)
pica_people_list - List peoplepica_people_get - Get person detailspica_people_create - Create new personpica_people_update - Update personpica_people_delete - Delete personpica_people_search - Search peoplepica_people_enrich_isni - Enrich from ISNIpica_people_enrich_musicbrainz - Enrich from MusicBrainzRecordings Management (5 tools)
pica_recordings_query - List/search recordings; filter by work_id (replaces removed pica_recordings_by_work)pica_recordings_inspect - Get recording details (sections-based)pica_recordings_create - Create new recordingpica_recordings_update - Update recordingpica_recordings_delete - Delete recordingSearch & Analytics (2 tools)
pica_search_all - Search across all entitiespica_catalog_stats - Get catalog statisticsRead-only access to catalog data:
works://list - All workspeople://list - All peoplerecordings://list - All recordingscatalog://stats - Catalog statisticsPre-configured prompts for common tasks:
analyze-catalog - Comprehensive catalog analysisfind-duplicates - Find duplicate entriesenrich-metadata - Identify enrichment opportunitiesverify-works - Review unverified worksnpm install -g @withpica/mcp-server
cd mcp-server
npm install
npm run build
npm link
Add to your Claude Desktop configuration file:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"pica": {
"command": "npx",
"args": ["-y", "@withpica/mcp-server"],
"env": {
"PICA_API_KEY": "your-api-key-here"
}
}
}
}
The setup process is similar for any MCP-compatible tool:
npx -y @withpica/mcp-serverPICA_API_KEY environment variableUser: "Show me my musical works"
AI uses: pica_works_list
Result: List of works with titles, ISWCs, verification status, etc.
User: "Create a new composition called 'Moonlight Sonata No. 2'"
AI uses: pica_works_create with appropriate parameters
Result: New work created with generated ID
User: "Analyze my catalog"
AI uses: analyze-catalog prompt
AI calls:
pica_catalog_stats - Get statisticspica_works_list - Review workspica_people_list - Review peopleResult: Comprehensive analysis with insights and recommendations
User: "Find duplicate entries"
AI uses: find-duplicates prompt
AI calls:
pica_works_list - Get all workspica_people_list - Get all peopleResult: List of potential duplicates with merge recommendations
User: "Enrich Mozart's profile from ISNI"
AI uses: pica_people_enrich_isni with person ID and ISNI
Result: Person record updated with enriched data from ISNI
PICA_API_KEY (required) - Your PICA API keyPICA_API_URL (optional) - API base URL (default: https://withpica.com/api)DEBUG (optional) - Enable debug logging (set to 'true' or '1')npm run build
npm run dev
PICA_API_KEY=your-key npm run dev
Make sure you've set the API key in your MCP server configuration:
{
"env": {
"PICA_API_KEY": "your-actual-api-key"
}
}
MCP Server for withPICA
├── Protocol Handler (MCP standard)
├── Authentication (API key)
├── Tools (24 AI-callable functions)
│ ├── Works Management (8)
│ ├── People Management (8)
│ ├── Recordings Management (6)
│ └── Search & Analytics (2)
├── Resources (4 data providers)
└── Prompts (4 workflows)
MIT
Built with:
FAQs
MCP Server for withPICA — enables AI assistants to interact with your withPICA music catalog
The npm package @withpica/mcp-server receives a total of 625 weekly downloads. As such, @withpica/mcp-server popularity was classified as not popular.
We found that @withpica/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.

Product
Socket can now send alerts and supply chain attack notifications to Microsoft Teams, with filters that route the right updates to each channel.

Security News
pnpm 12 rewrites the package manager in Rust, cutting install times by up to 90% while preserving pnpm 11 workflows and lockfiles.