
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
@withpica/mcp-server
Advanced tools
MCP Server for withPICA — enables AI assistants to interact with your withPICA music catalog
MCP server for withPICA — music catalog management through conversation. Works, recordings, credits, agreements, rights, royalties, enrichment and registration-ready exports, from Claude, ChatGPT, Cursor, or any MCP-compatible client.
Not the same product as
@picahq/mcp. That is Pica / picaos.com, an unrelated API-integrations tool that happens to share the short name. If your assistant starts talking about integrations it never set up, or asks you to paste credentials into a dashboard, you have the other one installed.
claude mcp add withpica -- npx --yes @withpica/mcp-server@latest
Or, in any client that reads an mcpServers config:
{
"mcpServers": {
"withpica": {
"command": "npx",
"args": ["@withpica/mcp-server"]
}
}
}
On stdio (this package), no API key is needed up front. Say "sign me in to withpica" in chat; pica_sign_in emails you a magic link, you click it, and your tools unlock. PICA_API_KEY in the environment also works and skips the link.
On the hosted HTTP transport (https://withpica.com/api/mcp) there is no in-chat sign-in — pica_sign_in and pica_sign_out are stdio-only, because the credential file they write would land on an ephemeral filesystem your client never reads. Connect over OAuth 2.1 instead (dynamic client registration + PKCE S256, discovery at https://withpica.com/.well-known/oauth-protected-resource), or send an API key as a Bearer token. A Bearer caller should call pica_introduce_self first: PICA stamps that declaration onto every audit row that follows, so the owner can later reconstruct what their agent did.
API keys are created and revoked at https://withpica.com/settings?tab=connections.
Over HTTP the server advertises a small meta-tool surface by default — pica_discover → pica_tool_details → pica_execute — so a schema-constrained client is not handed the whole registry at once. Every tool stays callable by name. Add ?layered=0 to the endpoint for the eager list.
Over stdio the full set is listed directly.
pica_skill_list / pica_skill_get load methodologies (catalog-audit, register-my-works, prepare-for-sync) as needed, rather than at handshake.
Read tools are annotated read-only and are safe to call freely. Write tools report what changed. Destructive tools (delete, merge) require a two-step confirmation token and an elevated scope that ordinary agent grants cannot hold.
| variable | required | meaning |
|---|---|---|
PICA_API_KEY | no | skips the magic-link flow |
PICA_API_URL | no | API base URL (default https://withpica.com/api) |
DEBUG | no | verbose logging to stderr (true / 1) |
337 tools, grouped below by the taxonomy pica_discover uses. The server's own tools/list is authoritative — not every registered tool is filed under a category yet, so the names below are a map, not a census.
works — manage your musical works
pica_works_query, pica_works_inspect, pica_works_create, pica_register_set, pica_works_update, pica_works_delete, pica_works_bulk_delete, pica_works_bulk_update, pica_works_bulk_link_artist, pica_works_bulk_add_collaborator, pica_work_writers_add, pica_works_bulk_copy_credits, pica_works_bulk_move_to_performances, pica_works_verify, pica_works_verify_registrations, pica_works_attest, pica_catalog_diligence
people — manage people in your catalog
pica_people_query, pica_people_inspect, pica_people_create, pica_people_update, pica_people_delete, pica_people_bulk_delete, pica_people_bulk_update_roles, pica_people_bulk_add_tags, pica_group_add_member, pica_group_remove_member, pica_group_list_members, pica_person_list_groups, pica_artist_projects
groups — manage group → member relationships on people
pica_group_add_member, pica_group_remove_member, pica_group_list_members, pica_person_list_groups
recordings — manage recordings linked to works
pica_recordings_query, pica_recordings_inspect, pica_recordings_create, pica_recordings_update, pica_recordings_delete, pica_recordings_bulk_reassign_artist
credits — manage work credits, contributors, and first-party recording-side production credits
pica_credits_list, pica_credits_update
sharing — explain why a user or org can see a work, recording, or person — surfaces the chain of reasons (org membership, custody chain, share links, cross-org grants); send works to named recipients via withPICA-branded email
pica_share_trace, pica_share_send
explainability — explain dashboard / briefing count discrepancies — when a number doesn't match what the user sees elsewhere
pica_count_explain
multimedia — manage photos, videos, and media linked to works
pica_multimedia_search, pica_multimedia_create, pica_multimedia_import_url, pica_multimedia_link_youtube, pica_multimedia_link_work, pica_upload
audio — manage and analyze audio files
pica_audio_query, pica_audio_inspect, pica_audio_presigned_upload, pica_audio_complete_upload, pica_audio_analyze, pica_audio_identify, pica_audio_assign, pica_audio_bulk_assign_suggested, pica_audio_dismiss_match, pica_audio_update, pica_audio_delete, pica_upload, pica_audio_pipeline_status
projects — manage albums, EPs, and work groupings
pica_projects_query, pica_projects_inspect, pica_projects_create, pica_projects_update, pica_projects_delete, pica_projects_attach_works, pica_projects_participants, pica_projects_multimedia
releases — manage releases with dates, labels, and UPCs
pica_releases_query, pica_releases_inspect, pica_releases_create, pica_releases_update, pica_releases_delete, pica_releases_move_track, pica_releases_create_with_tracks, pica_releases_completeness_check, pica_releases_attach_track, pica_releases_attach_recording_with_work, pica_releases_detach_track, pica_releases_list_tracks, pica_releases_reorder_tracks, pica_release_show
sessions — track work sessions and studio time
pica_sessions_query, pica_sessions_inspect, pica_sessions_create, pica_sessions_types
notes — create and manage catalog notes
pica_notes_query, pica_notes_inspect, pica_notes_create, pica_notes_delete
duplicates — detect duplicate records and merge them (audio_files can be found but not merged — a duplicate file is deleted)
pica_find_duplicates, pica_merge_duplicates
import — import catalog data from files and streaming services
pica_import_fields, pica_import_template, pica_import_analyze, pica_import_validate, pica_import_execute, pica_import_streaming_link, pica_import_documents_query, pica_import_documents_inspect, pica_import_youtube_link, pica_ingest_statement
export — export catalog data in various formats
pica_export_catalog_csv, pica_export_song_registration, pica_export_industry_ready, pica_export_catalog_asset_report, pica_export_ai_consent, pica_export_snapshot, pica_export_song_dossiers, pica_export_ownership_record, pica_export_rights_proof, pica_export_diligence_pack, pica_download, pica_export_my_data
search — search across the catalog and discover content
pica_search_all, pica_catalog_stats, pica_graph_traverse, pica_discoveries_query, pica_discoveries_review, pica_claim_credit, pica_claim_custody, pica_claim_artist
analytics — provenance, carbon, and catalog analytics
pica_provenance_stats, pica_provenance_work, pica_provenance_certificate, pica_provenance_certificate_get, pica_carbon_footprint, pica_carbon_live, pica_catalog_diligence, pica_run_person_cascade, pica_run_work_cascade, pica_cascade_health, pica_car_preview, pica_audit_list
documents — analyse documents with ai
pica_documents_analyse, pica_documents_query, pica_documents_inspect, pica_documents_link, pica_documents_delete, pica_upload
calendar — view catalog calendar events
pica_calendar_events
publishers — look up and create publishers
pica_publishers_query, pica_publishers_create
briefing — get your daily catalog briefing and dashboard
pica_dashboard_attention, pica_dashboard_briefing, pica_catalog_health, pica_catalog_health_plan, pica_catalog_health_fix, pica_integrity_waive
enrichment — enrich your catalog metadata from external sources
pica_resolve_work, pica_resolve_person, pica_resolve_recording, pica_resolve_release, pica_people_triangulate, pica_enrichment_candidates, pica_enrichment_compare, pica_registrations_compare, pica_enrichment_propose, pica_enrichment_proposal_apply, pica_enrichment_proposal_reject, pica_enrichment_proposals_list, pica_enrichment_proposals_bulk_reject, pica_enrichment_proposals_bulk_apply, pica_enrichment_clear
feedback — report problems and submit feedback to the PICA team — call proactively when you hit a workflow gap or the user says 'this is broken'
pica_report_issue, pica_my_reported_issues, pica_submit_feedback
onboarding — acknowledge MCP onboarding for OAuth-arrived users — call after walking the user through identity, security, and intent
pica_acknowledge_onboarding
agent hygiene — declare who you are, log workflow milestones, read what's been getting done, and check whether a deferred write has been approved — agent observability
pica_introduce_self, pica_outcome_log, pica_outcomes_recent, pica_approval_status
signup — create a new withPICA account from inside the agent — for users without a connection key. existing users use pica_sign_in instead.
pica_signup_start
memory — save and recall workspace memories across sessions; review your recent assistant activity
pica_memory_list, pica_memory_search, pica_memory_save, pica_memory_delete, pica_memory_update, pica_my_recent_questions
skills — discover and load PICA's named methodologies (catalog-audit, register-my-works, prepare-for-sync, etc.) — triggered by phrases like 'audit my catalog'
pica_skill_list, pica_skill_get
platform — platform release notes for the PICA MCP server — what's new, what changed, version history. NOT for catalog activity (use briefing / works / recordings for that)
pica_release_notes
account — check storage and integrations; connect your own cloud storage (BYOC) or revert to PICA-managed
pica_storage_status, pica_storage_configure_start, pica_storage_disconnect, pica_delete_my_account
subscription — what does pica cost, how do I pay, and what is pica holding — read your billing state and get a pay link
pica_subscription_status, pica_billing_pay, pica_subscription_manage
profile — manage your user, organisation, and directory profile
pica_user_profile, pica_organisation_profile, pica_directory_settings, pica_update_my_identity, pica_update_organisation_profile, pica_users_get_my_profile, pica_users_set_handle, pica_users_clear_handle, pica_users_set_bio, pica_users_set_avatar_url, pica_users_import_bio_from_person, pica_users_find_by_handle
privacy — self-service privacy & account controls — read/update marketing opt-ins, request GDPR data export, delete your account
pica_get_privacy_settings, pica_update_privacy_settings, pica_export_my_data, pica_delete_my_account, pica_export_ai_consent
uploads — upload files to the platform and share them out via secure delivery links
pica_upload, pica_upload_file, pica_upload_complete, pica_file_deliver, pica_file_revoke_delivery
agreements — manage agreements, agreement templates, and agreement types
pica_agreements_query, pica_agreements_inspect, pica_agreements_create, pica_agreements_create_from_template, pica_agreements_update, pica_agreements_delete, pica_agreements_link_work, pica_agreements_send_for_signature, pica_agreement_source_splits, pica_agreement_templates_duplicate, pica_agreement_templates_render, pica_agreement_templates_set_default, pica_agreement_types_query, pica_agreement_types_inspect, pica_agreement_types_create, pica_agreement_types_update, pica_agreement_types_delete
collaborators — invite, accept, dispute, and claim-by-code catalog collaborators
pica_collaborators_invite, pica_collaborators_invite_bulk, pica_collaborators_invite_resend, pica_collaborators_invites_list, pica_collaborators_incoming_list, pica_collaborators_accept, pica_collaborators_dispute, pica_disputes_list, pica_collaborators_claim_by_code, pica_collaborators_decline_by_code, pica_collaborators_invite_status, pica_collaborators_invite_revoke, pica_collaborations_received, pica_collaborators_counter_propose, pica_collaborators_accept_counter, pica_collaborators_decline_counter, pica_collaborators_counter_back
consent — read what the catalogue is cleared for under AI/usage consent, and who is blocking
pica_consent_readiness, pica_export_ai_consent
custody — manage catalog custody claims and reconciliation
pica_custody_list, pica_custody_history, pica_custody_claim, pica_custody_respond, pica_custody_reconcile, pica_custody_resolve_pending, pica_recording_custody_assign, pica_recording_provenance, pica_recording_samples_list, pica_recording_samples_add, pica_recording_samples_set_status, pica_recording_samples_remove, pica_claim_custody
physical assets — manage physical assets (master tapes, hardware, artefacts)
pica_physical_assets_query, pica_physical_assets_inspect, pica_physical_assets_create, pica_physical_assets_update, pica_physical_assets_delete, pica_physical_assets_export, pica_physical_assets_stats, pica_physical_assets_link_work, pica_physical_assets_link_recording, pica_physical_assets_unlink_work, pica_physical_assets_unlink_recording
recording splits — manage recording (master) splits between contributors
pica_recording_splits_list, pica_recording_splits_create, pica_recording_splits_verify, pica_split_sheet_generate, pica_recording_credits_update
royalties statements — view royalties and ingested statements
pica_royalties_summary, pica_royalties_list, pica_royalties_get, pica_statements_query, pica_statements_inspect, pica_ingest_statement, pica_statements_pending, pica_statement_ingest_document, pica_royalties_unmatched, pica_royalties_attribute
selections — save, recall, and resolve named catalog selections — persisted predicates over the catalogue with an honest coverage report
pica_selections_create, pica_selections_query, pica_selections_inspect, pica_selections_update, pica_selections_delete
share links — create, inspect, update, and delete share links for catalog content
pica_share_links_create, pica_share_links_query, pica_share_links_inspect, pica_share_links_update, pica_share_links_delete
access simulation — simulate who would see what before mutating — share-link previews and access decisions
pica_access_simulate
split sheets — generate, send, and look up split sheets
pica_split_sheet_generate, pica_split_sheet_send, pica_split_sheet_get, pica_split_sheet_list
licensing — submit, list, and respond to license enquiries; search for sync
pica_submit_license_enquiry, pica_get_license_enquiry, pica_list_license_enquiries, pica_update_license_enquiry_status, pica_search_for_sync
bookings — search, list, and respond to internal-team booking enquiries (session/production requests)
pica_bookings_query, pica_bookings_update
sync placements — manage sync placements (films/TV/ads/games licensing your works) — placement records, evidence, verification state
pica_sync_placements_query, pica_sync_placements_inspect, pica_sync_placements_create, pica_sync_placements_update, pica_sync_placements_delete, pica_sync_placements_cite
notifications — list and schedule notifications to users and people
pica_notifications_list, pica_notifications_mark_read, pica_notify_user, pica_notify_user_at, pica_notify_user_cancel, pica_notify_user_list_pending, pica_notify_person, pica_notifications_recent, pica_notification_acknowledge
messaging — send and resend messages to collaborators and contacts
pica_send_message, pica_send_resend, pica_send_query, pica_send_cancel
agent identity — manage AI agent identities, grants, and activity
pica_create_agent_identity, pica_issue_agent_grant, pica_revoke_agent_grant, pica_list_my_agent_grants, pica_get_agent_activity
telegram — connect and inspect Telegram channel for the workspace
pica_telegram_connect, pica_telegram_status, pica_telegram_config
labels — look up and create record labels / distributors, and invite them to claim their organisation
pica_labels_query, pica_labels_create, pica_party_claim_invite, pica_party_claim_status
shows — log live shows and tour credits, and confirm setlist matches against your catalogue
pica_log_show, pica_shows_query, pica_setlist_match
Generated for @withpica/mcp-server@2.97.5. © 2024-2026 Withpica Ltd. All rights reserved. MIT licensed.
FAQs
MCP Server for withPICA — enables AI assistants to interact with your withPICA music catalog
The npm package @withpica/mcp-server receives a total of 399 weekly downloads. As such, @withpica/mcp-server popularity was classified as not popular.
We found that @withpica/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.