Picsart MCP (remote)
Score = points from 5 automated checks. Not a quality or security rating. Methodology
- Install20/20
- Handshake5/30
- Maintenance15/25
- Docs15/15
- License0/10
Vendor-hosted
What we probed (2026-11-01 UTC, no credentials): an MCP initialize POST to https://api.picsart.com/gen-ai/mcp returned HTTP 401 with an OAuth challenge (WWW-Authenticate resource_metadata https://api.picsart.com/gen-ai/.well-known/oauth-protected-resource); that metadata lists authorization server https://auth.picsart.com/api. We did not sign in, so no tools were listed or called. Scored under the sign-in rule.
Picsart-hosted MCP; OAuth sign-in required. Listed under the vendor-hosted rule (Our review, Oct 31, 2026).
Sources: https://picsart.com/gen-ai-mcp/ · https://picsart.github.io/picsart-mcp-cli-docs/changelog
Transport: Streamable HTTP · not tested
Score 55/100 · Tools — · Token cost — · Compare · Last tested 2026-11-01 · Server version not reported · Remote endpoint https://api.picsart.com/gen-ai/mcp (streamable-http)
Summary: Picsart MCP (remote) requires credentials or a backing service before it will list tools.
Evidence summary
- Handshake
- auth-gated
- Tools listed
- —
- Context cost
- Not measured ranking
- Login
- Needs OAuth sign-in
- Tested
- 2026-11-01
Test results
| Test | Result | Points | Evidence |
|---|---|---|---|
| install | pass | 20 | Endpoint https://api.picsart.com/gen-ai/mcp reachable over streamable-http (HTTP 401) in 0.1s; no install step for remote servers. |
| handshake | auth-gated | 5 | Needs credentials: vendor-hosted, OAuth sign-in required. HTTP 401 with OAuth challenge (WWW-Authenticate resource_metadata https://api.picsart.com/gen-ai/.well-known/oauth-protected-resource; metadata lists authorization server https://auth.picsart.com/api). We do not sign in; not counted as working until a credentialed test exists. |
| maintenance | partial | 15 | Vendor-hosted rule: scored from dated vendor changelog 2026-09-29 (https://picsart.github.io/picsart-mcp-cli-docs/changelog), 33 days before test. Registry: com.picsart.api/gen-ai is in the official MCP registry with this remote (not used for scoring). |
| docs | pass | 15 | official MCP docs page; states the endpoint URL; client setup instructions. Vendor-hosted rule: scored from the vendor's official MCP docs (https://picsart.com/gen-ai-mcp/). |
| license | fail | 0 | Vendor-hosted service with no public repo: no license to cite, so 0 (rule: no points without a cited source). |
Local-model readiness
Not yet tested (no tools/list response without credentials).
What we tested and what we didn't
Tested on 2026-11-01
- We attempted an MCP initialize to the vendor's hosted endpoint with no credentials and got HTTP 401, so we never reached the tool list (Method details:
initializePOST answered 401;tools/listnot sent) - Auth response: HTTP 401, WWW-Authenticate resource_metadata https://api.picsart.com/gen-ai/.well-known/oauth-protected-resource, OAuth metadata lists authorization server https://auth.picsart.com/api. Login is an OAuth sign-in; we did not sign in
- Vendor docs: official MCP docs page; states the endpoint URL; client setup instructions (15/15)
- Maintenance: dated vendor source, dated vendor changelog 2026-09-29 (15/25)
- License: a hosted service has no license to cite (0/10)
Not tested
- Security: not audited (hosted service; no code to review, no permission or data-flow analysis)
- Behaviour after signing in, or with a real account
- Source code, repository activity or an open-source license (none published for the hosted service)
- Performance, rate limits or load
- Real tasks (no functional task runs yet)
Methodology: how we test (vendor-hosted rule). A high score means it responds and its vendor documents and dates it, not that it is safe to give it access to your data.
Known security issues
Not yet checked.
Monthly roundup: MCP security issues, October 2026.
Tool list changes
No tool list: this server did not list tools without credentials in our test, so tool changes are not tracked.
Raw test record (JSON)
{
"name": "picsart-remote",
"version": null,
"registry": "remote",
"status": "auth-gated",
"tested": "2026-11-01",
"tools_count": null,
"tools_schema_tokens_est": null,
"deprecated": false,
"archived": null,
"tests": {
"install": [
"pass",
20,
"Endpoint https://api.picsart.com/gen-ai/mcp reachable over streamable-http (HTTP 401) in 0.1s; no install step for remote servers."
],
"handshake": [
"auth-gated",
5,
"Needs credentials: vendor-hosted, OAuth sign-in required. HTTP 401 with OAuth challenge (WWW-Authenticate resource_metadata https://api.picsart.com/gen-ai/.well-known/oauth-protected-resource; metadata lists authorization server https://auth.picsart.com/api). We do not sign in; not counted as working until a credentialed test exists."
],
"maintenance": [
"partial",
15,
"Vendor-hosted rule: scored from dated vendor changelog 2026-09-29 (https://picsart.github.io/picsart-mcp-cli-docs/changelog), 33 days before test. Registry: com.picsart.api/gen-ai is in the official MCP registry with this remote (not used for scoring)."
],
"docs": [
"pass",
15,
"official MCP docs page; states the endpoint URL; client setup instructions. Vendor-hosted rule: scored from the vendor's official MCP docs (https://picsart.com/gen-ai-mcp/)."
],
"license": [
"fail",
0,
"Vendor-hosted service with no public repo: no license to cite, so 0 (rule: no points without a cited source)."
]
}
}Install
https://api.picsart.com/gen-ai/mcp
Tools listed
Not available (handshake did not complete without credentials).
Quick config
{
"mcpServers": {
"picsart-mcp-remote": {
"type": "http",
"url": "https://api.picsart.com/gen-ai/mcp"
}
}
}Add to config Opens the config generator with this server selected.
Setup
Without credentials it said (verbatim): Needs credentials: vendor-hosted, OAuth sign-in required. HTTP 401 with OAuth challenge (WWW-Authenticate resource_metadata https://api.picsart.com/gen-ai/.well-known/oauth-protected-resource; metadata lists authorization server https://auth.picsart.com/api). We do not sign in; not counted as working until a credentialed test exists.
- Install. No install step: it is a remote server at https://api.picsart.com/gen-ai/mcp.
- Configure. Add the mcpServers entry below to your MCP client config.
- Verify. Restart the client and check that tools/list returns tools. In our test it did not list tools without credentials.
{
"mcpServers": {
"picsart-mcp-remote": {
"type": "http",
"url": "https://api.picsart.com/gen-ai/mcp"
}
}
}Not tested with credentials We have not tested this with real credentials.
Test history
No dated events yet.
Related: MCP servers that need an OAuth sign-in · How to secure AI API keys
FAQ
Is Picsart MCP (remote) deprecated?
No. picsart-remote was not deprecated or archived when we last tested it on 2026-11-01.
What replaces Picsart MCP (remote)?
Nothing; Picsart MCP (remote) is not deprecated as of 2026-11-01.
Does Picsart MCP (remote) need an API key?
Not an API key: it needs an OAuth sign-in. Without signing in, the endpoint returned HTTP 401 with an OAuth challenge and did not list tools.
Embed the badge
Every tested server gets a free embeddable badge. It shows the current score and test date and expires after 90 days. Testing is free; payment never changes a score.