# Pica Community Edition for connecting AI agents through MCP

> Pica Community Edition is a Rust-based repository for the former cloud-backed agent tooling platform, with the CLI and skill setup connecting agents to integrations through MCP. The repository itself says development has moved to a private, cloud-hosted platform, so its open code is not the current product path.

**withoneai/pica** — The community edition of Pica, the agentic tooling platform.

- Repository: https://github.com/withoneai/pica
- Website: https://picaos.com
- Stars: 1,485 · Forks: 93
- Language: Rust
- License: GPL-3.0
- Published: 2026-10-16 · Updated: 2026-10-16 · Language: en
- Canonical page: https://hysenlabs.com/projects/withoneai-pica

## Pica Community Edition targets hosted agent integrations

Pica Community Edition addresses a specific problem in agent applications: connecting an AI agent to external services without making every service integration part of the agent itself. The repository describes access to more than 200 integrations and more than 25,000 actions through Pica's managed cloud platform. Its intended users are developers building AI agents or agent workflows that need service connections such as Gmail.

The agent does not appear to call Gmail directly through this repository. Instead, the documented path assigns connection management to Pica. A user connects Gmail through the Pica dashboard, installs the Pica Skill, and then makes the connected integrations available to an agent through an MCP server. This separates the agent-facing interface from the authentication and integration layer managed by Pica.

That division has practical appeal, but it also defines the project's main boundary. The repository presents Pica as a client of a hosted platform rather than a self-contained integration server. Users who need a fully local stack should not infer local operation from the Rust primary language or from the open repository layout.

The project also draws an explicit product boundary. The README calls this repository the Community Edition and says it is no longer actively maintained. It directs users seeking current features and updates to app.picaos.com. This is more important than the repository's recent push date, because the project itself defines maintenance as having transitioned to a private, cloud-hosted platform.

## Pica routes agent access through its MCP server

The documented data flow has four distinct parts: the Pica CLI, a Pica account, connected third-party services, and the Pica Skill exposed through MCP. The CLI handles installation, initialization, and configuration. The dashboard holds the secret key and service connections. The skill gives an agent access to integrations associated with the user's Pica account. MCP provides the interface through which the agent can request supported actions.

The Gmail example makes the flow concrete. Gmail authentication is not entered into the agent or represented by command-line credentials in the README. The user adds a Gmail connection through the Pica dashboard. Once that connection exists and the skill is installed, the documentation says an agent can interact with Gmail or other available platforms through the MCP server.

This is not a general-purpose API gateway implementation that can be inferred from the repository structure. The top-level entries include `core/` and `workflows/`, but the README does not map those directories to the hosted data flow, describe local servers, or document configuration for self-hosting. The safe reading is that the user-facing setup depends on Pica services and account state that are external to the repository.

For an engineer, the relevant trust boundary is therefore between the agent and Pica. The agent receives skill-defined access through MCP, while Pica manages authentication and the catalog of integration actions. The documentation states that actions are verified, but it does not publish a validation method in this repository. Teams with strict audit requirements would need to inspect the hosted platform's action definitions rather than relying on the README label.

## CLI, Gmail, and Pica Skill setup tutorial

The README describes a Node.js-based installation even though the repository's primary language is Rust. Install the CLI globally with the package name used by the project:

```bash
npm i -g @picahq/cli
```

The command installs `pica` as a global command. The README then directs users to initialize it:

```bash
pica init
```

Initialization opens the project-defined setup flow used to configure Pica and connect it to the user's environment. A Pica secret key is required, and the README links to the API key page in the dashboard. The documentation does not specify a noninteractive flag or environment variable for this step, so none should be assumed.

Next, create a Gmail connection in the Pica dashboard at `https://app.picaos.com/connections`. This is a web operation rather than a documented CLI command. After adding the connection, install the Pica Skill:

```bash
npx skills add https://github.com/picahq/skills --skill pica
```

That command installs the `pica` skill from the separate `picahq/skills` repository. Once it is installed, the agent or agent builder can access integrations connected to the Pica account through MCP. The first real check described by the project is to ask the agent to interact with Gmail. The README does not document expected output text, a health-check command, or a way to verify the MCP connection from the CLI, so users should use the dashboard connection state as the documented confirmation point.

## Authentication is a hosted dependency, not a local feature

The most consequential constraint appears in the getting-started sequence. Installing the CLI is only one part of setup. Users must obtain a secret key from the dashboard and add Gmail through `https://app.picaos.com/connections`. The README does not describe direct OAuth handling, credential storage, token refresh, or service-specific setup in this repository.

This arrangement reduces the amount of integration code presented to the agent user, but it transfers responsibility to Pica's hosted platform. The available actions depend on what is connected to the account and what the platform exposes. Removing an account connection, changing a secret key, or losing access to the hosted service can therefore affect agent capability outside the local repository.

The GPL-3.0 license applies to this repository. That matters for organizations examining reuse or modification of licensed code. The license should be reviewed against the intended distribution and integration model. This article does not interpret its obligations, and the license does not by itself establish what permissions or restrictions apply to the separate hosted service, dashboard, skill repository, or remote action definitions.

## Direct service APIs are the practical alternative

A direct API integration is the clearest alternative for projects that need full control over credentials and execution. Instead of adding Gmail to Pica, installing the Pica Skill, and routing requests through Pica's MCP server, a developer can use Gmail's API in the agent application. The agent workflow then owns authentication, token handling, request construction, error handling, and service limits.

The approaches differ in where complexity resides. Pica's documented flow moves connection setup and integration knowledge into a managed cloud account. The agent receives a catalog of available actions through the Pica Skill and MCP. Direct API code puts more implementation work in the application, but the repository documentation gives no indication that this project can remove the dependency on `app.picaos.com` while preserving all 200-plus integrations and action definitions.

Direct APIs are the better fit when self-hosting, provider-specific data control, custom authentication, or offline development is non-negotiable. Pica is the more relevant choice for a developer who accepts hosted account dependencies and wants the agent to use account-level connections across the platform's listed integrations. The choice is not simply Rust versus another language. It is managed access through Pica versus integration logic owned by the application.

## The open repository is a historical setup path

The repository is not archived, and its last push was on 2026-08-19. However, those metadata do not support a claim of active development. The README explicitly says that the Community Edition is no longer actively maintained and that Pica has transitioned to a private, cloud-hosted platform.

The visible release history also needs careful interpretation. The listed releases are versions 1.59.0, 1.58.0, and 1.57.0, published in July 2025. A later push can add documentation or other repository changes without representing a continuing Community Edition release line. The README is the direct source for product status, so it takes precedence over an inference based only on repository activity.

This creates a real upgrade problem for engineers. The documented install path still points to `@picahq/cli` and the separate skills repository, but the current feature boundary is the private platform. Before adopting the open repository, check whether the hosted product preserves the same CLI initialization, skill interface, integration coverage, authentication requirements, and MCP behavior. The repository does not provide a migration guide from Community Edition 1.59.0 to the private platform, nor does it document rollback or a supported upgrade path between the two.

## Conclusion

Adopt the open repository only to study or reproduce the documented CLI, skill, and MCP integration path. Do not treat it as the current Pica product, and verify first whether your required integrations, authentication model, and continuing updates are available through the private cloud platform at app.picaos.com.

## FAQ

### How do I install Pica Community Edition?

The README instructs users to install `@picahq/cli` globally and then run `pica init`. Initialization requires a Pica secret key obtained from the dashboard.

### How does the Pica Skill connect an AI agent to Gmail?

The user first adds a Gmail connection through the Pica dashboard, then installs the `pica` skill. The skill gives the agent access to connected integrations through Pica's MCP server.

### Is Pica Community Edition still actively maintained?

No. The README says the Community Edition is no longer actively maintained and that Pica has transitioned to a private, cloud-hosted platform at `app.picaos.com`.

## Sources

- [License: GPL-3.0](https://github.com/withoneai/pica/blob/main/LICENSE)
- [Project website](https://picaos.com)
- [README](https://github.com/withoneai/pica/blob/main/README.md)
- [Releases](https://github.com/withoneai/pica/releases)
- [withoneai/pica on GitHub](https://github.com/withoneai/pica)

---

Hysen Labs editorial analysis, written from the project's own repository and release notes. Cite the canonical page: https://hysenlabs.com/projects/withoneai-pica
