Tools.
External actions the agent can call with clear permission profiles and audit trails.
MCP
Connect the tools.
MCP support for the systems your work already depends on, with permissions that stay visible.
picasso / mcpindexed
MCP
Connect the tools
MCP support for the systems your work already depends on, with permissions that stay visible.
ToolsExternal actions the agent can call with clear permission profiles and audit trails.
ResourcesStructured context from systems of record without copy-paste.
PromptsReusable task language from trusted servers, available inside the same terminal workflow.
picasso mcp search githubpicasso mcp install github-mcppicasso mcp listWhat it unlocks.
Resources.
Structured context from systems of record without copy-paste.
Prompts.
Reusable task language from trusted servers, available inside the same terminal workflow.
Find and install servers.
Search the registry, install approved servers, and see what each server can reach before it joins the palette.
picasso mcp search githubpicasso mcp install github-mcppicasso mcp listPicasso as a server.
Other agents can call Picasso memory, sessions, summaries, and goal state through `picasso mcp serve`. The same visibility rules apply when Picasso becomes the tool.
Connected, not unchecked.
Every MCP server runs under a declared permission profile and the selected sandbox mode.
trust boundaryoutside the agent loop
generated codeclean
model outputclean
tool resultsclean
plan documentsclean
routingnot influenced
memoryretrieval only
Know the boundary.
Workspace permissions, network egress, and approval gates are visible before use.
Long-lived connections.
For clients that need durable agent connections, Picasso can run as an ACP service while keeping memory, sessions, and tool permissions inspectable.