How do I install Artsonia?

Artsonia is a local plugin. Install it using npm package: artsonia-mcp and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Artsonia safe to use?

Yes. Artsonia passed MCP Marketplace's automated security scan with a score of 9.3/10 (low risk). Every server on MCP Marketplace is security-scanned before it's listed; see the full security report on this page for the findings and permissions.

What credentials does Artsonia need?

Artsonia requires the following credentials or environment variables: ARTSONIA_USERNAME, ARTSONIA_PASSWORD, ARTSONIA_SESSION_CACHE, ARTSONIA_SESSION_FILE, ARTSONIA_OUTPUT_DIR, ARTSONIA_TRANSPORT, ARTSONIA_WS_PORT, ARTSONIA_INLINE_DOWNLOADS. You can find setup instructions on the server detail page.

What AI apps work with Artsonia?

Artsonia uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Artsonia MCP Server

by Chris Hall

Developer ToolsLow Risk9.3Local

Free

Parent/fan access to Artsonia student-art portfolios, comments, and fans (AI-built).

About

Parent/fan access to Artsonia student-art portfolios, comments, and fans (AI-built).

Security Report

9.3

Low Risk9.3Low Risk

Valid MCP server (2 strong, 1 medium validity signals). 2 known CVEs in dependencies (0 critical, 1 high severity) Package registry verified. Imported from the Official MCP Registry. Trust signals: trusted author (72/74 approved); 6 highly-trusted packages.

12 files analyzed · 3 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

file_system

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Your Artsonia login email address. Required in the default direct mode; not needed when ARTSONIA_TRANSPORT=fetchproxy (the signed-in browser tab carries the session).Optional

Environment variable: ARTSONIA_USERNAME

Your Artsonia account password. Required in the default direct mode; not needed when ARTSONIA_TRANSPORT=fetchproxy.Required

Environment variable: ARTSONIA_PASSWORD

Set to false to disable the on-disk session cache and re-authenticate on every process start. Defaults to enabled.Optional

Environment variable: ARTSONIA_SESSION_CACHE

Absolute path for the session cache file. Defaults to $MCP_DATA_DIR/.artsonia-mcp/session-<user>.json.Optional

Environment variable: ARTSONIA_SESSION_FILE

Folders artsonia_download_artwork may save into (a path-delimiter list: ':' on macOS/Linux, ';' on Windows). Unset: ~/Downloads and ~/Pictures, or $MCP_DATA_DIR/downloads when MCP_DATA_DIR is set. Any other dest is refused.Optional

Environment variable: ARTSONIA_OUTPUT_DIR

fetch (default) logs in directly with ARTSONIA_USERNAME/ARTSONIA_PASSWORD; fetchproxy is the optional fallback that rides your signed-in artsonia.com browser tab.Optional

Environment variable: ARTSONIA_TRANSPORT

fetchproxy WebSocket port override (default 37149, a shared fleet port). Only used when ARTSONIA_TRANSPORT=fetchproxy.Optional

Environment variable: ARTSONIA_WS_PORT

1/true/yes/on returns artsonia_download_artwork images inline as base64 image blocks instead of writing them to disk (for hosted deployments); unset/false saves to disk.Optional

Environment variable: ARTSONIA_INLINE_DOWNLOADS

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-chrischall-artsonia-mcp": {
      "env": {
        "ARTSONIA_WS_PORT": "your-artsonia-ws-port-here",
        "ARTSONIA_PASSWORD": "your-artsonia-password-here",
        "ARTSONIA_USERNAME": "your-artsonia-username-here",
        "ARTSONIA_TRANSPORT": "your-artsonia-transport-here",
        "ARTSONIA_OUTPUT_DIR": "your-artsonia-output-dir-here",
        "ARTSONIA_SESSION_FILE": "your-artsonia-session-file-here",
        "ARTSONIA_SESSION_CACHE": "your-artsonia-session-cache-here",
        "ARTSONIA_INLINE_DOWNLOADS": "your-artsonia-inline-downloads-here"
      },
      "args": [
        "-y",
        "artsonia-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

artsonia-mcp

Artsonia MCP server for Claude — developed and maintained by AI (Claude Code)

Download folders

artsonia_download_artwork saves images only inside an allowed folder; any other dest is refused before anything is fetched or written, and no file is ever written through a symlink.

variable	default
`ARTSONIA_OUTPUT_DIR`	`~/Downloads` and `~/Pictures`	The folders `dest` must be inside (subfolders are fine and are created). Several folders: separate them with `:` (`;` on Windows). On a hosted server (`MCP_DATA_DIR` set) the default is `$MCP_DATA_DIR/downloads` instead. With `ARTSONIA_INLINE_DOWNLOADS=1` nothing is written to disk, so `dest` is only a label and is not checked.

Confirmations

The writes that reach other people — posting a comment and inviting a fan — ask you to confirm them first. Changing your notification settings, marking feedback read, and downloading artwork into your allowed download folders run straight away. A client that can show a confirmation prompt (Claude Code) shows one. A client that cannot (claude.ai, Claude Desktop) gets a two-step flow instead: the first call changes nothing and returns a preview of exactly what would be sent plus a confirmToken; only a second, identical call carrying that token goes ahead. The token is single-use, expires, and is refused if anything changed between the two calls.

variable	default
`MCP_CONFIRM_MODE`	`ask-user`	What a write does on a client that cannot show a confirmation prompt (claude.ai, Claude Desktop). `ask-user`: two steps — the first call does nothing and returns a preview plus a token, and the model must get your approval in chat before calling again with it. `auto`: the same two steps, but the model may use the token after reviewing the preview itself. `refuse`: writes are refused on such clients. A client that can show prompts (Claude Code) always gets the real prompt, unless `MCP_CONFIRM_ELICITATION=off`. An unrecognised value is treated as `refuse`.
`MCP_CONFIRM_ELICITATION`	`on`	`off` never shows a confirmation prompt, so every client gets the `MCP_CONFIRM_MODE` path. Set it for a client that claims to support prompts but never shows one (the write hangs — opencode 2.0.x). Any other value stays `on`, with a warning on stderr.
`MCP_CONFIRM_TTL_SECONDS`	`600`	How long a token stays valid.
`MCP_CONFIRM_SECRET`	random per process	Signing key; set it only if tokens must survive a server restart.