mediagraph

Mediagraph CLI

A single binary that exposes the entire Mediagraph API as both an MCP server (stdio) and a CLI. Agents should prefer the CLI form — it returns plain JSON on stdout that you can parse and pipe.

About Mediagraph: a digital asset management (DAM) platform for organizing, sharing, and AI-tagging media at scale. Product info, pricing, and demos at www.mediagraph.io; API reference at docs.mediagraph.io.

Install / setup

npm install -g @mediagraph/cli        # provides the `mediagraph` command
mediagraph skills                      # focused recipe index for agents
mediagraph skills bulk                 # one focused guide by use case
mediagraph skill                       # → prints this guide; start here cold
mediagraph auth login                  # OAuth, opens a browser, persists tokens (full read-write)
mediagraph auth login --read-only      # OAuth with :read on every entity (safer for grants)
mediagraph auth login --scope "asset:read,tag:write,collections:write"
                                       # OAuth with a specific scope set
mediagraph auth status                 # JSON: {authenticated, organization, user, token, scopes}

Tokens persist at ~/.mediagraph/tokens.enc. Refresh is automatic.

Scopes

Scopes are entity-level (asset:write, comment:read, webhook:write) with group-level shorthand for back-compat (assets:write covers every entity in the assets group). write implies read for the same key. Sibling entities are independent unless granted via the group form.

auth status surfaces the current OAuth token's scopes (scopes.list) and flags legacy/empty lists as fullAccess: true. PAT scopes can't be introspected from the CLI — they're set at PAT creation. When the server rejects a request with error: "insufficient_scope", the CLI surfaces a structured INSUFFICIENT_SCOPE error (exit 3) naming the missing scope, its group, and how to remediate (scope → regenerate; admin_required → reauthorize from an admin membership).