{ "data": { "a": { "slug": "ai-diagram-maker-mcp", "name": "AI Diagram Maker MCP", "vendor": "AI Diagram Maker (Rajasekar Elango)", "vendorUrl": "https://www.aidiagrammaker.com", "kind": "mcp", "category": "diagramming", "summary": "AI Diagram Maker MCP is an MIT-licensed MCP server, hosted or run with npx, that sends text, JSON, ASCII art, images or Mermaid to the AI Diagram Maker service and returns a D2 software diagram with an edit link.", "url": "https://www.anchorterminal.com/tools/ai-diagram-maker-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/ai-diagram-maker-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/ai-diagram-maker-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/ai-diagram-maker-mcp.json", "dns": "ai-diagram-maker-mcp.grade.anchorterminal.com", "repo": "https://github.com/erajasekar/ai-diagram-maker-mcp", "license": "MIT for the MCP server. The AI Diagram Maker service it calls is closed, under terms last updated 24 September 2025", "transports": [ "streamable-http", "stdio" ], "remoteUrl": "https://mcp.aidiagrammaker.com/mcp", "packages": [ { "registry": "npm", "name": "ai-diagram-maker-mcp" } ], "auth": "api-key", "authNotes": "An API key created in the AI Diagram Maker app under Settings \u003e API Keys, shown once, named, and deactivated, reactivated or deleted from the same page. No scopes; the user guide says anyone with the key can access the account. The hosted server takes it in `X-ADM-API-Key` or `Authorization: Bearer`, the local server in `ADM_API_KEY`. No OAuth.", "pricing": "freemium", "pricingNotes": "Basic is free with 50 AI credits a month. Plus $10 a month ($96 a year) with 250 credits, Max $20 a month ($192 a year) with 500. One credit is 1,000 tokens, and extra credits can't be bought. Which plans include API and MCP use isn't stated.", "priceSummary": "$10 / mo", "where": "both", "x402": { "level": "no", "evidence": "Plans sold through Lemon Squeezy checkout links. No x402, MPP or L402 in the repository, the OpenAPI file or the site (checked 2026-11-06). Out of credits returns 402 with no payment requirements.", "endpoints": [] }, "toolCount": 5, "popularity": { "githubStars": null, "npmWeekly": 63, "pypiWeekly": null, "asOf": "2026-11-06" }, "docsUrl": "https://github.com/erajasekar/ai-diagram-maker-mcp#readme", "openapi": "https://github.com/erajasekar/ai-diagram-maker-mcp/blob/main/apispec/adm-openapi.json", "registryName": "io.github.erajasekar/ai-diagram-maker-mcp", "capabilities": [ "diagram.create", "diagram.architecture", "diagram.as-code", "diagram.export" ], "tags": [ "hosted", "local", "mcp", "remote-mcp", "stdio", "mcp-registry", "openapi", "api-key", "freemium", "d2", "mcp-apps" ], "lastRelease": "2026-04-10", "graded": true, "anchor": { "graded": true, "score": 43.8, "grade": "E", "agentReady": false, "rank": 1225, "ranked": true, "rankOf": 1486, "categoryRank": 13, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 17, "payments": 20, "reliability": 30, "schema": 75, "security": 45, "transparency": 35 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-06" }, "negative": 0, "verdict": "Five compact, typed tools turn text, JSON, ASCII art, images or Mermaid into an editable D2 diagram, and the API documents its error and rate-limit responses. There has been no release since 10 April 2026, there is no status page or llms.txt, and the API key opens the whole account with no scopes.", "bestFor": "Quick architecture, sequence, ERD and flowchart diagrams from a coding agent, with a link to edit them.", "strengths": [ "Five tools with zod schemas, a diagramType enum and descriptions that say when to use each", "OpenAPI 3 file for the generate endpoint with documented 402, 422 and 429 responses", "A 429 body gives limit, remaining, resetAt and retryAfter", "Hosted endpoint with nothing to install, or a local npx server", "Output stays editable as D2 in the app and exports to SVG, PNG or Mermaid" ], "weaknesses": [ "Last release 3.0.8 on 10 April 2026, and the registry entry still says 1.0.0", "No status page, SLA, llms.txt, changelog or security policy found", "API keys have no scopes and give full account access", "Plans don't say whether API and MCP calls are included, and an open issue asks how hosted MCP credits are counted", "The privacy policy names no AI model providers or other processors" ], "agentNotes": [ "Send the key in the `X-ADM-API-Key` header to https://mcp.aidiagrammaker.com/mcp, never in the URL", "Pick `diagramType` from the enum when the user names one; leave it out to let the service choose", "On a 402 stop and tell the user credits are gone; they reset monthly and can't be topped up", "On a 429 wait for `retryAfter` seconds before the next call", "Give the user the returned diagram link so they can edit it, since the tools can't revise an existing diagram" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 43.8 } ], "editorialScores": { "ergonomics": 66, "maintenance": 17, "payments": 20, "reliability": 30, "schema": 75, "security": 45, "transparency": 28 }, "provenanceScore": 42, "checked": { "categories": { "ergonomics": "2026-11-06", "maintenance": "2026-11-06", "payments": "2026-11-06", "reliability": "2026-11-06", "schema": "2026-11-06", "security": "2026-11-06", "transparency": "2026-11-06" }, "last": "2026-11-06", "oldest": "2026-11-06", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "ADM_API_KEY=your_api_key npx ai-diagram-maker-mcp@latest", "claudeCode": "claude mcp add ai-diagram-maker -t stdio -e ADM_API_KEY=\u003capi_key\u003e -- npx -y ai-diagram-maker-mcp@latest", "config": { "mcpServers": { "ai-diagram-maker": { "headers": { "X-ADM-API-Key": "YOUR_API_KEY" }, "url": "https://mcp.aidiagrammaker.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/diagram.create", "tool": "https://letme.dev/ai-diagram-maker-mcp" }, "area": "design-diagrams", "unitPrices": [ { "item": "Plus plan", "unit": "month", "usd": 10, "note": "250 AI credits a month; $96 billed yearly" }, { "item": "Max plan", "unit": "month", "usd": 20, "note": "500 AI credits a month; $192 billed yearly" } ], "provenance": { "legalEntity": "", "domain": "aidiagrammaker.com", "domainRegistered": "2025-08-21", "endpointOnVendorDomain": true, "terms": "https://www.aidiagrammaker.com/terms", "privacy": "https://www.aidiagrammaker.com/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-11-06", "notes": [ "The terms and privacy policy, both last updated 24 September 2025, name the company only as AI Diagram Maker, under United States law, with aidiagrammaker@gmail.com as the contact. The npm package names Rajasekar Elango as author.", "The terms list scraping among prohibited uses. Public pages were read as data.", "www.aidiagrammaker.com/robots.txt allows all paths.", "RDAP gives aidiagrammaker.com a registration date of 21 August 2025.", "/.well-known/security.txt returns 404. No status page or changelog found; the GitHub releases are the only dated record." ], "score": 42 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/ai-diagram-maker-mcp.json", "live": { "slug": "ai-diagram-maker-mcp", "probe": { "target": "https://mcp.aidiagrammaker.com/mcp", "method": "mcp-initialize", "lastAt": "2026-11-07T18:20:09.018580127Z", "lastOk": false, "lastStatus": 0, "lastMs": 0, "lastNote": "TLS certificate problem", "authRequired": false, "uptime24h": 0, "uptime30d": 0, "p50ms24h": 0, "p95ms24h": 0, "samples24h": 200, "samples30d": 200, "days": [ { "date": "2026-11-06", "probes": 13, "ok": 0 }, { "date": "2026-11-07", "probes": 187, "ok": 0 } ], "outages": [ { "start": "2026-11-06T22:45:03.399368446Z", "end": "0001-01-01T00:00:00Z", "note": "TLS certificate problem" } ] }, "versions": [ { "registry": "mcp-registry", "name": "io.github.erajasekar/ai-diagram-maker-mcp", "version": "1.0.0", "seenAt": "2026-11-07T18:16:28.95801333Z" }, { "registry": "npm", "name": "ai-diagram-maker-mcp", "version": "3.0.8", "seenAt": "2026-11-06T23:04:20.113009064Z" } ], "githubStars": 10, "npmWeekly": 63, "securityTxt": { "url": "https://aidiagrammaker.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T16:00:48.542497373Z" }, "pages": [ { "url": "https://www.aidiagrammaker.com/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:24:25.783359417Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "40a879ba4963" }, { "url": "https://www.aidiagrammaker.com/terms", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:24:27.95923952Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "9b4e6f213ed0" } ], "mcpTools": { "url": "https://mcp.aidiagrammaker.com/mcp", "checkedAt": "2026-11-07T01:42:20.967941233Z", "status": "error", "note": "Post \"https://mcp.aidiagrammaker.com/mcp\": tls: failed to verify certificate: x509: certificate is valid for *.up.railway.app, up.railway.app, not mcp.aidiagrammaker.com", "changedAt": "2026-11-07T01:42:20.967941233Z" }, "updatedAt": "2026-11-07T18:20:09.018580127Z" } }, "answer": "Excalidraw scores 52.5 (D) on agent readiness against AI Diagram Maker MCP's 43.8 (E), and leads in 4 of 7 scored categories. AI Diagram Maker MCP leads on schema \u0026 documentation and agent ergonomics.", "b": { "slug": "excalidraw", "name": "Excalidraw", "vendor": "Excalidraw s.r.o.", "vendorUrl": "https://plus.excalidraw.com", "kind": "http-api", "category": "diagramming", "summary": "Excalidraw is a hand-drawn style whiteboard and diagram editor from Excalidraw s.r.o. in Brno. Agents reach it through the Excalidraw+ REST API and MCP server (public beta), a free keyless MCP App, and the open-source editor on npm (MIT).", "url": "https://www.anchorterminal.com/tools/excalidraw", "markdownUrl": "https://www.anchorterminal.com/tools/excalidraw.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/excalidraw.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/excalidraw.json", "dns": "excalidraw.grade.anchorterminal.com", "repo": "https://github.com/excalidraw/excalidraw", "license": "Excalidraw+ is a proprietary service under Excalidraw's terms of use. The editor and the MCP App on GitHub are MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.excalidraw.com/api/v1/mcp", "packages": [ { "registry": "npm", "name": "@excalidraw/excalidraw" } ], "auth": "api-key", "authNotes": "A person creates an API key in Excalidraw+ workspace settings, and the full key is shown once. Keys are sent as `Authorization: Bearer \u003cAPI_KEY\u003e`, belong to one workspace, take `read` or `full` permission or specific routes, and expire on a set date. Personal keys act as one member and need a workspace admin to enable them. Workspace keys act as the workspace. The free MCP App at https://mcp.excalidraw.com takes no credential.", "pricing": "freemium", "pricingNotes": "API and MCP access is listed under the Plus plan at $6 a user a month, 14 per cent less billed yearly, with a 14-day trial. The page does not say whether the trial takes a card. The Free plan, the free MCP App and the npm editor cost nothing, so an agent can draw without a contract but cannot reach a workspace (checked 2026-10-09).", "priceSummary": "$6 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs dump, the pricing page or the MCP App source (checked 2026-10-09).", "endpoints": [] }, "toolCount": 37, "popularity": { "githubStars": 133534, "npmWeekly": 675606, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://plus.excalidraw.com/docs", "llmsTxt": "https://plus.excalidraw.com/llms.txt", "capabilities": [ "diagram.create", "diagram.edit", "diagram.export", "diagram.as-code" ], "tags": [ "hosted", "mcp", "api-key", "llms-txt", "freemium", "beta", "status-page", "soc2", "open-source", "typescript", "eu" ], "lastRelease": "2026-09-01", "graded": true, "anchor": { "graded": true, "score": 52.5, "grade": "D", "agentReady": false, "rank": 984, "ranked": true, "rankOf": 1486, "categoryRank": 10, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 58, "maintenance": 44, "payments": 35, "reliability": 30, "schema": 65, "security": 73, "transparency": 63 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-04" }, "negative": 0, "verdict": "Excalidraw+ keys carry read or full permission, route restrictions and an expiry, and the MCP server shows a key only the tools its routes allow. The API and MCP server are in public beta with breaking changes expected, sit behind the $6 Plus plan, and have no published OpenAPI file, SDK or idempotency keys. No status history can be read.", "bestFor": "Teams already on Excalidraw+ that want agents to create and edit hand-drawn diagrams, slides and wireframes in a shared workspace, and one-off sketches through the free MCP App.", "strengths": [ "API keys take `read` or `full` permission, route restrictions and an expiry, and can be rotated. The MCP server lists only the tools a key's routes allow", "`create_diagram` lays out nodes, edges and groups into editable shapes with bound arrows, and `take_screenshot` returns a PNG to check the result", "`search_scene_content` returns only matching elements, so an agent need not load a whole scene", "`llms.txt` and a 110 KB `llms-full.txt` carry the API and MCP docs, and `GET /logs` returns the workspace audit log", "A free MCP App at https://mcp.excalidraw.com needs no account or key, and the editor is MIT on npm with 675,606 downloads in the week to 7 October 2026" ], "weaknesses": [ "The API and MCP server are in public beta. The docs say endpoints, tool names and schemas may change and to expect breaking changes", "API and MCP access needs the Plus plan at $6 a user a month. No per-call price, and no SDK for the API", "No OpenAPI file is linked from the docs, although the reference pages are generated from one. No idempotency keys and no SLA found", "The status page's robots.txt disallows every path, so no incident or component history can be read", "The privacy policy is dated 29 April 2021 and names no AI providers. The sub-processor list sits in a script-drawn trust centre", "In the free MCP App's source, `create_view` is marked read-only yet stores a checkpoint, and its description names a `read_widget_context` tool the server does not register" ], "agentNotes": [ "Send `Authorization: Bearer \u003cAPI_KEY\u003e` to https://api.excalidraw.com/api/v1. For MCP, use `POST /api/v1/mcp` only. The server is stateless and answers 405 to other methods", "Use a personal key to reach the owner's private collection with the collection ID `private`. A workspace admin must enable personal keys first", "Call `read_diagram_format`, `read_presentation_format` or `read_freeform_format` before the first scene write in a session", "Write with `edit_scene_content` and bind arrows through `startBinding` and `endBinding` with `tempId` references. `PUT /scenes/{sceneId}/content` removes every element left out of the request", "Stay under 600 requests a minute per IP and wait until `X-RateLimit-Reset` after a 429" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.5 } ], "editorialScores": { "ergonomics": 58, "maintenance": 44, "payments": 35, "reliability": 30, "schema": 65, "security": 73, "transparency": 45 }, "provenanceScore": 81, "checked": { "categories": { "ergonomics": "2026-11-04", "maintenance": "2026-11-04", "payments": "2026-11-04", "reliability": "2026-11-04", "schema": "2026-11-04", "security": "2026-11-04", "transparency": "2026-11-04" }, "last": "2026-11-04", "lastMoved": "2026-11-04", "oldest": "2026-11-04", "stale": false, "staleAfterDays": 90 } }, "connect": { "install": "npm install react react-dom @excalidraw/excalidraw", "http": "curl https://api.excalidraw.com/api/v1/collections \\\n -H \"Authorization: Bearer \u003cAPI_KEY\u003e\"", "config": { "mcpServers": { "excalidraw": { "headers": { "Authorization": "Bearer \u003cAPI_KEY\u003e" }, "type": "http", "url": "https://api.excalidraw.com/api/v1/mcp" } } } }, "letme": { "capability": "https://letme.dev/diagram.create", "tool": "https://letme.dev/excalidraw" }, "area": "design-diagrams", "unitPrices": [ { "item": "Plus plan", "unit": "seat-month", "usd": 6, "note": "billed monthly, 14 per cent less billed yearly. API and MCP access, 100 AI requests a day" } ], "provenance": { "legalEntity": "Excalidraw s.r.o.", "domain": "excalidraw.com", "domainRegistered": "2020-01-03", "endpointOnVendorDomain": true, "terms": "https://plus.excalidraw.com/terms-of-service", "privacy": "https://plus.excalidraw.com/privacy-policy", "statusPage": "https://status.excalidraw.com", "changelog": "https://plus.excalidraw.com/changelog", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The terms of use and the privacy policy name Excalidraw s.r.o., Pražákova 1008/69, Brno 639 00, Czech Republic. The terms are governed by Czech law.", "The terms of use (published 30 May 2022) are the only terms found. They cover the Site and the subscription and do not mention the API or MCP server.", "The privacy policy is dated 29 April 2021. A DPA dated 13 January 2026 is at https://plus.excalidraw.com/data-processing-agreement-dpa.", "plus.excalidraw.com/.well-known/security.txt returns 404. excalidraw.com was not asked, because its robots.txt is ambiguous for unnamed agents.", "RDAP for excalidraw.com gives a registration date of 2020-01-03.", "The robots.txt files of api.excalidraw.com and status.excalidraw.com disallow every path." ], "score": 81 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/excalidraw.json", "live": { "slug": "excalidraw", "probe": { "target": "https://api.excalidraw.com/api/v1/mcp", "method": "get", "lastAt": "2026-11-07T18:20:23.8069721Z", "lastOk": true, "lastStatus": 405, "lastMs": 484, "authRequired": false, "uptime24h": 100, "uptime30d": 99.89, "p50ms24h": 357, "p95ms24h": 481, "samples24h": 239, "samples30d": 7205, "days": [ { "date": "2026-10-09", "probes": 85, "ok": 85 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 255 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 251 }, { "date": "2026-10-27", "probes": 249, "ok": 248 }, { "date": "2026-10-28", "probes": 251, "ok": 251 }, { "date": "2026-10-29", "probes": 248, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 249 }, { "date": "2026-10-31", "probes": 251, "ok": 248 }, { "date": "2026-11-01", "probes": 249, "ok": 249 }, { "date": "2026-11-02", "probes": 250, "ok": 249 }, { "date": "2026-11-03", "probes": 248, "ok": 246 }, { "date": "2026-11-04", "probes": 246, "ok": 246 }, { "date": "2026-11-05", "probes": 185, "ok": 185 }, { "date": "2026-11-06", "probes": 241, "ok": 241 }, { "date": "2026-11-07", "probes": 187, "ok": 187 } ] }, "vendorStatus": { "page": "https://status.excalidraw.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-07T04:47:45.008808805Z" }, "versions": [ { "registry": "github", "name": "excalidraw/excalidraw", "version": "v0.18.1", "released": "2026-04-21", "seenAt": "2026-11-06T23:24:55.547452274Z" }, { "registry": "npm", "name": "@excalidraw/excalidraw", "version": "0.18.1", "seenAt": "2026-11-06T23:24:55.306758789Z" } ], "githubStars": 135245, "npmWeekly": 1319046, "securityTxt": { "url": "https://excalidraw.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-07T15:59:59.95739132Z" }, "llmsTxt": { "url": "https://plus.excalidraw.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-07T15:32:26.822649976Z" }, "domain": { "domain": "excalidraw.com", "registered": "2020-01-03", "source": "https://rdap.verisign.com/com/v1/domain/excalidraw.com", "checkedAt": "2026-11-01T14:07:38.015390523Z" }, "pages": [ { "url": "https://plus.excalidraw.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-11-07T14:16:50.967000737Z", "changedAt": "2026-11-04T08:30:04.31160255Z", "fingerprint": "9cd4aea14040" }, { "url": "https://plus.excalidraw.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-07T14:16:53.092834779Z", "changedAt": "2026-10-14T20:46:47.71164861Z", "fingerprint": "f15243d370ab" }, { "url": "https://plus.excalidraw.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-07T14:16:55.236276096Z", "changedAt": "2026-10-14T20:46:49.665882013Z", "fingerprint": "fbb30cf24ae6" } ], "mcpTools": { "url": "https://api.excalidraw.com/api/v1/mcp", "checkedAt": "2026-11-07T01:44:26.097237481Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-11-07T01:44:26.097237481Z" }, "github": { "repo": "excalidraw/excalidraw", "checkedAt": "2026-11-02T08:47:04.348616244Z", "stars": 135009, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-01T20:55:25Z", "openIssues": 2160, "openPRs": 1303, "issuesOpened90d": 154, "issuesClosed90d": 240, "prsMerged90d": 91, "ci": { "branch": "master", "runs": 50, "success": 48, "failure": 1, "other": 1, "latest": "success", "latestAt": "2026-10-31T16:53:46Z" }, "advisories": [ { "ghsa": "GHSA-39h7-pwv7-rc3x", "cve": "CVE-2025-54881", "severity": "medium", "published": "2026-04-21T12:35:56Z" }, { "ghsa": "GHSA-m64q-4jqh-f72f", "cve": "CVE-2024-32472", "severity": "medium", "published": "2024-04-17T21:15:16Z" }, { "ghsa": "GHSA-v7v8-gjv7-ffmr", "cve": "CVE-2023-26140", "severity": "medium", "published": "2023-08-16T15:03:39Z" } ], "replies": { "sampled": 25, "unanswered": 24, "medianDays": 0.2 } }, "updatedAt": "2026-11-07T18:20:23.8069721Z" } }, "edges": [ { "by": 28, "category": "security", "leads": "excalidraw", "name": "Security \u0026 auth", "reasons": { "a": "Several named API keys per account, shown once and deactivated or deleted in Settings with a confirmation step, sent in a header, never a query string. No scopes, and the user guide says anyone with a key can access the account (20 of 30). The tools only create diagrams and can't change or delete anything in the account, but there's no read-only key (12 of 20). Tools return diagrams built from the caller's own input. Image inputs can be any public URL (10 of 15). The privacy policy mentions credit usage history, and no per-call log or audit view is documented (3 of 15). No security.txt, disclosure policy, bug bounty or certification found (0). 20 + 12 + 10 + 3 + 0 = 45.", "b": "API keys are workspace-bound, take `read` or `full` permission or specific routes, carry an expiry and can be rotated or soft-deleted. Personal and workspace keys differ in access to private collections (30). Read-only keys expose only read tools and deletes go to trash, with no confirmation step found (14). Scene text written by collaborators returns to the model and `add_image` fetches a public URL, with no injection guidance found (3). `GET /logs` returns the workspace audit log with filters by user, action and operation (13). Excalidraw states SOC 2 Type 1 and Type 2, yearly penetration tests and Vanta scanning, and publishes advisories on GitHub (OSV lists five for the editor, the newest on 24 April 2026). That newest one, GHSA-39h7-pwv7-rc3x, covers Mermaid's own sequence-diagram flaw (CVE-2025-54881, published by Mermaid on 19 August 2025), fixed in 0.18.1 by a dependency update, so it takes no deduction; the other four are older than twelve months. No security.txt, bug bounty or SECURITY.md was found, and the trust centre report was not read (13). Docs readings per the 9 October check, not re-read on 4 November. 30 + 14 + 3 + 13 + 13 = 73." }, "scores": { "a": 45, "b": 73 } }, { "by": 28, "category": "transparency", "leads": "excalidraw", "name": "Transparency \u0026 trust", "reasons": { "a": "The MCP server is MIT (package.json and LICENSE, added 18 March 2026). The service is closed, under terms last updated 24 September 2025 that name the operator only as AI Diagram Maker (20 of 30). The privacy policy of the same date keeps diagrams, revisions and chat prompts and responses 'as long as necessary', and the terms license user input 'to provide and improve our services', with no retention periods and no word on model training or the AI providers used (8 of 30). No deprecation policy or dated notices (0). No subprocessors or data locations named (0). The MCP server's source sends no telemetry of its own. 20 + 8 + 0 + 0 = 28.", "b": "The graded service is closed under public terms of use, while the editor and the MCP App are MIT (20). The privacy policy of 29 April 2021 says servers are in the United States and data is kept at most one month after an account ends. The DPA of 13 January 2026 says cancelling a subscription does not delete data and retention follows internal policies. Neither names AI providers (14). No deprecation policy, only the beta warning that contracts may break (3). The DPA points to a sub-processor list at trust.excalidraw.com, which is script-drawn and was not read, and says some sub-processors are in the United States (8). The terms were re-read on 4 November (published 30 May 2022, in effect 1 June 2022); the other documents per the 9 October check. 20 + 14 + 3 + 8 = 45." }, "scores": { "a": 35, "b": 63 } }, { "by": 27, "category": "maintenance", "leads": "excalidraw", "name": "Maintenance \u0026 community", "reasons": { "a": "Last release v3.0.8, published to npm on 10 April 2026, 210 days before this check (0). No release since 8 August (0). Four issues in all. The two open ones, from 4 May (hosted MCP credit usage) and 13 October 2026, show no reply, and one closed issue had a comment (5 of 25). In the official MCP registry under the GitHub-verified namespace io.github.erajasekar, but the entry is 1.0.0 from 19 March 2026 while npm is on 3.0.8 (10 of 15). The only workflow publishes to the registry. No tests or CI, and the MCP SDK floor is ^1.9.0 (2 of 10). 0 + 0 + 5 + 10 + 2 = 17.", "b": "The newest changelog entry is dated 1 September 2026, 64 days before this check, per the 9 October reading (20); the changelog wasn't re-read on 4 November (terms ban automated access). The editor package `@excalidraw/excalidraw` has no release since 0.18.1 (20 April 2026), and the MCP App's newest tag is v0.3.2 (9 February 2026), both read from clones. Of the dated entries recorded, only 1 September falls in the 90 days from 6 August (0). A public changelog, a roadmap, a Discord server and support@excalidraw.com exist, and the editor repository had commits up to 3 November 2026 (12). There is no SDK for the API, and the editor package on npm is the vendor's only official package (5). The editor repository runs test, lint and size workflows, and the MCP App repository has no CI and no commit since 24 March 2026 (7). 20 + 0 + 12 + 5 + 7 = 44." }, "scores": { "a": 17, "b": 44 } }, { "by": 15, "category": "payments", "leads": "excalidraw", "name": "Payments \u0026 pricing", "reasons": { "a": "No x402, MPP or L402 (0). Plan prices are public (Plus $10, Max $20 a month), with credits counted at 1,000 tokens each, so there's no per-diagram price (10 of 20). Basic is free forever with 50 credits a month, but the page doesn't say whether a card is needed or whether API and MCP calls are included (10 of 20, half as with an unstated card rule). A person signs up in the app and creates the key (0). 0 + 10 + 10 + 0 = 20.", "b": "No x402, MPP or L402 (0). Plan prices are public, Free at $0 and Plus at $6 a user a month, with no per-call price (10). The free editor and the keyless MCP App need no card, while the API needs the Plus plan, whose 14-day trial does not say whether a card is taken; the terms (re-read 4 November) say the account is charged when the trial ends (15). The MCP App's README gives https://mcp.excalidraw.com as a remote server to add as a custom connector, with no key, but an API key is created by a person in workspace settings (10). Pricing per the 9 October check, not re-read on 4 November. 0 + 10 + 15 + 10 = 35." }, "scores": { "a": 20, "b": 35 } }, { "by": 10, "category": "schema", "leads": "ai-diagram-maker-mcp", "name": "Schema \u0026 documentation", "reasons": { "a": "All five tools have zod input schemas in src/tools, and the repository ships an OpenAPI 3 file for POST /api/v2/diagrams/generate (25). No llms.txt (404) and no docs site for agents beyond the README (0). Each description says what the tool does and when to use it, listing trigger phrases and the diagram types, without saying when another tool fits better (16 of 20). `content` has a minimum length and `diagramType` an eight-value enum; the OpenAPI adds `inputType` and `format` enums (13 of 15). Examples in the parameter descriptions and README, and the OpenAPI documents 400, 401, 402, 422 (D2 failed to compile) and 429 with typed error bodies (13 of 15). Git tags from v1.1.1 to v3.0.8 and a /api/v2 path, with no changelog or release notes (8 of 15). 25 + 0 + 16 + 13 + 13 + 8 = 75.", "b": "The endpoint reference is generated from an OpenAPI schema, but no file is linked from the docs, and the MCP tool definitions could not be read without a key (10). `llms.txt` and `llms-full.txt` are published (10). The tools page says when to use `search_scene_content` over `get_scene_content`, `label` over `text` and `create_diagram` over `edit_scene_content` (16). Parameters carry ranges and enums in the reference, while `edit_scene_content` takes its elements as a JSON array string (9). Each endpoint has samples in six languages and error bodies for 400, 401 and 403 (12). The path is versioned as `/api/v1` and a monthly product changelog carries API and MCP items, with no API changelog of its own (8). Per the 9 October check, not re-read on 4 November (terms ban automated access). 10 + 10 + 16 + 9 + 12 + 8 = 65." }, "scores": { "a": 75, "b": 65 } }, { "by": 8, "category": "ergonomics", "leads": "ai-diagram-maker-mcp", "name": "Agent ergonomics", "reasons": { "a": "Five compact tools (25). Output can be SVG or PNG and the API can return the D2 source with `debug`, but there's nothing to page or trim, and results carry the rendered image (10 of 20). Typed error bodies with codes, a 422 that returns the failing D2 code, and retryAfter on 429 (16 of 20). No readOnlyHint or other annotations in the source and no idempotency key, and every call spends credits (5 of 20). Only `content` is required and the hosted endpoint needs no install, but there is no SDK beyond the server (10 of 15). 25 + 10 + 16 + 5 + 10 = 66.", "b": "The docs list 37 MCP tools (5). The server shows a key only the tools its routes allow, so a read-only or route-restricted key cuts the list (7). Lists take `offset` and `limit` up to 100, logs take a cursor and filters, and `search_scene_content` returns only matching elements (18). Errors are JSON with `statusCode`, `error` and `message`, and seven status codes are documented (13). No idempotency keys. Deletes of scenes and collections move them to trash, and MCP annotations could not be read (8). `create_diagram` measures labels and routes arrows, but there is no SDK for the API (7). Per the 9 October check, not re-read on 4 November. 5 + 7 + 18 + 13 + 8 + 7 = 58." }, "scores": { "a": 66, "b": 58 } } ], "facts": [ { "a": "MCP server", "b": "HTTP API", "name": "Kind" }, { "a": "AI Diagram Maker (Rajasekar Elango)", "b": "Excalidraw s.r.o.", "name": "Vendor" }, { "a": "https://mcp.aidiagrammaker.com/mcp", "b": "https://api.excalidraw.com/api/v1/mcp", "name": "Hosted endpoint" }, { "a": "Streamable HTTP, stdio", "b": "HTTP, Streamable HTTP", "name": "Transports" }, { "a": "API key", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT for the MCP server. The AI Diagram Maker service it calls is closed, under terms last updated 24 September 2025", "b": "Excalidraw+ is a proprietary service under Excalidraw's terms of use. The editor and the MCP App on GitHub are MIT", "name": "Licence" }, { "a": "5", "b": "37", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "io.github.erajasekar/ai-diagram-maker-mcp", "b": "not listed", "name": "MCP registry" }, { "a": "2026-04-10", "b": "2026-09-01", "name": "Last release" }, { "a": "2025-09-24", "b": "no date given", "name": "Terms last updated" }, { "a": "2025-09-24", "b": "2021-04-29", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "yes", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "63 npm/wk", "b": "134k stars, 676k npm/wk", "name": "Popularity" } ], "faq": [ { "answer": "Excalidraw scores 52.5 (D) on agent readiness against AI Diagram Maker MCP's 43.8 (E), and leads in 4 of 7 scored categories. AI Diagram Maker MCP leads on schema \u0026 documentation and agent ergonomics.", "question": "Which is better for AI agents, AI Diagram Maker MCP or Excalidraw?" }, { "answer": "Both need an API key.", "question": "Do AI Diagram Maker MCP and Excalidraw need an API key?" }, { "answer": "Yes. AI Diagram Maker MCP has a hosted endpoint at https://mcp.aidiagrammaker.com/mcp and Excalidraw at https://api.excalidraw.com/api/v1/mcp.", "question": "Can an agent call AI Diagram Maker MCP and Excalidraw without installing anything?" }, { "answer": "No open-source release is listed for AI Diagram Maker MCP. Excalidraw is open source (Excalidraw+ is a proprietary service under Excalidraw's terms of use. The editor and the MCP App on GitHub are MIT).", "question": "Are AI Diagram Maker MCP and Excalidraw open source?" } ], "goodFor": [ { "aheadOn": [ "Schema \u0026 documentation, 75 against 65", "Agent ergonomics, 66 against 58" ], "also": [ "Runs on your own machine" ], "goodFor": "Quick architecture, sequence, ERD and flowchart diagrams from a coding agent, with a link to edit them.", "slug": "ai-diagram-maker-mcp", "watchFor": "Last release 3.0.8 on 10 April 2026, and the registry entry still says 1.0.0" }, { "aheadOn": [ "Security \u0026 auth, 73 against 45", "Payments \u0026 pricing, 35 against 20", "Maintenance \u0026 community, 44 against 17", "Transparency \u0026 trust, 63 against 35" ], "also": [ "Open source" ], "goodFor": "Teams already on Excalidraw+ that want agents to create and edit hand-drawn diagrams, slides and wireframes in a shared workspace, and one-off sketches through the free MCP App.", "slug": "excalidraw", "watchFor": "The API and MCP server are in public beta. The docs say endpoints, tool names and schemas may change and to expect breaking changes" } ], "history": { "ai-diagram-maker-mcp": null, "excalidraw": [ { "causes": [ "evidence", "correction" ], "date": "2026-11-04", "delta": -2, "from": 54.5, "fromGrade": "C", "to": 52.5, "toGrade": "D" }, { "causes": [ "correction" ], "date": "2026-10-28", "delta": -0.1, "from": 54.6, "fromGrade": "C", "to": 54.5, "toGrade": "C" }, { "causes": [ "evidence" ], "date": "2026-10-28", "delta": 0.1, "from": 54.5, "fromGrade": "C", "to": 54.6, "toGrade": "C" } ] }, "job": { "capability": "diagram.create", "name": "Diagram creation" }, "others": [ { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-cloudviz.json", "title": "AI Diagram Maker MCP vs Cloudviz API", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-cloudviz" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-d2.json", "title": "AI Diagram Maker MCP vs D2", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-d2" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-diagrams-so.json", "title": "AI Diagram Maker MCP vs Diagrams.so API + MCP", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-diagrams-so" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-drawio.json", "title": "AI Diagram Maker MCP vs draw.io + MCP", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-drawio" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-eraser.json", "title": "AI Diagram Maker MCP vs Eraser API + MCP", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-eraser" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-excaliclaw.json", "title": "AI Diagram Maker MCP vs ExcaliClaw", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-excaliclaw" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-kroki.json", "title": "AI Diagram Maker MCP vs Kroki", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-lucid.json", "title": "AI Diagram Maker MCP vs Lucid API + MCP", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-lucid" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-mermaid-chart.json", "title": "AI Diagram Maker MCP vs Mermaid Chart MCP", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-mermaid-chart" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-mumble.json", "title": "AI Diagram Maker MCP vs Mumble", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-mumble" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-mural-mcp.json", "title": "AI Diagram Maker MCP vs Mural MCP", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-mural-mcp" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-plantuml.json", "title": "AI Diagram Maker MCP vs PlantUML", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-plantuml" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-structurizr.json", "title": "AI Diagram Maker MCP vs Structurizr + MCP", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-structurizr" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-tldraw.json", "title": "AI Diagram Maker MCP vs tldraw SDK + MCP", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-tldraw" }, { "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-whimsical.json", "title": "AI Diagram Maker MCP vs Whimsical MCP", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-whimsical" }, { "json": "https://www.anchorterminal.com/compare/cloudviz-vs-excalidraw.json", "title": "Cloudviz API vs Excalidraw", "url": "https://www.anchorterminal.com/compare/cloudviz-vs-excalidraw" }, { "json": "https://www.anchorterminal.com/compare/diagrams-so-vs-excalidraw.json", "title": "Diagrams.so API + MCP vs Excalidraw", "url": "https://www.anchorterminal.com/compare/diagrams-so-vs-excalidraw" }, { "json": "https://www.anchorterminal.com/compare/drawio-vs-excalidraw.json", "title": "draw.io + MCP vs Excalidraw", "url": "https://www.anchorterminal.com/compare/drawio-vs-excalidraw" }, { "json": "https://www.anchorterminal.com/compare/eraser-vs-excalidraw.json", "title": "Eraser API + MCP vs Excalidraw", "url": "https://www.anchorterminal.com/compare/eraser-vs-excalidraw" }, { "json": "https://www.anchorterminal.com/compare/excaliclaw-vs-excalidraw.json", "title": "ExcaliClaw vs Excalidraw", "url": "https://www.anchorterminal.com/compare/excaliclaw-vs-excalidraw" }, { "json": "https://www.anchorterminal.com/compare/excalidraw-vs-kroki.json", "title": "Excalidraw vs Kroki", "url": "https://www.anchorterminal.com/compare/excalidraw-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/excalidraw-vs-lucid.json", "title": "Excalidraw vs Lucid API + MCP", "url": "https://www.anchorterminal.com/compare/excalidraw-vs-lucid" }, { "json": "https://www.anchorterminal.com/compare/excalidraw-vs-mermaid-chart.json", "title": "Excalidraw vs Mermaid Chart MCP", "url": "https://www.anchorterminal.com/compare/excalidraw-vs-mermaid-chart" }, { "json": "https://www.anchorterminal.com/compare/excalidraw-vs-mumble.json", "title": "Excalidraw vs Mumble", "url": "https://www.anchorterminal.com/compare/excalidraw-vs-mumble" }, { "json": "https://www.anchorterminal.com/compare/excalidraw-vs-mural-mcp.json", "title": "Excalidraw vs Mural MCP", "url": "https://www.anchorterminal.com/compare/excalidraw-vs-mural-mcp" }, { "json": "https://www.anchorterminal.com/compare/excalidraw-vs-plantuml.json", "title": "Excalidraw vs PlantUML", "url": "https://www.anchorterminal.com/compare/excalidraw-vs-plantuml" }, { "json": "https://www.anchorterminal.com/compare/excalidraw-vs-structurizr.json", "title": "Excalidraw vs Structurizr + MCP", "url": "https://www.anchorterminal.com/compare/excalidraw-vs-structurizr" }, { "json": "https://www.anchorterminal.com/compare/excalidraw-vs-tldraw.json", "title": "Excalidraw vs tldraw SDK + MCP", "url": "https://www.anchorterminal.com/compare/excalidraw-vs-tldraw" }, { "json": "https://www.anchorterminal.com/compare/excalidraw-vs-whimsical.json", "title": "Excalidraw vs Whimsical MCP", "url": "https://www.anchorterminal.com/compare/excalidraw-vs-whimsical" }, { "json": "https://www.anchorterminal.com/compare/d2-vs-excalidraw.json", "title": "D2 vs Excalidraw", "url": "https://www.anchorterminal.com/compare/d2-vs-excalidraw" } ], "panel": null, "scores": [ { "ai-diagram-maker-mcp": 30, "by": 0, "edge": "", "excalidraw": 30, "key": "reliability", "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "ai-diagram-maker-mcp": 75, "by": 10, "edge": "ai-diagram-maker-mcp", "excalidraw": 65, "key": "schema", "name": "Schema \u0026 documentation", "weight": 13 }, { "ai-diagram-maker-mcp": 66, "by": 8, "edge": "ai-diagram-maker-mcp", "excalidraw": 58, "key": "ergonomics", "name": "Agent ergonomics", "weight": 13 }, { "ai-diagram-maker-mcp": 45, "by": 28, "edge": "excalidraw", "excalidraw": 73, "key": "security", "name": "Security \u0026 auth", "weight": 14 }, { "ai-diagram-maker-mcp": 20, "by": 15, "edge": "excalidraw", "excalidraw": 35, "key": "payments", "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "ai-diagram-maker-mcp": 17, "by": 27, "edge": "excalidraw", "excalidraw": 44, "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7 }, { "ai-diagram-maker-mcp": 35, "by": 28, "edge": "excalidraw", "excalidraw": 63, "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Excalidraw scores 52.5 (D) on agent readiness against AI Diagram Maker MCP's 43.8 (E), and leads in 4 of 7 scored categories. AI Diagram Maker MCP leads on schema \u0026 documentation and agent ergonomics. Both do diagram creation.", "tasks": null, "tutorials": [], "verdicts": { "ai-diagram-maker-mcp": "Five compact, typed tools turn text, JSON, ASCII art, images or Mermaid into an editable D2 diagram, and the API documents its error and rate-limit responses. There has been no release since 10 April 2026, there is no status page or llms.txt, and the API key opens the whole account with no scopes.", "excalidraw": "Excalidraw+ keys carry read or full permission, route restrictions and an expiry, and the MCP server shows a key only the tools its routes allow. The API and MCP server are in public beta with breaking changes expected, sit behind the $6 Plus plan, and have no published OpenAPI file, SDK or idempotency keys. No status history can be read." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-excalidraw", "json": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-excalidraw.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-excalidraw.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-excalidraw.min.md" }, "markdown": "Excalidraw scores 52.5 (D) on agent readiness against AI Diagram Maker MCP's 43.8 (E), and leads in 4 of 7 scored categories. AI Diagram Maker MCP leads on schema \u0026 documentation and agent ergonomics. Both do diagram creation.\n\n- AI Diagram Maker MCP: grade E, 43.8/100, rank #1225 of 1486. Markdown https://www.anchorterminal.com/tools/ai-diagram-maker-mcp.md · JSON https://www.anchorterminal.com/api/v1/tools/ai-diagram-maker-mcp.json\n- Excalidraw: grade D, 52.5/100, rank #984 of 1486. Markdown https://www.anchorterminal.com/tools/excalidraw.md · JSON https://www.anchorterminal.com/api/v1/tools/excalidraw.json\n- Best diagramming APIs and diagram-as-code for AI agents: https://www.anchorterminal.com/best/diagramming/index.md\n- All 147 diagrams comparisons: https://www.anchorterminal.com/compare/diagramming/index.md\n\n## Which one, for what\n\n### AI Diagram Maker MCP (E)\n\nGood for: Quick architecture, sequence, ERD and flowchart diagrams from a coding agent, with a link to edit them.\n\nAhead on:\n- Schema \u0026 documentation, 75 against 65\n- Agent ergonomics, 66 against 58\n\nAlso in its favour:\n- Runs on your own machine\n\nWatch for: Last release 3.0.8 on 10 April 2026, and the registry entry still says 1.0.0\n\n### Excalidraw (D)\n\nGood for: Teams already on Excalidraw+ that want agents to create and edit hand-drawn diagrams, slides and wireframes in a shared workspace, and one-off sketches through the free MCP App.\n\nAhead on:\n- Security \u0026 auth, 73 against 45\n- Payments \u0026 pricing, 35 against 20\n- Maintenance \u0026 community, 44 against 17\n- Transparency \u0026 trust, 63 against 35\n\nAlso in its favour:\n- Open source\n\nWatch for: The API and MCP server are in public beta. The docs say endpoints, tool names and schemas may change and to expect breaking changes\n\n\n## Why the edge\n\n### Security \u0026 auth: Excalidraw +28\n\n- AI Diagram Maker MCP (45): Several named API keys per account, shown once and deactivated or deleted in Settings with a confirmation step, sent in a header, never a query string. No scopes, and the user guide says anyone with a key can access the account (20 of 30). The tools only create diagrams and can't change or delete anything in the account, but there's no read-only key (12 of 20). Tools return diagrams built from the caller's own input. Image inputs can be any public URL (10 of 15). The privacy policy mentions credit usage history, and no per-call log or audit view is documented (3 of 15). No security.txt, disclosure policy, bug bounty or certification found (0). 20 + 12 + 10 + 3 + 0 = 45.\n- Excalidraw (73): API keys are workspace-bound, take `read` or `full` permission or specific routes, carry an expiry and can be rotated or soft-deleted. Personal and workspace keys differ in access to private collections (30). Read-only keys expose only read tools and deletes go to trash, with no confirmation step found (14). Scene text written by collaborators returns to the model and `add_image` fetches a public URL, with no injection guidance found (3). `GET /logs` returns the workspace audit log with filters by user, action and operation (13). Excalidraw states SOC 2 Type 1 and Type 2, yearly penetration tests and Vanta scanning, and publishes advisories on GitHub (OSV lists five for the editor, the newest on 24 April 2026). That newest one, GHSA-39h7-pwv7-rc3x, covers Mermaid's own sequence-diagram flaw (CVE-2025-54881, published by Mermaid on 19 August 2025), fixed in 0.18.1 by a dependency update, so it takes no deduction; the other four are older than twelve months. No security.txt, bug bounty or SECURITY.md was found, and the trust centre report was not read (13). Docs readings per the 9 October check, not re-read on 4 November. 30 + 14 + 3 + 13 + 13 = 73.\n\n### Transparency \u0026 trust: Excalidraw +28\n\n- AI Diagram Maker MCP (35): The MCP server is MIT (package.json and LICENSE, added 18 March 2026). The service is closed, under terms last updated 24 September 2025 that name the operator only as AI Diagram Maker (20 of 30). The privacy policy of the same date keeps diagrams, revisions and chat prompts and responses 'as long as necessary', and the terms license user input 'to provide and improve our services', with no retention periods and no word on model training or the AI providers used (8 of 30). No deprecation policy or dated notices (0). No subprocessors or data locations named (0). The MCP server's source sends no telemetry of its own. 20 + 8 + 0 + 0 = 28.\n- Excalidraw (63): The graded service is closed under public terms of use, while the editor and the MCP App are MIT (20). The privacy policy of 29 April 2021 says servers are in the United States and data is kept at most one month after an account ends. The DPA of 13 January 2026 says cancelling a subscription does not delete data and retention follows internal policies. Neither names AI providers (14). No deprecation policy, only the beta warning that contracts may break (3). The DPA points to a sub-processor list at trust.excalidraw.com, which is script-drawn and was not read, and says some sub-processors are in the United States (8). The terms were re-read on 4 November (published 30 May 2022, in effect 1 June 2022); the other documents per the 9 October check. 20 + 14 + 3 + 8 = 45.\n\n### Maintenance \u0026 community: Excalidraw +27\n\n- AI Diagram Maker MCP (17): Last release v3.0.8, published to npm on 10 April 2026, 210 days before this check (0). No release since 8 August (0). Four issues in all. The two open ones, from 4 May (hosted MCP credit usage) and 13 October 2026, show no reply, and one closed issue had a comment (5 of 25). In the official MCP registry under the GitHub-verified namespace io.github.erajasekar, but the entry is 1.0.0 from 19 March 2026 while npm is on 3.0.8 (10 of 15). The only workflow publishes to the registry. No tests or CI, and the MCP SDK floor is ^1.9.0 (2 of 10). 0 + 0 + 5 + 10 + 2 = 17.\n- Excalidraw (44): The newest changelog entry is dated 1 September 2026, 64 days before this check, per the 9 October reading (20); the changelog wasn't re-read on 4 November (terms ban automated access). The editor package `@excalidraw/excalidraw` has no release since 0.18.1 (20 April 2026), and the MCP App's newest tag is v0.3.2 (9 February 2026), both read from clones. Of the dated entries recorded, only 1 September falls in the 90 days from 6 August (0). A public changelog, a roadmap, a Discord server and support@excalidraw.com exist, and the editor repository had commits up to 3 November 2026 (12). There is no SDK for the API, and the editor package on npm is the vendor's only official package (5). The editor repository runs test, lint and size workflows, and the MCP App repository has no CI and no commit since 24 March 2026 (7). 20 + 0 + 12 + 5 + 7 = 44.\n\n### Payments \u0026 pricing: Excalidraw +15\n\n- AI Diagram Maker MCP (20): No x402, MPP or L402 (0). Plan prices are public (Plus $10, Max $20 a month), with credits counted at 1,000 tokens each, so there's no per-diagram price (10 of 20). Basic is free forever with 50 credits a month, but the page doesn't say whether a card is needed or whether API and MCP calls are included (10 of 20, half as with an unstated card rule). A person signs up in the app and creates the key (0). 0 + 10 + 10 + 0 = 20.\n- Excalidraw (35): No x402, MPP or L402 (0). Plan prices are public, Free at $0 and Plus at $6 a user a month, with no per-call price (10). The free editor and the keyless MCP App need no card, while the API needs the Plus plan, whose 14-day trial does not say whether a card is taken; the terms (re-read 4 November) say the account is charged when the trial ends (15). The MCP App's README gives https://mcp.excalidraw.com as a remote server to add as a custom connector, with no key, but an API key is created by a person in workspace settings (10). Pricing per the 9 October check, not re-read on 4 November. 0 + 10 + 15 + 10 = 35.\n\n### Schema \u0026 documentation: AI Diagram Maker MCP +10\n\n- AI Diagram Maker MCP (75): All five tools have zod input schemas in src/tools, and the repository ships an OpenAPI 3 file for POST /api/v2/diagrams/generate (25). No llms.txt (404) and no docs site for agents beyond the README (0). Each description says what the tool does and when to use it, listing trigger phrases and the diagram types, without saying when another tool fits better (16 of 20). `content` has a minimum length and `diagramType` an eight-value enum; the OpenAPI adds `inputType` and `format` enums (13 of 15). Examples in the parameter descriptions and README, and the OpenAPI documents 400, 401, 402, 422 (D2 failed to compile) and 429 with typed error bodies (13 of 15). Git tags from v1.1.1 to v3.0.8 and a /api/v2 path, with no changelog or release notes (8 of 15). 25 + 0 + 16 + 13 + 13 + 8 = 75.\n- Excalidraw (65): The endpoint reference is generated from an OpenAPI schema, but no file is linked from the docs, and the MCP tool definitions could not be read without a key (10). `llms.txt` and `llms-full.txt` are published (10). The tools page says when to use `search_scene_content` over `get_scene_content`, `label` over `text` and `create_diagram` over `edit_scene_content` (16). Parameters carry ranges and enums in the reference, while `edit_scene_content` takes its elements as a JSON array string (9). Each endpoint has samples in six languages and error bodies for 400, 401 and 403 (12). The path is versioned as `/api/v1` and a monthly product changelog carries API and MCP items, with no API changelog of its own (8). Per the 9 October check, not re-read on 4 November (terms ban automated access). 10 + 10 + 16 + 9 + 12 + 8 = 65.\n\n### Agent ergonomics: AI Diagram Maker MCP +8\n\n- AI Diagram Maker MCP (66): Five compact tools (25). Output can be SVG or PNG and the API can return the D2 source with `debug`, but there's nothing to page or trim, and results carry the rendered image (10 of 20). Typed error bodies with codes, a 422 that returns the failing D2 code, and retryAfter on 429 (16 of 20). No readOnlyHint or other annotations in the source and no idempotency key, and every call spends credits (5 of 20). Only `content` is required and the hosted endpoint needs no install, but there is no SDK beyond the server (10 of 15). 25 + 10 + 16 + 5 + 10 = 66.\n- Excalidraw (58): The docs list 37 MCP tools (5). The server shows a key only the tools its routes allow, so a read-only or route-restricted key cuts the list (7). Lists take `offset` and `limit` up to 100, logs take a cursor and filters, and `search_scene_content` returns only matching elements (18). Errors are JSON with `statusCode`, `error` and `message`, and seven status codes are documented (13). No idempotency keys. Deletes of scenes and collections move them to trash, and MCP annotations could not be read (8). `create_diagram` measures labels and routes arrows, but there is no SDK for the API (7). Per the 9 October check, not re-read on 4 November. 5 + 7 + 18 + 13 + 8 + 7 = 58.\n\n## Score by category\n\n| Category | Weight | AI Diagram Maker MCP | Excalidraw | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 30 | 30 | even |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 75 | 65 | AI Diagram Maker MCP +10 |\n| Agent ergonomics | 13% (16.2 this run) | 66 | 58 | AI Diagram Maker MCP +8 |\n| Security \u0026 auth | 14% (17.5 this run) | 45 | 73 | Excalidraw +28 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 20 | 35 | Excalidraw +15 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 17 | 44 | Excalidraw +27 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 35 | 63 | Excalidraw +28 |\n| Negative events | ≤15 | 0 | 0 | |\n| **Total** | | **43.8 · E** | **52.5 · D** | |\n\n## Facts side by side\n\n| Fact | AI Diagram Maker MCP | Excalidraw |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | AI Diagram Maker (Rajasekar Elango) | Excalidraw s.r.o. |\n| Hosted endpoint | `https://mcp.aidiagrammaker.com/mcp` | `https://api.excalidraw.com/api/v1/mcp` |\n| Transports | Streamable HTTP, stdio | HTTP, Streamable HTTP |\n| Auth | API key | API key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | MIT for the MCP server. The AI Diagram Maker service it calls is closed, under terms last updated 24 September 2025 | Excalidraw+ is a proprietary service under Excalidraw's terms of use. The editor and the MCP App on GitHub are MIT |\n| Tools exposed | 5 | 37 |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| MCP registry | `io.github.erajasekar/ai-diagram-maker-mcp` | not listed |\n| Last release | 2026-04-10 | 2026-09-01 |\n| Terms last updated | 2025-09-24 | no date given |\n| Privacy policy last updated | 2025-09-24 | 2021-04-29 |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | yes |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | not found in the text | yes |\n| Arbitration or class-action waiver | not found in the text | yes |\n| Popularity | 63 npm/wk | 134k stars, 676k npm/wk |\n\n## How the scores have moved\n\n### AI Diagram Maker MCP\n\nNo score change since it was listed.\n\n### Excalidraw\n\n- -2.0 on 4 November 2026 (C to D): new evidence, correction\n- -0.1 on 28 October 2026: correction\n- +0.1 on 28 October 2026: new evidence\n\n## Verdicts\n\n**AI Diagram Maker MCP.** Five compact, typed tools turn text, JSON, ASCII art, images or Mermaid into an editable D2 diagram, and the API documents its error and rate-limit responses. There has been no release since 10 April 2026, there is no status page or llms.txt, and the API key opens the whole account with no scopes.\n\n**Excalidraw.** Excalidraw+ keys carry read or full permission, route restrictions and an expiry, and the MCP server shows a key only the tools its routes allow. The API and MCP server are in public beta with breaking changes expected, sit behind the $6 Plus plan, and have no published OpenAPI file, SDK or idempotency keys. No status history can be read.\n\n## Before you call either\n\n### AI Diagram Maker MCP\n\n1. Send the key in the `X-ADM-API-Key` header to https://mcp.aidiagrammaker.com/mcp, never in the URL\n2. Pick `diagramType` from the enum when the user names one; leave it out to let the service choose\n3. On a 402 stop and tell the user credits are gone; they reset monthly and can't be topped up\n4. On a 429 wait for `retryAfter` seconds before the next call\n5. Give the user the returned diagram link so they can edit it, since the tools can't revise an existing diagram\n\n### Excalidraw\n\n1. Send `Authorization: Bearer \u003cAPI_KEY\u003e` to https://api.excalidraw.com/api/v1. For MCP, use `POST /api/v1/mcp` only. The server is stateless and answers 405 to other methods\n2. Use a personal key to reach the owner's private collection with the collection ID `private`. A workspace admin must enable personal keys first\n3. Call `read_diagram_format`, `read_presentation_format` or `read_freeform_format` before the first scene write in a session\n4. Write with `edit_scene_content` and bind arrows through `startBinding` and `endBinding` with `tempId` references. `PUT /scenes/{sceneId}/content` removes every element left out of the request\n5. Stay under 600 requests a minute per IP and wait until `X-RateLimit-Reset` after a 429\n\n## Questions\n\n### Which is better for AI agents, AI Diagram Maker MCP or Excalidraw?\n\nExcalidraw scores 52.5 (D) on agent readiness against AI Diagram Maker MCP's 43.8 (E), and leads in 4 of 7 scored categories. AI Diagram Maker MCP leads on schema \u0026 documentation and agent ergonomics.\n\n### Do AI Diagram Maker MCP and Excalidraw need an API key?\n\nBoth need an API key.\n\n### Can an agent call AI Diagram Maker MCP and Excalidraw without installing anything?\n\nYes. AI Diagram Maker MCP has a hosted endpoint at https://mcp.aidiagrammaker.com/mcp and Excalidraw at https://api.excalidraw.com/api/v1/mcp.\n\n### Are AI Diagram Maker MCP and Excalidraw open source?\n\nNo open-source release is listed for AI Diagram Maker MCP. Excalidraw is open source (Excalidraw+ is a proprietary service under Excalidraw's terms of use. The editor and the MCP App on GitHub are MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-excalidraw.json, and with the fewest tokens: https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-excalidraw.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"ai-diagram-maker-mcp\", \"b\": \"excalidraw\"}`. From a terminal: `anchor compare ai-diagram-maker-mcp excalidraw`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/ai-diagram-maker-mcp.json and https://www.anchorterminal.com/api/v1/tools/excalidraw.json\n\n## Other comparisons with AI Diagram Maker MCP or Excalidraw\n\n- [AI Diagram Maker MCP vs Cloudviz API](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-cloudviz.md)\n- [AI Diagram Maker MCP vs D2](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-d2.md)\n- [AI Diagram Maker MCP vs Diagrams.so API + MCP](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-diagrams-so.md)\n- [AI Diagram Maker MCP vs draw.io + MCP](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-drawio.md)\n- [AI Diagram Maker MCP vs Eraser API + MCP](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-eraser.md)\n- [AI Diagram Maker MCP vs ExcaliClaw](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-excaliclaw.md)\n- [AI Diagram Maker MCP vs Kroki](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-kroki.md)\n- [AI Diagram Maker MCP vs Lucid API + MCP](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-lucid.md)\n- [AI Diagram Maker MCP vs Mermaid Chart MCP](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-mermaid-chart.md)\n- [AI Diagram Maker MCP vs Mumble](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-mumble.md)\n- [AI Diagram Maker MCP vs Mural MCP](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-mural-mcp.md)\n- [AI Diagram Maker MCP vs PlantUML](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-plantuml.md)\n- [AI Diagram Maker MCP vs Structurizr + MCP](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-structurizr.md)\n- [AI Diagram Maker MCP vs tldraw SDK + MCP](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-tldraw.md)\n- [AI Diagram Maker MCP vs Whimsical MCP](https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-whimsical.md)\n- [Cloudviz API vs Excalidraw](https://www.anchorterminal.com/compare/cloudviz-vs-excalidraw.md)\n- [Diagrams.so API + MCP vs Excalidraw](https://www.anchorterminal.com/compare/diagrams-so-vs-excalidraw.md)\n- [draw.io + MCP vs Excalidraw](https://www.anchorterminal.com/compare/drawio-vs-excalidraw.md)\n- [Eraser API + MCP vs Excalidraw](https://www.anchorterminal.com/compare/eraser-vs-excalidraw.md)\n- [ExcaliClaw vs Excalidraw](https://www.anchorterminal.com/compare/excaliclaw-vs-excalidraw.md)\n- [Excalidraw vs Kroki](https://www.anchorterminal.com/compare/excalidraw-vs-kroki.md)\n- [Excalidraw vs Lucid API + MCP](https://www.anchorterminal.com/compare/excalidraw-vs-lucid.md)\n- [Excalidraw vs Mermaid Chart MCP](https://www.anchorterminal.com/compare/excalidraw-vs-mermaid-chart.md)\n- [Excalidraw vs Mumble](https://www.anchorterminal.com/compare/excalidraw-vs-mumble.md)\n- [Excalidraw vs Mural MCP](https://www.anchorterminal.com/compare/excalidraw-vs-mural-mcp.md)\n- [Excalidraw vs PlantUML](https://www.anchorterminal.com/compare/excalidraw-vs-plantuml.md)\n- [Excalidraw vs Structurizr + MCP](https://www.anchorterminal.com/compare/excalidraw-vs-structurizr.md)\n- [Excalidraw vs tldraw SDK + MCP](https://www.anchorterminal.com/compare/excalidraw-vs-tldraw.md)\n- [Excalidraw vs Whimsical MCP](https://www.anchorterminal.com/compare/excalidraw-vs-whimsical.md)\n- [D2 vs Excalidraw](https://www.anchorterminal.com/compare/d2-vs-excalidraw.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-07", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "AI Diagram Maker MCP vs Excalidraw", "url": "" } ], "description": "Excalidraw scores 52.5 (D) to AI Diagram Maker MCP's 43.8 (E) for diagram creation. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "AI Diagram Maker MCP E 43.8", "Excalidraw D 52.5", "scores" ], "h1": "AI Diagram Maker MCP vs Excalidraw", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/ai-diagram-maker-mcp-vs-excalidraw", "published": "2026-10-01", "section": "tools", "title": "AI Diagram Maker MCP vs Excalidraw for AI agents (2026)", "toc": null, "updated": "2026-11-07", "url": "https://www.anchorterminal.com/compare/ai-diagram-maker-mcp-vs-excalidraw" }, "tokens": { "markdown": 5200, "slim": 3030 }, "version": 1 }