D2 vs Excalidraw

D2

A single local command turns text into a diagram in six formats with no account, key or network call, and CI passes on the default branch. The language is at 0.9.0 with no stable release, its company sponsor has shut down, and one maintainer with limited time wrote every commit since July.

Excalidraw

Excalidraw+ keys carry read or full permission, route restrictions and an expiry, and the MCP server shows a key only the tools its routes allow. The API and MCP server are in public beta with breaking changes expected, sit behind the $6 Plus plan, and have no published OpenAPI file, SDK or idempotency keys.

D2

1. Check the exit status of d2, never the output file. The man page says a partial render can be written when an error occurs
2. Run d2 validate file.d2 before rendering, and d2 fmt to normalise the source
3. Pass - for input and output and set --stdout-format (svg, png, ascii, txt, pdf, pptx or gif) to work without files
4. Use --stdout-format ascii when the reader is a text-only model
5. Pass --bundle=false or review image URLs and imports before rendering D2 text from an untrusted source. Release 0.9.0 fetches remote images when bundling

Excalidraw

1. Send Authorization: Bearer <API_KEY> to https://api.excalidraw.com/api/v1. For MCP, use POST /api/v1/mcp only. The server is stateless and answers 405 to other methods
2. Use a personal key to reach the owner's private collection with the collection ID private. A workspace admin must enable personal keys first
3. Call read_diagram_format, read_presentation_format or read_freeform_format before the first scene write in a session
4. Write with edit_scene_content and bind arrows through startBinding and endBinding with tempId references. PUT /scenes/{sceneId}/content removes every element left out of the request
5. Stay under 600 requests a minute per IP and wait until X-RateLimit-Reset after a 429