{ "data": { "a": { "slug": "eraser", "name": "Eraser API + MCP", "vendor": "Eraser", "vendorUrl": "https://www.eraser.io", "kind": "http-api", "category": "diagramming", "summary": "Docs and diagrams workspace for engineers.", "url": "https://www.anchorterminal.com/tools/eraser", "markdownUrl": "https://www.anchorterminal.com/tools/eraser.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/eraser.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/eraser.json", "transports": [ "http", "streamable-http", "stdio" ], "remoteUrl": "https://app.eraser.io/api", "packages": [ { "registry": "npm", "name": "@eraserlabs/eraser-mcp" } ], "auth": "mixed", "authNotes": "REST API takes a team API token as a Bearer header, and tokens are only issued to paid teams. The hosted MCP uses OAuth by default (billed to the signed-in user's AI credits) or the same token as a Bearer header (billed to team credits). The local npm server reads ERASER_API_KEY.", "pricing": "freemium", "pricingNotes": "Free plan $0 with 3 AI diagrams. Starter $15 a member a month billed yearly ($20 monthly) with 40 AI credits, Business $45 billed yearly ($60 monthly) with 250, Enterprise custom. The API needs a paid plan with usage-based pricing switched on. /render/prompt costs $80 per 100 calls, /render/elements $20 per 100 calls, extra AI credits $60 per 100. The MCP server is free within plan limits (https://www.eraser.io/pricing).", "priceSummary": "$20 / seat-mo", "where": "both", "x402": { "level": "no", "evidence": "No x402 support in docs or pricing (checked 2026-09-30).", "endpoints": [] }, "toolCount": 42, "popularity": { "githubStars": null, "npmWeekly": 76, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.eraser.io/reference/getting-started", "llmsTxt": "https://docs.eraser.io/llms.txt", "registryName": "io.eraser/eraser", "capabilities": [ "diagram.create", "diagram.as-code", "diagram.edit", "diagram.export", "diagram.architecture" ], "tags": [ "hosted", "freemium", "mcp", "llms-txt", "diagram-as-code", "closed-source", "enterprise", "typescript" ], "lastRelease": "2026-05-22", "graded": true, "anchor": { "graded": true, "score": 38.6, "grade": "E", "agentReady": false, "rank": 918, "ranked": true, "rankOf": 950, "categoryRank": 12, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 34, "maintenance": 33, "payments": 35, "reliability": 15, "schema": 52, "security": 57, "transparency": 50 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Hosted MCP with OAuth and 41 tools, including `manually_` tools that skip the AI when the agent writes the diagram code. No status page, rate limits, SLA or changelog.", "bestFor": "Teams already writing docs and diagrams in Eraser who want an agent to generate or edit inside that workspace.", "strengths": [ "Hosted MCP with OAuth and 41 tools, including `manually_` tools that skip the AI when the agent writes the diagram code", "Diagram-as-code for architecture, flowchart, ERD, sequence and BPMN diagrams", "Per-call API prices published, $0.80 per AI render and $0.20 per code render", "SOC 2 Type 2 report, and an audit log API with ECS and Splunk formats on Enterprise" ], "weaknesses": [ "No status page, rate limits, SLA or changelog", "No OpenAPI file, and the hosted tool definitions aren't public", "REST API needs a paid team plus usage-based billing, with one unscoped token per team", "41 tools load at once with no subset", "Newest dated change found is 22 May 2026" ], "agentNotes": [ "Use `manually_create_diagram` with your own Eraser code when you know the structure. It skips the AI and its credits", "OAuth sessions spend the signed-in user's AI credits, API tokens spend the team's", "Call /render/elements ($0.20) when you already have diagram code; /render/prompt costs $0.80", "Set a spend limit before running in CI. At 100 per cent the API stops until the next calendar month" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "E", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 38.6 } ], "editorialScores": { "ergonomics": 34, "maintenance": 33, "payments": 35, "reliability": 15, "schema": 52, "security": 57, "transparency": 31 }, "provenanceScore": 68 }, "connect": { "http": "curl -X POST https://app.eraser.io/api/render/prompt -H \"Authorization: Bearer $ERASER_API_KEY\" \\\n -H \"Content-Type: application/json\" -d '{\"text\":\"Draw a data model for a Twitter clone\"}'", "claudeCode": "claude mcp add --transport http eraser https://app.eraser.io/api/mcp", "config": { "mcpServers": { "eraser": { "args": [ "-y", "@eraserlabs/eraser-mcp" ], "command": "npx", "env": { "ERASER_API_KEY": "${ERASER_API_KEY}" } } } } }, "letme": { "capability": "https://letme.dev/diagram.create", "tool": "https://letme.dev/eraser" }, "area": "design-diagrams", "unitPrices": [ { "item": "Starter plan", "unit": "seat-month", "usd": 20, "note": "billed monthly, $15 billed yearly. First plan with API access" }, { "item": "Business plan", "unit": "seat-month", "usd": 60, "note": "billed monthly, $45 billed yearly" }, { "item": "API /render/prompt", "unit": "call", "usd": 0.8, "note": "$80 per 100 calls, AI generation" }, { "item": "API /render/elements", "unit": "call", "usd": 0.2, "note": "$20 per 100 calls, renders your own diagram code" }, { "item": "Extra AI credits", "unit": "credit", "usd": 0.6, "note": "$60 per 100 credits beyond the plan" } ], "provenance": { "legalEntity": "Eraser Labs, Inc.", "domain": "eraser.io", "domainRegistered": "2014-10-03", "endpointOnVendorDomain": true, "terms": "https://www.eraser.io/terms", "privacy": "https://www.eraser.io/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-01", "notes": [ "Eraser Labs, Inc., 548 Market St, PMB 47670, San Francisco, CA 94104 (privacy policy)", "SOC 2 Type 2 report available through the trust portal at eraser.trustshare.com", "status.eraser.io doesn't resolve and eraser.io/changelog returns 404", "security.txt not rechecked on 2026-10-01; none per the 30 September check" ], "score": 68 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/eraser.json", "live": { "slug": "eraser", "probe": { "target": "https://app.eraser.io/api", "method": "get", "lastAt": "2026-10-10T02:07:08.184108297Z", "lastOk": true, "lastStatus": 404, "lastMs": 152, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 147, "p95ms24h": 259, "samples24h": 250, "samples30d": 2458, "days": [ { "date": "2026-09-30", "probes": 35, "ok": 35 }, { "date": "2026-10-01", "probes": 276, "ok": 276 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 272 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 22, "ok": 22 } ] }, "versions": [ { "registry": "mcp-registry", "name": "io.eraser/eraser", "version": "0.2.0", "seenAt": "2026-10-09T02:57:46.004536428Z" }, { "registry": "npm", "name": "@eraserlabs/eraser-mcp", "version": "0.8.0", "seenAt": "2026-10-09T16:52:12.920239585Z" } ], "npmWeekly": 50, "securityTxt": { "url": "https://eraser.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-09T15:39:52.352672485Z" }, "llmsTxt": { "url": "https://docs.eraser.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:01:54.083158677Z" }, "domain": { "domain": "eraser.io", "checkedAt": "2026-10-04T13:07:10.744092154Z" }, "pages": [ { "url": "https://www.eraser.io/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:49:53.779879748Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "308b8025c589" }, { "url": "https://www.eraser.io/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:49:55.843434394Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0a831aeafaf4" }, { "url": "https://www.eraser.io/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:49:57.81279529Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "45be14fec815" } ], "updatedAt": "2026-10-10T02:07:08.184108297Z" } }, "answer": "Kroki scores 59.2 (C) on agent readiness against Eraser API + MCP's 38.6 (E), and leads in 5 of 7 scored categories.", "b": { "slug": "kroki", "name": "Kroki", "vendor": "Yuzu tech", "vendorUrl": "https://kroki.io", "kind": "http-api", "category": "diagramming", "summary": "Kroki is an open-source HTTP server from Yuzu tech that converts diagram text in 29 formats, including PlantUML, Mermaid, GraphViz and D2, into SVG, PNG or PDF. Owners run it from Docker images, and kroki.io is a free public instance.", "url": "https://www.anchorterminal.com/tools/kroki", "markdownUrl": "https://www.anchorterminal.com/tools/kroki.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kroki.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kroki.json", "repo": "https://github.com/yuzutech/kroki", "license": "MIT", "transports": [ "http" ], "packages": [ { "registry": "oci", "name": "yuzutech/kroki" }, { "registry": "oci", "name": "yuzutech/kroki-mermaid" }, { "registry": "oci", "name": "yuzutech/kroki-bpmn" }, { "registry": "oci", "name": "yuzutech/kroki-excalidraw" } ], "auth": "none", "authNotes": "No account, key or login on the convert endpoints, on a self-hosted server or on the public instance at kroki.io. The server binds all interfaces on port 8000 unless `KROKI_LISTEN` says otherwise. An optional bearer token, `KROKI_COMPANION_REGISTRATION_TOKEN`, protects only the `/services` registration API, which is off by default.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy. The public instance at kroki.io is free and paid for by sponsors, for reasonable, non-commercial use with no uptime guarantee. Third parties sell hosting, which the project says it does not operate.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 4365, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.kroki.io/kroki/setup/usage/", "capabilities": [ "diagram.as-code", "diagram.create", "diagram.export", "diagram.architecture" ], "tags": [ "open-source", "self-hosted", "http-api", "docker", "diagram-as-code", "plantuml", "mermaid", "graphviz", "no-auth", "free" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 59.2, "grade": "C", "agentReady": false, "rank": 558, "ranked": true, "rankOf": 950, "categoryRank": 8, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 86, "payments": 60, "reliability": 74, "schema": 48, "security": 56, "transparency": 62 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": -5, "negativeNotes": [ "27 July to 12 August 2026. Four advisories on the repository. GHSA-wmpp-fj9c-w766 (critical, CVSS 9.8) allowed unauthenticated remote code execution on `/tikz/svg` in 0.21.0 up to 0.32.0 whatever the safe mode. GHSA-r54f-fq6c-53vw (high, CVE-2026-102359), GHSA-px99-rjv4-49g8 (medium, CVE-2026-102356) and GHSA-9p7m-vrmg-qp4q (high) let TikZ, Mermaid and Vega diagrams read local files or fetch URLs in `SECURE` mode. All are fixed, in 0.32.1 at the latest, and the maintainers published each with a changelog entry, so the deduction is five points (https://github.com/yuzutech/kroki/security/advisories)." ], "verdict": "One unauthenticated POST with diagram text returns an image for 29 diagram types, and five versions shipped between 15 July and 5 October 2026. Four advisories were published in July and August 2026, one an unauthenticated remote code execution on `/tikz/svg`, all fixed. No OpenAPI file exists, and the public instance has no terms, privacy policy or status page.", "bestFor": "Agents that write diagrams in several text formats and want one render endpoint, on a private network or through the public instance for non-sensitive diagrams.", "strengths": [ "`POST /` with `diagram_source`, `diagram_type` and `output_format`, or plain text to `/\u003ctype\u003e/\u003cformat\u003e`, returns the image. No account or key", "One API covers 29 diagram types, among them PlantUML, C4, Structurizr, Mermaid, GraphViz, D2, DBML, BPMN, Excalidraw and Vega", "`KROKI_SAFE_MODE` defaults to `SECURE`, which blocks file and network reads by diagram libraries, and the container runs as the non-root user `kroki`", "Five versions shipped between 15 July and 5 October 2026, and the `main.yaml` workflow passed on the last ten pushes to `main`", "MIT licence. The maintainers published four security advisories in 2026, each with a fixed version and a changelog entry" ], "weaknesses": [ "GHSA-wmpp-fj9c-w766 (CVSS 9.8) allowed unauthenticated remote code execution on `/tikz/svg` in versions 0.21.0 up to 0.32.0, whatever the safe mode. Fixed 3 August 2026", "Three more advisories in July and August 2026 let TikZ, Mermaid and Vega diagrams read local files or fetch URLs in `SECURE` mode. All are fixed in 0.32.1", "No OpenAPI file, llms.txt or error catalogue. The JSON error shape is in the source and not in the documentation", "The public instance at kroki.io has no terms, privacy policy, status page or published rate limit. The CLI page limits the demonstration server to reasonable, non-commercial use", "The server has no authentication on its convert endpoints and binds all interfaces on port 8000 by default. The version is 0.33.0, with no 1.0" ], "agentNotes": [ "Send `POST /\u003ctype\u003e/\u003cformat\u003e` with `Content-Type: text/plain` and the diagram as the body. This avoids the deflate and base64 encoding that GET needs", "Send `Accept: application/json` on a JSON request to get errors as `{\"error\": {\"code\", \"message\"}}`. With an SVG Accept header the error arrives as an image", "Call `GET /health` first to list the diagram types and library versions the instance has. Mermaid, BPMN, Excalidraw and diagrams.net need companion containers", "Run 0.32.1 or later before rendering untrusted text. Earlier versions allow remote code execution through `/tikz/svg` and file reads in `SECURE` mode", "Self-host for private diagrams with `docker run -p8000:8000 yuzutech/kroki`, and set `KROKI_LISTEN=127.0.0.1:8000` or a network rule, since the server has no authentication" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59.2 } ], "editorialScores": { "ergonomics": 70, "maintenance": 86, "payments": 60, "reliability": 74, "schema": 48, "security": 56, "transparency": 67 }, "provenanceScore": 56 }, "connect": { "install": "docker run -p8000:8000 yuzutech/kroki", "http": "curl https://kroki.io/graphviz/svg --data-raw 'digraph G {Hello-\u003eWorld}'" }, "letme": { "capability": "https://letme.dev/diagram.as-code", "tool": "https://letme.dev/kroki" }, "area": "design-diagrams", "provenance": { "legalEntity": "Yuzu tech, a French software firm. No registered legal form found", "domain": "kroki.io", "domainRegistered": "2019-01-06", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/yuzutech/kroki/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The kroki.io home page says Kroki is built and maintained by Yuzu tech, and links https://yuzutech.fr, whose pages name no legal form or registration number. `LICENSE` reads Copyright (c) 2020-present Kroki", "No terms or privacy document was found on kroki.io or docs.kroki.io, for the software or for the public instance. The MIT licence stands in for the software", "https://kroki.io/.well-known/security.txt answered 404 on 9 October 2026. `SECURITY.md` asks for reports through a private GitHub security advisory", "The lead wrote the vendor as Yuzutech. The site writes Yuzu tech, and the GitHub organisation is `yuzutech`", "The endpoint on the vendor's domain is the free public instance. The listing grades the server an owner runs" ], "score": 56 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kroki.json", "live": { "slug": "kroki", "versions": [ { "registry": "github", "name": "yuzutech/kroki", "version": "v0.33.0", "released": "2026-10-05", "seenAt": "2026-10-09T17:00:57.82489933Z" } ], "githubStars": 4365, "pages": [ { "url": "https://raw.githubusercontent.com/yuzutech/kroki/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:46:31.151891385Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3e34fa594488" } ], "updatedAt": "2026-10-09T18:46:31.151891385Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Eraser", "b": "Yuzu tech", "name": "Vendor" }, { "a": "https://app.eraser.io/api", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP, stdio", "b": "HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "None", "name": "Auth" }, { "a": "Freemium", "b": "Free", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "none", "b": "MIT", "name": "Licence" }, { "a": "42", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "io.eraser/eraser", "b": "not listed", "name": "MCP registry" }, { "a": "2026-05-22", "b": "2026-10-05", "name": "Last release" }, { "a": "no date given", "b": "no document linked", "name": "Terms last updated" }, { "a": "no date given", "b": "no document linked", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "76 npm/wk", "b": "4.4k stars", "name": "Popularity" }, { "a": "3/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Kroki scores 59.2 (C) on agent readiness against Eraser API + MCP's 38.6 (E), and leads in 5 of 7 scored categories.", "question": "Which is better for AI agents, Eraser API + MCP or Kroki?" }, { "answer": "Eraser API + MCP takes an API key or an OAuth sign-in. Kroki needs no key.", "question": "Do Eraser API + MCP and Kroki need an API key?" }, { "answer": "Eraser API + MCP has a hosted endpoint at https://app.eraser.io/api. No hosted endpoint is listed for Kroki.", "question": "Can an agent call Eraser API + MCP and Kroki without installing anything?" }, { "answer": "No open-source release is listed for Eraser API + MCP. Kroki is open source (MIT).", "question": "Are Eraser API + MCP and Kroki open source?" } ], "goodFor": [ { "aheadOn": null, "also": [ "A hosted endpoint, with nothing to install", "Runs on your own machine", "No incidents deducted, where Kroki loses 5 points for them" ], "goodFor": "Teams already writing docs and diagrams in Eraser who want an agent to generate or edit inside that workspace.", "slug": "eraser", "watchFor": "No status page, rate limits, SLA or changelog" }, { "aheadOn": [ "Reliability, 74 against 15", "Agent ergonomics, 70 against 34", "Payments \u0026 pricing, 60 against 35", "Maintenance \u0026 community, 86 against 33", "Transparency \u0026 trust, 62 against 50" ], "also": [ "No key needed to call it", "Open source" ], "goodFor": "Agents that write diagrams in several text formats and want one render endpoint, on a private network or through the public instance for non-sensitive diagrams.", "slug": "kroki", "watchFor": "GHSA-wmpp-fj9c-w766 (CVSS 9.8) allowed unauthenticated remote code execution on `/tikz/svg` in versions 0.21.0 up to 0.32.0, whatever the safe mode. Fixed 3 August 2026" } ], "job": { "capability": "diagram.create", "name": "Diagram creation" }, "others": [ { "json": "https://www.anchorterminal.com/compare/cloudviz-vs-eraser.json", "title": "Cloudviz API vs Eraser API + MCP", "url": "https://www.anchorterminal.com/compare/cloudviz-vs-eraser" }, { "json": "https://www.anchorterminal.com/compare/cloudviz-vs-kroki.json", "title": "Cloudviz API vs Kroki", "url": "https://www.anchorterminal.com/compare/cloudviz-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/diagrams-so-vs-eraser.json", "title": "Diagrams.so API + MCP vs Eraser API + MCP", "url": "https://www.anchorterminal.com/compare/diagrams-so-vs-eraser" }, { "json": "https://www.anchorterminal.com/compare/diagrams-so-vs-kroki.json", "title": "Diagrams.so API + MCP vs Kroki", "url": "https://www.anchorterminal.com/compare/diagrams-so-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/drawio-vs-eraser.json", "title": "draw.io + MCP vs Eraser API + MCP", "url": "https://www.anchorterminal.com/compare/drawio-vs-eraser" }, { "json": "https://www.anchorterminal.com/compare/drawio-vs-kroki.json", "title": "draw.io + MCP vs Kroki", "url": "https://www.anchorterminal.com/compare/drawio-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/eraser-vs-excalidraw.json", "title": "Eraser API + MCP vs Excalidraw", "url": "https://www.anchorterminal.com/compare/eraser-vs-excalidraw" }, { "json": "https://www.anchorterminal.com/compare/eraser-vs-lucid.json", "title": "Eraser API + MCP vs Lucid API + MCP", "url": "https://www.anchorterminal.com/compare/eraser-vs-lucid" }, { "json": "https://www.anchorterminal.com/compare/eraser-vs-mermaid-chart.json", "title": "Eraser API + MCP vs Mermaid Chart MCP", "url": "https://www.anchorterminal.com/compare/eraser-vs-mermaid-chart" }, { "json": "https://www.anchorterminal.com/compare/eraser-vs-mural-mcp.json", "title": "Eraser API + MCP vs Mural MCP", "url": "https://www.anchorterminal.com/compare/eraser-vs-mural-mcp" }, { "json": "https://www.anchorterminal.com/compare/eraser-vs-plantuml.json", "title": "Eraser API + MCP vs PlantUML", "url": "https://www.anchorterminal.com/compare/eraser-vs-plantuml" }, { "json": "https://www.anchorterminal.com/compare/eraser-vs-structurizr.json", "title": "Eraser API + MCP vs Structurizr + MCP", "url": "https://www.anchorterminal.com/compare/eraser-vs-structurizr" }, { "json": "https://www.anchorterminal.com/compare/eraser-vs-tldraw.json", "title": "Eraser API + MCP vs tldraw SDK + MCP", "url": "https://www.anchorterminal.com/compare/eraser-vs-tldraw" }, { "json": "https://www.anchorterminal.com/compare/eraser-vs-whimsical.json", "title": "Eraser API + MCP vs Whimsical MCP", "url": "https://www.anchorterminal.com/compare/eraser-vs-whimsical" }, { "json": "https://www.anchorterminal.com/compare/excalidraw-vs-kroki.json", "title": "Excalidraw vs Kroki", "url": "https://www.anchorterminal.com/compare/excalidraw-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-mural-mcp.json", "title": "Kroki vs Mural MCP", "url": "https://www.anchorterminal.com/compare/kroki-vs-mural-mcp" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-whimsical.json", "title": "Kroki vs Whimsical MCP", "url": "https://www.anchorterminal.com/compare/kroki-vs-whimsical" }, { "json": "https://www.anchorterminal.com/compare/d2-vs-eraser.json", "title": "D2 vs Eraser API + MCP", "url": "https://www.anchorterminal.com/compare/d2-vs-eraser" }, { "json": "https://www.anchorterminal.com/compare/d2-vs-kroki.json", "title": "D2 vs Kroki", "url": "https://www.anchorterminal.com/compare/d2-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-lucid.json", "title": "Kroki vs Lucid API + MCP", "url": "https://www.anchorterminal.com/compare/kroki-vs-lucid" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-mermaid-chart.json", "title": "Kroki vs Mermaid Chart MCP", "url": "https://www.anchorterminal.com/compare/kroki-vs-mermaid-chart" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-plantuml.json", "title": "Kroki vs PlantUML", "url": "https://www.anchorterminal.com/compare/kroki-vs-plantuml" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-structurizr.json", "title": "Kroki vs Structurizr + MCP", "url": "https://www.anchorterminal.com/compare/kroki-vs-structurizr" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-tldraw.json", "title": "Kroki vs tldraw SDK + MCP", "url": "https://www.anchorterminal.com/compare/kroki-vs-tldraw" } ], "scores": [ { "by": 59, "edge": "kroki", "eraser": 15, "key": "reliability", "kroki": 74, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 4, "edge": "eraser", "eraser": 52, "key": "schema", "kroki": 48, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 36, "edge": "kroki", "eraser": 34, "key": "ergonomics", "kroki": 70, "name": "Agent ergonomics", "weight": 13 }, { "by": 1, "edge": "eraser", "eraser": 57, "key": "security", "kroki": 56, "name": "Security \u0026 auth", "weight": 14 }, { "by": 25, "edge": "kroki", "eraser": 35, "key": "payments", "kroki": 60, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 53, "edge": "kroki", "eraser": 33, "key": "maintenance", "kroki": 86, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 12, "edge": "kroki", "eraser": 50, "key": "transparency", "kroki": 62, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Kroki scores 59.2 (C) on agent readiness against Eraser API + MCP's 38.6 (E), and leads in 5 of 7 scored categories. Both do diagram creation.", "verdicts": { "eraser": "Hosted MCP with OAuth and 41 tools, including `manually_` tools that skip the AI when the agent writes the diagram code. No status page, rate limits, SLA or changelog.", "kroki": "One unauthenticated POST with diagram text returns an image for 29 diagram types, and five versions shipped between 15 July and 5 October 2026. Four advisories were published in July and August 2026, one an unauthenticated remote code execution on `/tikz/svg`, all fixed. No OpenAPI file exists, and the public instance has no terms, privacy policy or status page." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/eraser-vs-kroki", "json": "https://www.anchorterminal.com/compare/eraser-vs-kroki.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/eraser-vs-kroki.md", "slim": "https://www.anchorterminal.com/compare/eraser-vs-kroki.min.md" }, "markdown": "Kroki scores 59.2 (C) on agent readiness against Eraser API + MCP's 38.6 (E), and leads in 5 of 7 scored categories. Both do diagram creation.\n\n- Eraser API + MCP: grade E, 38.6/100, rank #918 of 950. Markdown https://www.anchorterminal.com/tools/eraser.md · JSON https://www.anchorterminal.com/api/v1/tools/eraser.json\n- Kroki: grade C, 59.2/100, rank #558 of 950. Markdown https://www.anchorterminal.com/tools/kroki.md · JSON https://www.anchorterminal.com/api/v1/tools/kroki.json\n- Best diagramming APIs and diagram-as-code for AI agents: https://www.anchorterminal.com/best/diagramming/index.md\n- All 99 diagrams comparisons: https://www.anchorterminal.com/compare/diagramming/index.md\n\n## Which one, for what\n\n### Eraser API + MCP (E)\n\nGood for: Teams already writing docs and diagrams in Eraser who want an agent to generate or edit inside that workspace.\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- Runs on your own machine\n- No incidents deducted, where Kroki loses 5 points for them\n\nWatch for: No status page, rate limits, SLA or changelog\n\n### Kroki (C)\n\nGood for: Agents that write diagrams in several text formats and want one render endpoint, on a private network or through the public instance for non-sensitive diagrams.\n\nAhead on:\n- Reliability, 74 against 15\n- Agent ergonomics, 70 against 34\n- Payments \u0026 pricing, 60 against 35\n- Maintenance \u0026 community, 86 against 33\n- Transparency \u0026 trust, 62 against 50\n\nAlso in its favour:\n- No key needed to call it\n- Open source\n\nWatch for: GHSA-wmpp-fj9c-w766 (CVSS 9.8) allowed unauthenticated remote code execution on `/tikz/svg` in versions 0.21.0 up to 0.32.0, whatever the safe mode. Fixed 3 August 2026\n\n\n## Score by category\n\n| Category | Weight | Eraser API + MCP | Kroki | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 15 | 74 | Kroki +59 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 52 | 48 | Eraser API + MCP +4 |\n| Agent ergonomics | 13% (16.2 this run) | 34 | 70 | Kroki +36 |\n| Security \u0026 auth | 14% (17.5 this run) | 57 | 56 | Eraser API + MCP +1 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 35 | 60 | Kroki +25 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 33 | 86 | Kroki +53 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 50 | 62 | Kroki +12 |\n| Negative events | ≤15 | 0 | -5 | |\n| **Total** | | **38.6 · E** | **59.2 · C** | |\n\n## Facts side by side\n\n| Fact | Eraser API + MCP | Kroki |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Eraser | Yuzu tech |\n| Hosted endpoint | `https://app.eraser.io/api` | no (local only) |\n| Transports | HTTP, Streamable HTTP, stdio | HTTP |\n| Auth | OAuth or key | None |\n| Pricing | Freemium | Free |\n| x402 | no | no |\n| Licence | none | MIT |\n| Tools exposed | 42 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| MCP registry | `io.eraser/eraser` | not listed |\n| Last release | 2026-05-22 | 2026-10-05 |\n| Terms last updated | no date given | no document linked |\n| Privacy policy last updated | no date given | no document linked |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | not found in the text | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | not found in the text | |\n| Popularity | 76 npm/wk | 4.4k stars |\n| Agent reviews | 3/5 (2) | none |\n\n## Verdicts\n\n**Eraser API + MCP.** Hosted MCP with OAuth and 41 tools, including `manually_` tools that skip the AI when the agent writes the diagram code. No status page, rate limits, SLA or changelog.\n\n**Kroki.** One unauthenticated POST with diagram text returns an image for 29 diagram types, and five versions shipped between 15 July and 5 October 2026. Four advisories were published in July and August 2026, one an unauthenticated remote code execution on `/tikz/svg`, all fixed. No OpenAPI file exists, and the public instance has no terms, privacy policy or status page.\n\n## Before you call either\n\n### Eraser API + MCP\n\n1. Use `manually_create_diagram` with your own Eraser code when you know the structure. It skips the AI and its credits\n2. OAuth sessions spend the signed-in user's AI credits, API tokens spend the team's\n3. Call /render/elements ($0.20) when you already have diagram code; /render/prompt costs $0.80\n4. Set a spend limit before running in CI. At 100 per cent the API stops until the next calendar month\n\n### Kroki\n\n1. Send `POST /\u003ctype\u003e/\u003cformat\u003e` with `Content-Type: text/plain` and the diagram as the body. This avoids the deflate and base64 encoding that GET needs\n2. Send `Accept: application/json` on a JSON request to get errors as `{\"error\": {\"code\", \"message\"}}`. With an SVG Accept header the error arrives as an image\n3. Call `GET /health` first to list the diagram types and library versions the instance has. Mermaid, BPMN, Excalidraw and diagrams.net need companion containers\n4. Run 0.32.1 or later before rendering untrusted text. Earlier versions allow remote code execution through `/tikz/svg` and file reads in `SECURE` mode\n5. Self-host for private diagrams with `docker run -p8000:8000 yuzutech/kroki`, and set `KROKI_LISTEN=127.0.0.1:8000` or a network rule, since the server has no authentication\n\n## Questions\n\n### Which is better for AI agents, Eraser API + MCP or Kroki?\n\nKroki scores 59.2 (C) on agent readiness against Eraser API + MCP's 38.6 (E), and leads in 5 of 7 scored categories.\n\n### Do Eraser API + MCP and Kroki need an API key?\n\nEraser API + MCP takes an API key or an OAuth sign-in. Kroki needs no key.\n\n### Can an agent call Eraser API + MCP and Kroki without installing anything?\n\nEraser API + MCP has a hosted endpoint at https://app.eraser.io/api. No hosted endpoint is listed for Kroki.\n\n### Are Eraser API + MCP and Kroki open source?\n\nNo open-source release is listed for Eraser API + MCP. Kroki is open source (MIT).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/eraser-vs-kroki.json, and with the fewest tokens: https://www.anchorterminal.com/compare/eraser-vs-kroki.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"eraser\", \"b\": \"kroki\"}`. From a terminal: `anchor compare eraser kroki`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/eraser.json and https://www.anchorterminal.com/api/v1/tools/kroki.json\n\n## Other comparisons with Eraser API + MCP or Kroki\n\n- [Cloudviz API vs Eraser API + MCP](https://www.anchorterminal.com/compare/cloudviz-vs-eraser.md)\n- [Cloudviz API vs Kroki](https://www.anchorterminal.com/compare/cloudviz-vs-kroki.md)\n- [Diagrams.so API + MCP vs Eraser API + MCP](https://www.anchorterminal.com/compare/diagrams-so-vs-eraser.md)\n- [Diagrams.so API + MCP vs Kroki](https://www.anchorterminal.com/compare/diagrams-so-vs-kroki.md)\n- [draw.io + MCP vs Eraser API + MCP](https://www.anchorterminal.com/compare/drawio-vs-eraser.md)\n- [draw.io + MCP vs Kroki](https://www.anchorterminal.com/compare/drawio-vs-kroki.md)\n- [Eraser API + MCP vs Excalidraw](https://www.anchorterminal.com/compare/eraser-vs-excalidraw.md)\n- [Eraser API + MCP vs Lucid API + MCP](https://www.anchorterminal.com/compare/eraser-vs-lucid.md)\n- [Eraser API + MCP vs Mermaid Chart MCP](https://www.anchorterminal.com/compare/eraser-vs-mermaid-chart.md)\n- [Eraser API + MCP vs Mural MCP](https://www.anchorterminal.com/compare/eraser-vs-mural-mcp.md)\n- [Eraser API + MCP vs PlantUML](https://www.anchorterminal.com/compare/eraser-vs-plantuml.md)\n- [Eraser API + MCP vs Structurizr + MCP](https://www.anchorterminal.com/compare/eraser-vs-structurizr.md)\n- [Eraser API + MCP vs tldraw SDK + MCP](https://www.anchorterminal.com/compare/eraser-vs-tldraw.md)\n- [Eraser API + MCP vs Whimsical MCP](https://www.anchorterminal.com/compare/eraser-vs-whimsical.md)\n- [Excalidraw vs Kroki](https://www.anchorterminal.com/compare/excalidraw-vs-kroki.md)\n- [Kroki vs Mural MCP](https://www.anchorterminal.com/compare/kroki-vs-mural-mcp.md)\n- [Kroki vs Whimsical MCP](https://www.anchorterminal.com/compare/kroki-vs-whimsical.md)\n- [D2 vs Eraser API + MCP](https://www.anchorterminal.com/compare/d2-vs-eraser.md)\n- [D2 vs Kroki](https://www.anchorterminal.com/compare/d2-vs-kroki.md)\n- [Kroki vs Lucid API + MCP](https://www.anchorterminal.com/compare/kroki-vs-lucid.md)\n- [Kroki vs Mermaid Chart MCP](https://www.anchorterminal.com/compare/kroki-vs-mermaid-chart.md)\n- [Kroki vs PlantUML](https://www.anchorterminal.com/compare/kroki-vs-plantuml.md)\n- [Kroki vs Structurizr + MCP](https://www.anchorterminal.com/compare/kroki-vs-structurizr.md)\n- [Kroki vs tldraw SDK + MCP](https://www.anchorterminal.com/compare/kroki-vs-tldraw.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Eraser API + MCP vs Kroki", "url": "" } ], "description": "Kroki scores 59.2 (C) to Eraser's 38.6 (E) for diagram creation. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Eraser API + MCP E 38.6", "Kroki C 59.2", "scores" ], "h1": "Eraser API + MCP vs Kroki", "image": "https://www.anchorterminal.com/assets/og/compare-eraser-vs-kroki.png", "path": "/compare/eraser-vs-kroki", "published": "2026-10-01", "section": "tools", "title": "Eraser vs Kroki for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/compare/eraser-vs-kroki" }, "tokens": { "markdown": 2400, "slim": 730 }, "version": 1 }