{ "data": { "a": { "slug": "kroki", "name": "Kroki", "vendor": "Yuzu tech", "vendorUrl": "https://kroki.io", "kind": "http-api", "category": "diagramming", "summary": "Kroki is an open-source HTTP server from Yuzu tech that converts diagram text in 29 formats, including PlantUML, Mermaid, GraphViz and D2, into SVG, PNG or PDF. Owners run it from Docker images, and kroki.io is a free public instance.", "url": "https://www.anchorterminal.com/tools/kroki", "markdownUrl": "https://www.anchorterminal.com/tools/kroki.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kroki.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kroki.json", "repo": "https://github.com/yuzutech/kroki", "license": "MIT", "transports": [ "http" ], "packages": [ { "registry": "oci", "name": "yuzutech/kroki" }, { "registry": "oci", "name": "yuzutech/kroki-mermaid" }, { "registry": "oci", "name": "yuzutech/kroki-bpmn" }, { "registry": "oci", "name": "yuzutech/kroki-excalidraw" } ], "auth": "none", "authNotes": "No account, key or login on the convert endpoints, on a self-hosted server or on the public instance at kroki.io. The server binds all interfaces on port 8000 unless `KROKI_LISTEN` says otherwise. An optional bearer token, `KROKI_COMPANION_REGISTRATION_TOKEN`, protects only the `/services` registration API, which is off by default.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy. The public instance at kroki.io is free and paid for by sponsors, for reasonable, non-commercial use with no uptime guarantee. Third parties sell hosting, which the project says it does not operate.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 4365, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.kroki.io/kroki/setup/usage/", "capabilities": [ "diagram.as-code", "diagram.create", "diagram.export", "diagram.architecture" ], "tags": [ "open-source", "self-hosted", "http-api", "docker", "diagram-as-code", "plantuml", "mermaid", "graphviz", "no-auth", "free" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 59.2, "grade": "C", "agentReady": false, "rank": 591, "ranked": true, "rankOf": 1084, "categoryRank": 9, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 86, "payments": 60, "reliability": 74, "schema": 48, "security": 56, "transparency": 62 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-09" }, "negative": -5, "negativeNotes": [ "27 July to 12 August 2026. Four advisories on the repository. GHSA-wmpp-fj9c-w766 (critical, CVSS 9.8) allowed unauthenticated remote code execution on `/tikz/svg` in 0.21.0 up to 0.32.0 whatever the safe mode. GHSA-r54f-fq6c-53vw (high, CVE-2026-102359), GHSA-px99-rjv4-49g8 (medium, CVE-2026-102356) and GHSA-9p7m-vrmg-qp4q (high) let TikZ, Mermaid and Vega diagrams read local files or fetch URLs in `SECURE` mode. All are fixed, in 0.32.1 at the latest, and the maintainers published each with a changelog entry, so the deduction is five points (https://github.com/yuzutech/kroki/security/advisories)." ], "verdict": "One unauthenticated POST with diagram text returns an image for 29 diagram types, and five versions shipped between 15 July and 5 October 2026. Four advisories were published in July and August 2026, one an unauthenticated remote code execution on `/tikz/svg`, all fixed. No OpenAPI file exists, and the public instance has no terms, privacy policy or status page.", "bestFor": "Agents that write diagrams in several text formats and want one render endpoint, on a private network or through the public instance for non-sensitive diagrams.", "strengths": [ "`POST /` with `diagram_source`, `diagram_type` and `output_format`, or plain text to `/\u003ctype\u003e/\u003cformat\u003e`, returns the image. No account or key", "One API covers 29 diagram types, among them PlantUML, C4, Structurizr, Mermaid, GraphViz, D2, DBML, BPMN, Excalidraw and Vega", "`KROKI_SAFE_MODE` defaults to `SECURE`, which blocks file and network reads by diagram libraries, and the container runs as the non-root user `kroki`", "Five versions shipped between 15 July and 5 October 2026, and the `main.yaml` workflow passed on the last ten pushes to `main`", "MIT licence. The maintainers published four security advisories in 2026, each with a fixed version and a changelog entry" ], "weaknesses": [ "GHSA-wmpp-fj9c-w766 (CVSS 9.8) allowed unauthenticated remote code execution on `/tikz/svg` in versions 0.21.0 up to 0.32.0, whatever the safe mode. Fixed 3 August 2026", "Three more advisories in July and August 2026 let TikZ, Mermaid and Vega diagrams read local files or fetch URLs in `SECURE` mode. All are fixed in 0.32.1", "No OpenAPI file, llms.txt or error catalogue. The JSON error shape is in the source and not in the documentation", "The public instance at kroki.io has no terms, privacy policy, status page or published rate limit. The CLI page limits the demonstration server to reasonable, non-commercial use", "The server has no authentication on its convert endpoints and binds all interfaces on port 8000 by default. The version is 0.33.0, with no 1.0" ], "agentNotes": [ "Send `POST /\u003ctype\u003e/\u003cformat\u003e` with `Content-Type: text/plain` and the diagram as the body. This avoids the deflate and base64 encoding that GET needs", "Send `Accept: application/json` on a JSON request to get errors as `{\"error\": {\"code\", \"message\"}}`. With an SVG Accept header the error arrives as an image", "Call `GET /health` first to list the diagram types and library versions the instance has. Mermaid, BPMN, Excalidraw and diagrams.net need companion containers", "Run 0.32.1 or later before rendering untrusted text. Earlier versions allow remote code execution through `/tikz/svg` and file reads in `SECURE` mode", "Self-host for private diagrams with `docker run -p8000:8000 yuzutech/kroki`, and set `KROKI_LISTEN=127.0.0.1:8000` or a network rule, since the server has no authentication" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59.2 } ], "editorialScores": { "ergonomics": 70, "maintenance": 86, "payments": 60, "reliability": 74, "schema": 48, "security": 56, "transparency": 67 }, "provenanceScore": 56 }, "connect": { "install": "docker run -p8000:8000 yuzutech/kroki", "http": "curl https://kroki.io/graphviz/svg --data-raw 'digraph G {Hello-\u003eWorld}'" }, "letme": { "capability": "https://letme.dev/diagram.as-code", "tool": "https://letme.dev/kroki" }, "area": "design-diagrams", "provenance": { "legalEntity": "Yuzu tech, a French software firm. No registered legal form found", "domain": "kroki.io", "domainRegistered": "2019-01-06", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/yuzutech/kroki/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The kroki.io home page says Kroki is built and maintained by Yuzu tech, and links https://yuzutech.fr, whose pages name no legal form or registration number. `LICENSE` reads Copyright (c) 2020-present Kroki", "No terms or privacy document was found on kroki.io or docs.kroki.io, for the software or for the public instance. The MIT licence stands in for the software", "https://kroki.io/.well-known/security.txt answered 404 on 9 October 2026. `SECURITY.md` asks for reports through a private GitHub security advisory", "The lead wrote the vendor as Yuzutech. The site writes Yuzu tech, and the GitHub organisation is `yuzutech`", "The endpoint on the vendor's domain is the free public instance. The listing grades the server an owner runs" ], "score": 56 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kroki.json", "live": { "slug": "kroki", "versions": [ { "registry": "github", "name": "yuzutech/kroki", "version": "v0.33.0", "released": "2026-10-05", "seenAt": "2026-10-13T23:04:43.455294126Z" } ], "githubStars": 4368, "securityTxt": { "url": "https://kroki.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-14T15:46:42.377590145Z" }, "domain": { "domain": "kroki.io", "checkedAt": "2026-10-11T13:26:25.427101815Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/yuzutech/kroki/main/CHANGELOG.md", "kind": "changelog", "status": 304, "checkedAt": "2026-10-14T21:08:25.560211679Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3e34fa594488" } ], "updatedAt": "2026-10-14T21:08:25.560211679Z" } }, "answer": "Kroki scores 59.2 (C) on agent readiness against Mumble's 7.5 (F), and leads in every scored category.", "b": { "slug": "mumble", "name": "Mumble", "vendor": "tiny space", "vendorUrl": "https://www.tinyspace.ai", "kind": "platform", "category": "diagramming", "summary": "Mumble is a macOS app from tiny space that transcribes a conversation on the Mac and draws a diagram as people talk, linking each box to the words behind it. It is in beta behind an early-access waitlist.", "url": "https://www.anchorterminal.com/tools/mumble", "markdownUrl": "https://www.anchorterminal.com/tools/mumble.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/mumble.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/mumble.json", "license": "No licence, terms of use or source repository was found on tinyspace.ai or GitHub (checked 2026-10-14). The app and the `mumble-mcp` binary are not published as open source", "transports": [], "packages": [], "auth": "none", "authNotes": "No credential exists for an outside agent, since neither the app nor `mumble-mcp` can be downloaded publicly. Per the docs, `mumble-mcp` is a local stdio binary that needs no API key and is bounded by the folder path passed at start. The AI functions run through the person's own signed-in Claude Code or Codex, and Mumble never asks for or stores an API key (https://www.tinyspace.ai/mumble/docs, checked 2026-10-14).", "pricing": "byo-plan", "pricingNotes": "Free while Mumble is in beta, and local use on the Mac is stated to stay free after the beta. The live map runs on the person's own Claude Code or Codex plan, so its cost is that plan's allowance. Transcription-only mode needs neither. Two paid plans, Private (one-off price) and Team (monthly), are marked coming soon with no price published (https://www.tinyspace.ai/mumble#pricing, checked 2026-10-14).", "priceSummary": "Your plan", "where": "local", "x402": { "level": "no", "evidence": "Local app and local stdio MCP server with no payments. No x402, MPP or L402 on the Mumble pages, docs or llms.txt (checked 2026-10-14).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-14" }, "docsUrl": "https://www.tinyspace.ai/mumble/docs", "llmsTxt": "https://www.tinyspace.ai/llms.txt", "capabilities": [ "diagram.create", "diagram.edit", "diagram.architecture", "diagram.export", "meetings.recording", "meetings.transcript", "meetings.summary", "speech.stt" ], "tags": [ "official", "local", "desktop", "macos", "byo-plan", "beta", "waitlist", "not-for-agents", "closed-source", "llms-txt", "no-status-page" ], "graded": true, "own": true, "disclosure": "Mumble is made by tiny space, the company of Quynh Tran-Thanh, a founder of Anchor Terminal. It's graded the same way as every listing, by the same published checklist with the same readings, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed. letme never picks it.", "anchor": { "graded": true, "score": 7.5, "grade": "F", "agentReady": false, "rank": 1081, "ranked": true, "rankOf": 1084, "categoryRank": 17, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 0, "maintenance": 0, "payments": 30, "reliability": 5, "schema": 10, "security": 0, "transparency": 13 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-14" }, "negative": 0, "verdict": "Mumble keeps audio on the Mac and stores each conversation as plain files in ~/Mumble, with canvas JSON that diffs cleanly. There is no API or MCP server an outside agent can call today. The documented `mumble-mcp` has no public download, package or repository, and the app is reached only through an early-access waitlist.", "bestFor": "A person on a Mac with early access who wants a live, transcript-linked diagram of a call or workshop, kept as plain files in git, and who already pays for Claude Code or Codex.", "disclosure": "Mumble is made by tiny space, the company of Quynh Tran-Thanh, a founder of Anchor Terminal. It's graded the same way as every listing, by the same published checklist with the same readings, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed. letme never picks it.", "strengths": [ "Audio is transcribed on the Mac with whisper.cpp and, per tiny space, never uploaded. Transcription-only mode sends nothing to an AI provider", "Each conversation is a folder of plain files in ~/Mumble, and canvas JSON is serialised deterministically with stable node ids, so edits show as small diffs", "Every box links to the transcript passage behind it, and items the person didn't ask for are drawn as proposals to accept or reject", "AI functions run on the person's own Claude Code or Codex account, and Mumble says it never asks for or stores an API key", "Free during the beta, and local use on the Mac is stated to stay free after it" ], "weaknesses": [ "No API or MCP server an outside agent can call. The documented `mumble-mcp` binary has no public download, package or repository (checked 14 October 2026)", "Access is an early-access waitlist with email confirmation, and no download of the app was found", "No terms of use, privacy policy, legal entity, changelog or security.txt was found on tinyspace.ai", "Transcript text and map context go to the person's Claude Code or Codex provider whenever AI functions are on", "English only, with no speaker labels and no shared editing, and Mac only (macOS 13 or later)" ], "agentNotes": [ "Don't plan to call Mumble from another agent. Neither the app nor `mumble-mcp` can be obtained publicly, so hand the task to a person with early access", "Don't configure `/path/to/mumble-mcp` from the docs. It is a placeholder, and no binary is published", "If the person already has Mumble, read ~/Mumble/\u003ccapture\u003e/ directly, `capture.json` for the transcript and `diagram.canvas` for the map", "Keep canvas keys in schema order and never rename a node id, or the edges that name it are orphaned and the canvas is refused. Use git as the undo", "Don't write to a capture that is being recorded. The app doesn't merge the two versions" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 7.5 } ], "editorialScores": { "ergonomics": 0, "maintenance": 0, "payments": 30, "reliability": 5, "schema": 10, "security": 0, "transparency": 10 }, "provenanceScore": 16 }, "letme": { "capability": "https://letme.dev/diagram.create" }, "area": "design-diagrams", "unitPrices": [ { "item": "Beta", "unit": "month", "usd": 0, "note": "free during the beta. AI functions use the person's own Claude Code or Codex plan" } ], "provenance": { "legalEntity": "", "domain": "tinyspace.ai", "domainRegistered": "2026-07-02", "endpointOnVendorDomain": null, "terms": "", "privacy": "https://www.tinyspace.ai/mumble/privacy", "statusPage": "", "changelog": "", "securityTxt": "none", "checked": "2026-10-14", "notes": [ "The site names the maker only as \"tiny space, an independent product lab\". No legal entity, company number or address was found on any page in the sitemap.", "No terms of use or legal privacy policy was found. /terms, /privacy, /mumble/terms and /mumble/pricing return 404. The privacy link is a data-flow page, \"What leaves your Mac\", with no controller named.", "RDAP for tinyspace.ai gives a registration date of 2026-07-02 through Cloudflare Registrar, with the registrant country GB and other registrant data redacted.", "www.tinyspace.ai/.well-known/security.txt returns 404.", "robots.txt allows all paths except /api/ and /confirmed. Neither was fetched.", "No GitHub repository for Mumble or `mumble-mcp` was found through GitHub search, and neither `@mumble/core` nor `mumble-mcp` is on npm." ], "score": 16 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/mumble.json", "live": { "slug": "mumble", "pages": [ { "url": "https://www.tinyspace.ai/mumble", "kind": "pricing", "status": 200, "checkedAt": "2026-10-14T21:18:06.178841242Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "60045050cf24" }, { "url": "https://www.tinyspace.ai/mumble/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-14T21:18:08.205956187Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "5969b7ce2cf7" } ], "updatedAt": "2026-10-14T21:18:08.205956187Z" } }, "facts": [ { "a": "HTTP API", "b": "Platform", "name": "Kind" }, { "a": "Yuzu tech", "b": "tiny space", "name": "Vendor" }, { "a": "no (local only)", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "", "name": "Transports" }, { "a": "None", "b": "None", "name": "Auth" }, { "a": "Free", "b": "Your plan", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "MIT", "b": "No licence, terms of use or source repository was found on tinyspace.ai or GitHub (checked 2026-10-14). The app and the `mumble-mcp` binary are not published as open source", "name": "Licence" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "no", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-05", "b": "none", "name": "Last release" }, { "a": "no document linked", "b": "no document linked", "name": "Terms last updated" }, { "a": "no document linked", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "", "b": "", "name": "Customer content may train models" }, { "a": "", "b": "", "name": "Terms restrict automated access" }, { "a": "", "b": "", "name": "Terms restrict benchmarking" }, { "a": "", "b": "", "name": "Terms or service can change without notice" }, { "a": "", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "4.4k stars", "b": "none", "name": "Popularity" } ], "faq": [ { "answer": "Kroki scores 59.2 (C) on agent readiness against Mumble's 7.5 (F), and leads in every scored category.", "question": "Which is better for AI agents, Kroki or Mumble?" }, { "answer": "No hosted endpoint is listed for Kroki. No hosted endpoint is listed for Mumble.", "question": "Can an agent call Kroki and Mumble without installing anything?" }, { "answer": "Kroki is open source (MIT). No open-source release is listed for Mumble.", "question": "Are Kroki and Mumble open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 74 against 5", "Schema \u0026 documentation, 48 against 10", "Agent ergonomics, 70 against 0", "Security \u0026 auth, 56 against 0", "Payments \u0026 pricing, 60 against 30", "Maintenance \u0026 community, 86 against 0", "Transparency \u0026 trust, 62 against 13" ], "also": [ "Open source" ], "goodFor": "Agents that write diagrams in several text formats and want one render endpoint, on a private network or through the public instance for non-sensitive diagrams.", "slug": "kroki", "watchFor": "GHSA-wmpp-fj9c-w766 (CVSS 9.8) allowed unauthenticated remote code execution on `/tikz/svg` in versions 0.21.0 up to 0.32.0, whatever the safe mode. Fixed 3 August 2026" }, { "aheadOn": null, "also": [ "No incidents deducted, where Kroki loses 5 points for them" ], "goodFor": "A person on a Mac with early access who wants a live, transcript-linked diagram of a call or workshop, kept as plain files in git, and who already pays for Claude Code or Codex.", "slug": "mumble", "watchFor": "No API or MCP server an outside agent can call. The documented `mumble-mcp` binary has no public download, package or repository (checked 14 October 2026)" } ], "job": { "capability": "diagram.create", "name": "Diagram creation" }, "others": [ { "json": "https://www.anchorterminal.com/compare/cloudviz-vs-kroki.json", "title": "Cloudviz API vs Kroki", "url": "https://www.anchorterminal.com/compare/cloudviz-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/cloudviz-vs-mumble.json", "title": "Cloudviz API vs Mumble", "url": "https://www.anchorterminal.com/compare/cloudviz-vs-mumble" }, { "json": "https://www.anchorterminal.com/compare/d2-vs-mumble.json", "title": "D2 vs Mumble", "url": "https://www.anchorterminal.com/compare/d2-vs-mumble" }, { "json": "https://www.anchorterminal.com/compare/diagrams-so-vs-kroki.json", "title": "Diagrams.so API + MCP vs Kroki", "url": "https://www.anchorterminal.com/compare/diagrams-so-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/diagrams-so-vs-mumble.json", "title": "Diagrams.so API + MCP vs Mumble", "url": "https://www.anchorterminal.com/compare/diagrams-so-vs-mumble" }, { "json": "https://www.anchorterminal.com/compare/drawio-vs-kroki.json", "title": "draw.io + MCP vs Kroki", "url": "https://www.anchorterminal.com/compare/drawio-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/drawio-vs-mumble.json", "title": "draw.io + MCP vs Mumble", "url": "https://www.anchorterminal.com/compare/drawio-vs-mumble" }, { "json": "https://www.anchorterminal.com/compare/eraser-vs-kroki.json", "title": "Eraser API + MCP vs Kroki", "url": "https://www.anchorterminal.com/compare/eraser-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/eraser-vs-mumble.json", "title": "Eraser API + MCP vs Mumble", "url": "https://www.anchorterminal.com/compare/eraser-vs-mumble" }, { "json": "https://www.anchorterminal.com/compare/excaliclaw-vs-kroki.json", "title": "ExcaliClaw vs Kroki", "url": "https://www.anchorterminal.com/compare/excaliclaw-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/excaliclaw-vs-mumble.json", "title": "ExcaliClaw vs Mumble", "url": "https://www.anchorterminal.com/compare/excaliclaw-vs-mumble" }, { "json": "https://www.anchorterminal.com/compare/excalidraw-vs-kroki.json", "title": "Excalidraw vs Kroki", "url": "https://www.anchorterminal.com/compare/excalidraw-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/excalidraw-vs-mumble.json", "title": "Excalidraw vs Mumble", "url": "https://www.anchorterminal.com/compare/excalidraw-vs-mumble" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-mural-mcp.json", "title": "Kroki vs Mural MCP", "url": "https://www.anchorterminal.com/compare/kroki-vs-mural-mcp" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-whimsical.json", "title": "Kroki vs Whimsical MCP", "url": "https://www.anchorterminal.com/compare/kroki-vs-whimsical" }, { "json": "https://www.anchorterminal.com/compare/lucid-vs-mumble.json", "title": "Lucid API + MCP vs Mumble", "url": "https://www.anchorterminal.com/compare/lucid-vs-mumble" }, { "json": "https://www.anchorterminal.com/compare/mermaid-chart-vs-mumble.json", "title": "Mermaid Chart MCP vs Mumble", "url": "https://www.anchorterminal.com/compare/mermaid-chart-vs-mumble" }, { "json": "https://www.anchorterminal.com/compare/mumble-vs-mural-mcp.json", "title": "Mumble vs Mural MCP", "url": "https://www.anchorterminal.com/compare/mumble-vs-mural-mcp" }, { "json": "https://www.anchorterminal.com/compare/mumble-vs-plantuml.json", "title": "Mumble vs PlantUML", "url": "https://www.anchorterminal.com/compare/mumble-vs-plantuml" }, { "json": "https://www.anchorterminal.com/compare/mumble-vs-structurizr.json", "title": "Mumble vs Structurizr + MCP", "url": "https://www.anchorterminal.com/compare/mumble-vs-structurizr" }, { "json": "https://www.anchorterminal.com/compare/mumble-vs-tldraw.json", "title": "Mumble vs tldraw SDK + MCP", "url": "https://www.anchorterminal.com/compare/mumble-vs-tldraw" }, { "json": "https://www.anchorterminal.com/compare/mumble-vs-whimsical.json", "title": "Mumble vs Whimsical MCP", "url": "https://www.anchorterminal.com/compare/mumble-vs-whimsical" }, { "json": "https://www.anchorterminal.com/compare/d2-vs-kroki.json", "title": "D2 vs Kroki", "url": "https://www.anchorterminal.com/compare/d2-vs-kroki" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-lucid.json", "title": "Kroki vs Lucid API + MCP", "url": "https://www.anchorterminal.com/compare/kroki-vs-lucid" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-mermaid-chart.json", "title": "Kroki vs Mermaid Chart MCP", "url": "https://www.anchorterminal.com/compare/kroki-vs-mermaid-chart" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-plantuml.json", "title": "Kroki vs PlantUML", "url": "https://www.anchorterminal.com/compare/kroki-vs-plantuml" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-structurizr.json", "title": "Kroki vs Structurizr + MCP", "url": "https://www.anchorterminal.com/compare/kroki-vs-structurizr" }, { "json": "https://www.anchorterminal.com/compare/kroki-vs-tldraw.json", "title": "Kroki vs tldraw SDK + MCP", "url": "https://www.anchorterminal.com/compare/kroki-vs-tldraw" } ], "scores": [ { "by": 69, "edge": "kroki", "key": "reliability", "kroki": 74, "mumble": 5, "name": "Reliability", "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 38, "edge": "kroki", "key": "schema", "kroki": 48, "mumble": 10, "name": "Schema \u0026 documentation", "weight": 13 }, { "by": 70, "edge": "kroki", "key": "ergonomics", "kroki": 70, "mumble": 0, "name": "Agent ergonomics", "weight": 13 }, { "by": 56, "edge": "kroki", "key": "security", "kroki": 56, "mumble": 0, "name": "Security \u0026 auth", "weight": 14 }, { "by": 30, "edge": "kroki", "key": "payments", "kroki": 60, "mumble": 30, "name": "Payments \u0026 pricing", "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 86, "edge": "kroki", "key": "maintenance", "kroki": 86, "mumble": 0, "name": "Maintenance \u0026 community", "weight": 7 }, { "by": 49, "edge": "kroki", "key": "transparency", "kroki": 62, "mumble": 13, "name": "Transparency \u0026 trust", "weight": 7 } ], "summary": "Kroki scores 59.2 (C) on agent readiness against Mumble's 7.5 (F), and leads in every scored category. Both do diagram creation.", "verdicts": { "kroki": "One unauthenticated POST with diagram text returns an image for 29 diagram types, and five versions shipped between 15 July and 5 October 2026. Four advisories were published in July and August 2026, one an unauthenticated remote code execution on `/tikz/svg`, all fixed. No OpenAPI file exists, and the public instance has no terms, privacy policy or status page.", "mumble": "Mumble keeps audio on the Mac and stores each conversation as plain files in ~/Mumble, with canvas JSON that diffs cleanly. There is no API or MCP server an outside agent can call today. The documented `mumble-mcp` has no public download, package or repository, and the app is reached only through an early-access waitlist." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/kroki-vs-mumble", "json": "https://www.anchorterminal.com/compare/kroki-vs-mumble.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/kroki-vs-mumble.md", "slim": "https://www.anchorterminal.com/compare/kroki-vs-mumble.min.md" }, "markdown": "Kroki scores 59.2 (C) on agent readiness against Mumble's 7.5 (F), and leads in every scored category. Both do diagram creation.\n\n- Kroki: grade C, 59.2/100, rank #591 of 1084. Markdown https://www.anchorterminal.com/tools/kroki.md · JSON https://www.anchorterminal.com/api/v1/tools/kroki.json\n- Mumble: grade F, 7.5/100, rank #1081 of 1084. Markdown https://www.anchorterminal.com/tools/mumble.md · JSON https://www.anchorterminal.com/api/v1/tools/mumble.json\n- Best diagramming APIs and diagram-as-code for AI agents: https://www.anchorterminal.com/best/diagramming/index.md\n- All 128 diagrams comparisons: https://www.anchorterminal.com/compare/diagramming/index.md\n\n## Which one, for what\n\n### Kroki (C)\n\nGood for: Agents that write diagrams in several text formats and want one render endpoint, on a private network or through the public instance for non-sensitive diagrams.\n\nAhead on:\n- Reliability, 74 against 5\n- Schema \u0026 documentation, 48 against 10\n- Agent ergonomics, 70 against 0\n- Security \u0026 auth, 56 against 0\n- Payments \u0026 pricing, 60 against 30\n- Maintenance \u0026 community, 86 against 0\n- Transparency \u0026 trust, 62 against 13\n\nAlso in its favour:\n- Open source\n\nWatch for: GHSA-wmpp-fj9c-w766 (CVSS 9.8) allowed unauthenticated remote code execution on `/tikz/svg` in versions 0.21.0 up to 0.32.0, whatever the safe mode. Fixed 3 August 2026\n\n### Mumble (F)\n\nGood for: A person on a Mac with early access who wants a live, transcript-linked diagram of a call or workshop, kept as plain files in git, and who already pays for Claude Code or Codex.\n\nAlso in its favour:\n- No incidents deducted, where Kroki loses 5 points for them\n\nWatch for: No API or MCP server an outside agent can call. The documented `mumble-mcp` binary has no public download, package or repository (checked 14 October 2026)\n\n\n## Score by category\n\n| Category | Weight | Kroki | Mumble | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 74 | 5 | Kroki +69 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 48 | 10 | Kroki +38 |\n| Agent ergonomics | 13% (16.2 this run) | 70 | 0 | Kroki +70 |\n| Security \u0026 auth | 14% (17.5 this run) | 56 | 0 | Kroki +56 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 60 | 30 | Kroki +30 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 86 | 0 | Kroki +86 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 62 | 13 | Kroki +49 |\n| Negative events | ≤15 | -5 | 0 | |\n| **Total** | | **59.2 · C** | **7.5 · F** | |\n\n## Facts side by side\n\n| Fact | Kroki | Mumble |\n| --- | --- | --- |\n| Kind | HTTP API | Platform |\n| Vendor | Yuzu tech | tiny space |\n| Hosted endpoint | no (local only) | no (local only) |\n| Transports | HTTP | |\n| Auth | None | None |\n| Pricing | Free | Your plan |\n| x402 | no | no |\n| Licence | MIT | No licence, terms of use or source repository was found on tinyspace.ai or GitHub (checked 2026-10-14). The app and the `mumble-mcp` binary are not published as open source |\n| Read-only variant documented | no | no |\n| llms.txt | no | yes |\n| Last release | 2026-10-05 | none |\n| Terms last updated | no document linked | no document linked |\n| Privacy policy last updated | no document linked | no date given |\n| Customer content may train models | | |\n| Terms restrict automated access | | |\n| Terms restrict benchmarking | | |\n| Terms or service can change without notice | | |\n| Arbitration or class-action waiver | | |\n| Popularity | 4.4k stars | none |\n\n## Verdicts\n\n**Kroki.** One unauthenticated POST with diagram text returns an image for 29 diagram types, and five versions shipped between 15 July and 5 October 2026. Four advisories were published in July and August 2026, one an unauthenticated remote code execution on `/tikz/svg`, all fixed. No OpenAPI file exists, and the public instance has no terms, privacy policy or status page.\n\n**Mumble.** Mumble keeps audio on the Mac and stores each conversation as plain files in ~/Mumble, with canvas JSON that diffs cleanly. There is no API or MCP server an outside agent can call today. The documented `mumble-mcp` has no public download, package or repository, and the app is reached only through an early-access waitlist.\n\n## Before you call either\n\n### Kroki\n\n1. Send `POST /\u003ctype\u003e/\u003cformat\u003e` with `Content-Type: text/plain` and the diagram as the body. This avoids the deflate and base64 encoding that GET needs\n2. Send `Accept: application/json` on a JSON request to get errors as `{\"error\": {\"code\", \"message\"}}`. With an SVG Accept header the error arrives as an image\n3. Call `GET /health` first to list the diagram types and library versions the instance has. Mermaid, BPMN, Excalidraw and diagrams.net need companion containers\n4. Run 0.32.1 or later before rendering untrusted text. Earlier versions allow remote code execution through `/tikz/svg` and file reads in `SECURE` mode\n5. Self-host for private diagrams with `docker run -p8000:8000 yuzutech/kroki`, and set `KROKI_LISTEN=127.0.0.1:8000` or a network rule, since the server has no authentication\n\n### Mumble\n\n1. Don't plan to call Mumble from another agent. Neither the app nor `mumble-mcp` can be obtained publicly, so hand the task to a person with early access\n2. Don't configure `/path/to/mumble-mcp` from the docs. It is a placeholder, and no binary is published\n3. If the person already has Mumble, read ~/Mumble/\u003ccapture\u003e/ directly, `capture.json` for the transcript and `diagram.canvas` for the map\n4. Keep canvas keys in schema order and never rename a node id, or the edges that name it are orphaned and the canvas is refused. Use git as the undo\n5. Don't write to a capture that is being recorded. The app doesn't merge the two versions\n\n## Questions\n\n### Which is better for AI agents, Kroki or Mumble?\n\nKroki scores 59.2 (C) on agent readiness against Mumble's 7.5 (F), and leads in every scored category.\n\n### Can an agent call Kroki and Mumble without installing anything?\n\nNo hosted endpoint is listed for Kroki. No hosted endpoint is listed for Mumble.\n\n### Are Kroki and Mumble open source?\n\nKroki is open source (MIT). No open-source release is listed for Mumble.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/kroki-vs-mumble.json, and with the fewest tokens: https://www.anchorterminal.com/compare/kroki-vs-mumble.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"kroki\", \"b\": \"mumble\"}`. From a terminal: `anchor compare kroki mumble`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/kroki.json and https://www.anchorterminal.com/api/v1/tools/mumble.json\n\n## Other comparisons with Kroki or Mumble\n\n- [Cloudviz API vs Kroki](https://www.anchorterminal.com/compare/cloudviz-vs-kroki.md)\n- [Cloudviz API vs Mumble](https://www.anchorterminal.com/compare/cloudviz-vs-mumble.md)\n- [D2 vs Mumble](https://www.anchorterminal.com/compare/d2-vs-mumble.md)\n- [Diagrams.so API + MCP vs Kroki](https://www.anchorterminal.com/compare/diagrams-so-vs-kroki.md)\n- [Diagrams.so API + MCP vs Mumble](https://www.anchorterminal.com/compare/diagrams-so-vs-mumble.md)\n- [draw.io + MCP vs Kroki](https://www.anchorterminal.com/compare/drawio-vs-kroki.md)\n- [draw.io + MCP vs Mumble](https://www.anchorterminal.com/compare/drawio-vs-mumble.md)\n- [Eraser API + MCP vs Kroki](https://www.anchorterminal.com/compare/eraser-vs-kroki.md)\n- [Eraser API + MCP vs Mumble](https://www.anchorterminal.com/compare/eraser-vs-mumble.md)\n- [ExcaliClaw vs Kroki](https://www.anchorterminal.com/compare/excaliclaw-vs-kroki.md)\n- [ExcaliClaw vs Mumble](https://www.anchorterminal.com/compare/excaliclaw-vs-mumble.md)\n- [Excalidraw vs Kroki](https://www.anchorterminal.com/compare/excalidraw-vs-kroki.md)\n- [Excalidraw vs Mumble](https://www.anchorterminal.com/compare/excalidraw-vs-mumble.md)\n- [Kroki vs Mural MCP](https://www.anchorterminal.com/compare/kroki-vs-mural-mcp.md)\n- [Kroki vs Whimsical MCP](https://www.anchorterminal.com/compare/kroki-vs-whimsical.md)\n- [Lucid API + MCP vs Mumble](https://www.anchorterminal.com/compare/lucid-vs-mumble.md)\n- [Mermaid Chart MCP vs Mumble](https://www.anchorterminal.com/compare/mermaid-chart-vs-mumble.md)\n- [Mumble vs Mural MCP](https://www.anchorterminal.com/compare/mumble-vs-mural-mcp.md)\n- [Mumble vs PlantUML](https://www.anchorterminal.com/compare/mumble-vs-plantuml.md)\n- [Mumble vs Structurizr + MCP](https://www.anchorterminal.com/compare/mumble-vs-structurizr.md)\n- [Mumble vs tldraw SDK + MCP](https://www.anchorterminal.com/compare/mumble-vs-tldraw.md)\n- [Mumble vs Whimsical MCP](https://www.anchorterminal.com/compare/mumble-vs-whimsical.md)\n- [D2 vs Kroki](https://www.anchorterminal.com/compare/d2-vs-kroki.md)\n- [Kroki vs Lucid API + MCP](https://www.anchorterminal.com/compare/kroki-vs-lucid.md)\n- [Kroki vs Mermaid Chart MCP](https://www.anchorterminal.com/compare/kroki-vs-mermaid-chart.md)\n- [Kroki vs PlantUML](https://www.anchorterminal.com/compare/kroki-vs-plantuml.md)\n- [Kroki vs Structurizr + MCP](https://www.anchorterminal.com/compare/kroki-vs-structurizr.md)\n- [Kroki vs tldraw SDK + MCP](https://www.anchorterminal.com/compare/kroki-vs-tldraw.md)\n\n## Disclosure\n\n- Mumble is made by tiny space, the company of Quynh Tran-Thanh, a founder of Anchor Terminal. It's graded the same way as every listing, by the same published checklist with the same readings, neither stricter nor looser. Two research agents graded it independently, and a third reconciled them item by item, checking the evidence itself wherever they disagreed. letme never picks it.\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-14", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Kroki vs Mumble", "url": "" } ], "description": "Kroki scores 59.2 (C) to Mumble's 7.5 (F) for diagram creation. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Kroki C 59.2", "Mumble F 7.5", "scores" ], "h1": "Kroki vs Mumble", "image": "https://www.anchorterminal.com/assets/og/compare-kroki-vs-mumble.png", "path": "/compare/kroki-vs-mumble", "published": "2026-10-01", "section": "tools", "title": "Kroki vs Mumble for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-14", "url": "https://www.anchorterminal.com/compare/kroki-vs-mumble" }, "tokens": { "markdown": 2600, "slim": 580 }, "version": 1 }