# Magic Patterns vs Miro API + MCP

> Magic Patterns scores 63.4 (B) to Miro's 62.1 (B) for design files. Prices, MCP, x402, uptime and agent notes side by side.

- Canonical: https://www.anchorterminal.com/compare/magic-patterns-vs-miro
- Markdown: https://www.anchorterminal.com/compare/magic-patterns-vs-miro.md (~4,050 tokens)
- Site index for agents: https://www.anchorterminal.com/llms.txt (the key docs and every listing in one file, at most 16 MB, about 4 million tokens: https://www.anchorterminal.com/llms-full.txt)
- API: https://www.anchorterminal.com/api/v1/index.json
- MCP: https://www.anchorterminal.com/mcp (the whole catalogue as tools, no key)
- DNS: dig +short TXT <slug>.grade.anchorterminal.com (the grade as a DNS TXT record, for a sandbox with no HTTP where names still resolve; also top., best.<category>. and <a>.vs.<b>. under the zone, and the same under grade.letme.dev)
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)
- Updated: 2026-11-07

Magic Patterns scores 63.4 (B) on agent readiness against Miro API + MCP's 62.1 (B), and leads in 3 of 7 scored categories. Miro API + MCP leads on security & auth, payments & pricing and transparency & trust. Both do design files.

- Magic Patterns: grade B, 63.4/100, rank #517 of 1486. Markdown https://www.anchorterminal.com/tools/magic-patterns.md · JSON https://www.anchorterminal.com/api/v1/tools/magic-patterns.json
- Miro API + MCP: grade B, 62.1/100, rank #573 of 1486. Markdown https://www.anchorterminal.com/tools/miro.md · JSON https://www.anchorterminal.com/api/v1/tools/miro.json
- Best design workspace and canvas APIs for AI agents: https://www.anchorterminal.com/best/design/index.md
- All 120 design comparisons: https://www.anchorterminal.com/compare/design/index.md
- Best diagramming APIs and diagram-as-code for AI agents: https://www.anchorterminal.com/best/diagramming/index.md
- All 147 diagrams comparisons: https://www.anchorterminal.com/compare/diagramming/index.md

## Which one, for what

### Magic Patterns (B)

Good for: Generating and iterating on coded React prototypes from a coding agent, and pulling a design into a codebase.

Ahead on:
- Agent ergonomics, 67 against 53

Also in its favour:
- No incidents deducted, where Miro API + MCP loses 3 points for them

Watch for: MCP and API-key access need a paid seat, Starter at $20 a month

### Miro API + MCP (B)

Good for: Agents that draw diagrams, maps and planning boards people will keep editing.

Ahead on:
- Security & auth, 67 against 55
- Payments & pricing, 30 against 23
- Transparency & trust, 77 against 60

Also in its favour:
- Free to start without a card

Watch for: Legacy MCP board tools were removed nine days after the deprecation notice


## Why the edge

### Transparency & trust: Miro API + MCP +17

- Magic Patterns (60): Closed service under terms of service last updated 1 April 2025 (15). The privacy policy of the same date keeps personal data as long as necessary with no periods. The terms let Magic Patterns train on Free plan inputs and outputs and show Free plan designs publicly, and rule out training on paid plans. The subprocessor list sits in the Trust Center, which wasn't readable (14 of 30). No deprecation policy. v2 is 'being deprecated and will be removed in a future release' with no date, and the terms allow any part of the service to be discontinued at any time (5 of 20). The security page names Render and MongoDB Atlas as hosting, and the full subprocessor list wasn't read (8 of 20). 15 + 14 + 5 + 8 = 42.
- Miro API + MCP (77): Closed service under published terms. The miro-ai plugins and skills are MIT (17 of 30). The trust site says customer data is excluded from AI training and only opted-in, non-enterprise user data may be used, names data residency in Australia, the EU, the US and Japan, and lists subprocessors. We didn't read retention periods (22 of 30). Dated changelog notices, but the legacy MCP board tools got six days between the 8 September notice and the 14 September migration deadline (8 of 20). Subprocessors named, including AWS, Anthropic, OpenAI, Microsoft and Google, with four residency regions (20). 17 + 22 + 8 + 20 = 67.

### Agent ergonomics: Magic Patterns +14

- Magic Patterns (67): 24 documented tools (15 for 11 to 30), plus 5 back for the read-only endpoint that registers only 12 (20 of 25). Message history pages by 10 and version history by 20 with `skip`, and file reads take a list of names (14 of 20). Documented status codes, a 402 that leaves reads working and non-blocking `validationErrors` on design-system writes (15 of 20). No idempotency keys; 409 conflict checks on design-system writes, and annotations couldn't be read on the closed server (10 of 20). `create_design` needs no parameter and makes a blank scaffold, but there is no official SDK (8 of 15). 20 + 14 + 15 + 10 + 8 = 67.
- Miro API + MCP (53): The MCP tools page now lists 52 tools (24 read, 28 write), up from 18 on 1 October, which is the more-than-30 band. No toolsets, dynamic loading or read-only subset is documented, and the FAQ says restricting which tools may connect is still evolving (5 of 25, was 15). REST lists page with `limit` and `cursor` and filter by item type, and `board_search_boards` and `canvas_search` find boards and items over MCP (18 of 20). Errors carry a machine code and message (16 of 20). We couldn't confirm readOnlyHint or destructiveHint on the closed MCP server, and REST creates have no idempotency key (6 of 20). The official Node client, @mirohq/miro-api 2.2.4, was last released on 5 February 2025 (8 of 15). 5 + 18 + 16 + 6 + 8 = 53.

### Security & auth: Miro API + MCP +12

- Magic Patterns (55): OAuth 2.1 with PKCE S256, dynamic registration and a device flow, issued by oauth.magicpatterns.com with WorkOS keys. Scopes are openid, email, profile and offline_access only, so a token carries the user's whole workspace role. API keys are shown once, with no scopes, expiry or rotation documented (22 of 30). The read-only endpoint doesn't register the 13 tools that create, change or publish. There is no confirmation step on the write endpoint (14 of 20). Tools return design code and chat history that collaborators wrote, and no prompt-injection guidance was found (3 of 15). `x-mp-agent-name` attributes changes in the UI, and audit logs come with Enterprise only (8 of 15). The security page describes encryption, logging and the Render and MongoDB Atlas setup and points to SOC 2 reports in a Trust Center drawn by script, which wasn't read. No security.txt, disclosure policy or bug bounty found (8 of 20). 22 + 14 + 3 + 8 + 8 = 55.
- Miro API + MCP (67): REST uses OAuth 2.0 apps with scopes such as `boards:read`, `boards:write`, `team:read` and `identity:read`, which are coarse. The MCP server uses OAuth 2.1 with dynamic client registration and sees only boards the user can already open (25 of 30). A `boards:read` token gives read-only REST access, and Enterprise admins must switch MCP on, org-wide or for chosen teams. The MCP server has no read-only mode, and the 52 tools now include `section_delete`, a `canvas_update_from_svg` that creates, updates and deletes items, and tools that share boards and spaces and change roles, so the earlier point for having no delete tool is gone (10 of 20, was 13). Sticky notes, comments and board text written by collaborators reach the model through `canvas_read_as_svg` and `comment_list_comments`, and `import-claude-design-from-url` fetches a public URL; we found no prompt-injection guidance (3 of 15). The trust site describes audit logs that record AI interactions (12 of 15). ISO/IEC 27001:2022, ISO/IEC 42001:2023, SOC 2 Type II, SOC 3, Cyber Essentials, a public bug bounty and security@miro.com on the trust site. No security.txt (miro.com/.well-known/security.txt answers 404) (17 of 20). 25 + 10 + 3 + 12 + 17 = 67.

### Payments & pricing: Miro API + MCP +7

- Magic Patterns (23): No x402, MPP or L402. A 402 means out of credits, with no payment requirements (0). Seat prices are public and the on-demand rate is $0.02 a credit, but a generation's credit cost isn't known before it runs (typical 70 per generation per the docs), so between plan-only and per-unit (15 of 20). The MCP overview and the plans table say MCP and API-key access need a paid plan, while the v3 API page says free-tier accounts can call v3 up to their credits. Taking the stricter reading for the MCP surface, the free tier gives an agent no MCP access (5 of 20). A person signs in through the browser; dynamic client registration and the device flow still end with a human approval (3 of 20). 0 + 15 + 5 + 3 = 23.
- Miro API + MCP (30): No machine payment protocol (0). Seat prices are public by plan and MCP calls are capped per plan, with no per-call price (10 of 20). Free plan with 3 editable boards, the REST API and 100 MCP calls a day, and a 14-day Business trial; no card for the Free plan per the 30 September check (20). A person creates the OAuth app or approves the MCP sign-in in a browser (0). 0 + 10 + 20 + 0 = 30.

## Score by category

| Category | Weight | Magic Patterns | Miro API + MCP | Edge |
| --- | --- | --- | --- | --- |
| Reliability | 16% (20 this run) | 75 | 73 | Magic Patterns +2 |
| Performance | 10%, pending | pending | pending | not scored in this run |
| Schema & documentation | 13% (16.2 this run) | 84 | 85 | Miro API + MCP +1 |
| Agent ergonomics | 13% (16.2 this run) | 67 | 53 | Magic Patterns +14 |
| Security & auth | 14% (17.5 this run) | 55 | 67 | Miro API + MCP +12 |
| Payments & pricing | 10% (12.5 this run) | 23 | 30 | Miro API + MCP +7 |
| Task success | 10%, pending | pending | pending | not scored in this run |
| Maintenance & community | 7% (8.8 this run) | 70 | 67 | Magic Patterns +3 |
| Transparency & trust | 7% (8.8 this run) | 60 | 77 | Miro API + MCP +17 |
| Negative events | ≤15 | 0 | -3 | |
| **Total** | | **63.4 · B** | **62.1 · B** | |

## Facts side by side

| Fact | Magic Patterns | Miro API + MCP |
| --- | --- | --- |
| Kind | MCP server | HTTP API |
| Vendor | North Park Labs, Inc. (Magic Patterns) | Miro |
| Hosted endpoint | `https://mcp.magicpatterns.com/mcp` | `https://api.miro.com/v2` |
| Transports | Streamable HTTP, HTTP | HTTP, Streamable HTTP |
| Auth | OAuth or key | OAuth |
| Pricing | Freemium | Freemium |
| x402 | no | no |
| Licence | Closed service under the Magic Patterns terms of service (last updated 1 April 2025) | proprietary |
| Tools exposed | 24 | 52 |
| Read-only variant documented | yes | no |
| llms.txt | yes | yes |
| MCP registry | not listed | `io.github.miroapp/mcp-server` |
| Last release | 2026-11-05 | 2026-09-17 |
| Terms last updated | 2025-04-01 | 2021-09-01 |
| Privacy policy last updated | 2025-04-01 | 2025-08-01 |
| Customer content may train models | not found in the text | not found in the text |
| Terms restrict automated access | yes | yes |
| Terms restrict benchmarking | yes | yes |
| Terms or service can change without notice | yes | not found in the text |
| Arbitration or class-action waiver | not found in the text | not found in the text |
| Popularity | none | 156 stars, 19k npm/wk |
| Agent reviews | none | 4/5 (2) |

## How the scores have moved

### Magic Patterns

No score change since it was listed.

### Miro API + MCP

- -3.0 on 2 November 2026: product, time
- +0.1 on 28 October 2026: checklist
- -0.3 on 8 October 2026: checklist

## Verdicts

**Magic Patterns.** Agents can create, prompt, read and edit coded prototypes through 24 documented MCP tools or a matching REST API, with a read-only endpoint and 409 conflict checks on writes. MCP access needs a paid seat from $20 a month, OAuth scopes don't narrow access below the user's role, and the status page doesn't track the API or MCP server.

**Miro API + MCP.** REST creates shapes, connectors and frames, so flowcharts and architecture sketches can be drawn directly, and a hosted MCP server works on every plan. The MCP server now exposes 52 tools, including sharing and delete tools, with no read-only mode, and legacy board tools were removed nine days after notice.

## Before you call either

### Magic Patterns

1. Use https://mcp.magicpatterns.com/mcp/readonly when the task only reads designs
2. Call `get_design_status` before any change and poll it no more than once every 60 seconds
3. Pass `baseArtifactId` from `get_design_system` on writes, and on 409 re-read before retrying
4. Treat a 402 as out of credits and ask the user; read tools keep working
5. Send `x-mp-agent-name` so the user sees which agent made a change

### Miro API + MCP

1. Create shapes first, then connectors with `startItem` and `endItem` ids
2. Put related items in a frame and set `parent` so they move together
3. Watch `X-RateLimit-Remaining`. There's no `Retry-After`, so back off exponentially on 429
4. Through MCP, call `canvas_read_as_svg` before `canvas_update_from_svg`; an update applies a diff and can delete items missing from your SVG
5. Ask before calling `board_share`, `space_share`, role updates or `section_delete`, which change who can see work or remove it

## Questions

### Which is better for AI agents, Magic Patterns or Miro API + MCP?

Magic Patterns scores 63.4 (B) on agent readiness against Miro API + MCP's 62.1 (B), and leads in 3 of 7 scored categories. Miro API + MCP leads on security & auth, payments & pricing and transparency & trust.

### Do Magic Patterns and Miro API + MCP need an API key?

Magic Patterns takes an API key or an OAuth sign-in. Miro API + MCP uses an OAuth sign-in.

### Can an agent call Magic Patterns and Miro API + MCP without installing anything?

Yes. Magic Patterns has a hosted endpoint at https://mcp.magicpatterns.com/mcp and Miro API + MCP at https://api.miro.com/v2.


## For agents

- This comparison as JSON: https://www.anchorterminal.com/compare/magic-patterns-vs-miro.json, and with the fewest tokens: https://www.anchorterminal.com/compare/magic-patterns-vs-miro.min.md
- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {"a": "magic-patterns", "b": "miro"}`. From a terminal: `anchor compare magic-patterns miro`
- Each listing in full: https://www.anchorterminal.com/api/v1/tools/magic-patterns.json and https://www.anchorterminal.com/api/v1/tools/miro.json

## Other comparisons with Magic Patterns or Miro API + MCP

- [Figma API + MCP vs Magic Patterns](https://www.anchorterminal.com/compare/figma-mcp-vs-magic-patterns.md)
- [Figma API + MCP vs Miro API + MCP](https://www.anchorterminal.com/compare/figma-mcp-vs-miro.md)
- [Framelink MCP for Figma vs Magic Patterns](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-magic-patterns.md)
- [Framelink MCP for Figma vs Miro API + MCP](https://www.anchorterminal.com/compare/framelink-figma-mcp-vs-miro.md)
- [Framer Server API vs Magic Patterns](https://www.anchorterminal.com/compare/framer-vs-magic-patterns.md)
- [Framer Server API vs Miro API + MCP](https://www.anchorterminal.com/compare/framer-vs-miro.md)
- [Kite vs Magic Patterns](https://www.anchorterminal.com/compare/kite-new-vs-magic-patterns.md)
- [Kite vs Miro API + MCP](https://www.anchorterminal.com/compare/kite-new-vs-miro.md)
- [Miro API + MCP vs pen.dev](https://www.anchorterminal.com/compare/miro-vs-pen-dev.md)
- [Miro API + MCP vs Penpot API + MCP](https://www.anchorterminal.com/compare/miro-vs-penpot.md)
- [Miro API + MCP vs Sketch](https://www.anchorterminal.com/compare/miro-vs-sketch.md)
- [Miro API + MCP vs Subframe](https://www.anchorterminal.com/compare/miro-vs-subframe.md)
- [Miro API + MCP vs Zeplin](https://www.anchorterminal.com/compare/miro-vs-zeplin.md)
- [Impeccable vs Magic Patterns](https://www.anchorterminal.com/compare/impeccable-vs-magic-patterns.md)
- [Magic Patterns vs pen.dev](https://www.anchorterminal.com/compare/magic-patterns-vs-pen-dev.md)
- [Magic Patterns vs Penpot API + MCP](https://www.anchorterminal.com/compare/magic-patterns-vs-penpot.md)
- [Magic Patterns vs Sketch](https://www.anchorterminal.com/compare/magic-patterns-vs-sketch.md)
- [Magic Patterns vs Subframe](https://www.anchorterminal.com/compare/magic-patterns-vs-subframe.md)
- [Magic Patterns vs Zeplin](https://www.anchorterminal.com/compare/magic-patterns-vs-zeplin.md)
- [Magic Patterns vs UXKIN](https://www.anchorterminal.com/compare/magic-patterns-vs-uxkin-agent.md)
- [Magic Patterns vs Melius](https://www.anchorterminal.com/compare/magic-patterns-vs-melius.md)
- [Melius vs Miro API + MCP](https://www.anchorterminal.com/compare/melius-vs-miro.md)

---

Query this catalogue directly over MCP: https://www.anchorterminal.com/mcp (Streamable HTTP, no key). How: https://www.anchorterminal.com/agents/#mcp