{ "data": { "similar": [ { "grade": "B", "json": "https://www.anchorterminal.com/tools/plantuml.json", "name": "PlantUML", "score": 66.9, "shared": [ "diagram.as-code", "diagram.create", "diagram.export", "diagram.architecture" ], "slug": "plantuml" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/d2.json", "name": "D2", "score": 65.3, "shared": [ "diagram.as-code", "diagram.create", "diagram.export", "diagram.architecture" ], "slug": "d2" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/drawio.json", "name": "draw.io + MCP", "score": 62.2, "shared": [ "diagram.create", "diagram.as-code", "diagram.export", "diagram.architecture" ], "slug": "drawio" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/structurizr.json", "name": "Structurizr + MCP", "score": 59.9, "shared": [ "diagram.create", "diagram.as-code", "diagram.export", "diagram.architecture" ], "slug": "structurizr" }, { "grade": "E", "json": "https://www.anchorterminal.com/tools/eraser.json", "name": "Eraser API + MCP", "score": 38.6, "shared": [ "diagram.create", "diagram.as-code", "diagram.export", "diagram.architecture" ], "slug": "eraser" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/tldraw.json", "name": "tldraw SDK + MCP", "score": 60.7, "shared": [ "diagram.create", "diagram.as-code", "diagram.export" ], "slug": "tldraw" } ], "tool": { "slug": "kroki", "name": "Kroki", "vendor": "Yuzu tech", "vendorUrl": "https://kroki.io", "kind": "http-api", "category": "diagramming", "summary": "Kroki is an open-source HTTP server from Yuzu tech that converts diagram text in 29 formats, including PlantUML, Mermaid, GraphViz and D2, into SVG, PNG or PDF. Owners run it from Docker images, and kroki.io is a free public instance.", "url": "https://www.anchorterminal.com/tools/kroki", "markdownUrl": "https://www.anchorterminal.com/tools/kroki.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/kroki.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/kroki.json", "repo": "https://github.com/yuzutech/kroki", "license": "MIT", "transports": [ "http" ], "packages": [ { "registry": "oci", "name": "yuzutech/kroki" }, { "registry": "oci", "name": "yuzutech/kroki-mermaid" }, { "registry": "oci", "name": "yuzutech/kroki-bpmn" }, { "registry": "oci", "name": "yuzutech/kroki-excalidraw" } ], "auth": "none", "authNotes": "No account, key or login on the convert endpoints, on a self-hosted server or on the public instance at kroki.io. The server binds all interfaces on port 8000 unless `KROKI_LISTEN` says otherwise. An optional bearer token, `KROKI_COMPANION_REGISTRATION_TOKEN`, protects only the `/services` registration API, which is off by default.", "pricing": "free", "pricingNotes": "Free under the MIT licence, with nothing to buy. The public instance at kroki.io is free and paid for by sponsors, for reasonable, non-commercial use with no uptime guarantee. Third parties sell hosting, which the project says it does not operate.", "priceSummary": "Free · OSS", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs or the source (checked 2026-10-09).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 4365, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-09" }, "docsUrl": "https://docs.kroki.io/kroki/setup/usage/", "capabilities": [ "diagram.as-code", "diagram.create", "diagram.export", "diagram.architecture" ], "tags": [ "open-source", "self-hosted", "http-api", "docker", "diagram-as-code", "plantuml", "mermaid", "graphviz", "no-auth", "free" ], "lastRelease": "2026-10-05", "graded": true, "anchor": { "graded": true, "score": 59.2, "grade": "C", "agentReady": false, "rank": 558, "ranked": true, "rankOf": 950, "categoryRank": 8, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 86, "payments": 60, "reliability": 74, "schema": 48, "security": 56, "transparency": 62 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 74, "points": 14.8, "reason": "Read with the local-software lines, because the listing grades the server an owner runs. The free public instance has no status page, SLA or published limit. Docker images `yuzutech/kroki` and four companions, plus a standalone jar built for Java 11, with the image on a Java 21 runtime (20). The `main.yaml` workflow passed on the last ten pushes to `main`, the latest on 7 October 2026 (25). GitHub's search counts 136 open issues. Most of the 30 newest are proposals for new diagram types and nearly all have a reply, while a September 2025 report of Mermaid PNG faults under high concurrency has none (17). CHANGELOG.md follows Keep a Changelog and states semantic versioning, and 0.33.0 records its change of the default Mermaid layout under Changed with the option that restores the old one (12). Version 0.33.0, with no 1.0 and no statement of stability, and diagrams.net marked experimental (0)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 48, "points": 7.8, "reason": "No OpenAPI file or other machine-readable contract. `GET /health` returns the diagram types and library versions as JSON (3). No llms.txt on kroki.io or docs.kroki.io (HTTP 404). The docs are AsciiDoc files in the repository (2). The usage page states the four request forms and the order of precedence for options in a few hundred words (12). Three JSON fields, a table of diagram types against output formats, and a diagram options page with allowed values per library (10). Examples for cURL and HTTPie, and encoding samples in ten languages. Status codes 400, 408, 413, 414, 422 and 431 are described where each limit is documented, with no error catalogue, and the JSON error shape is not in the docs (9). A public changelog with dated versions. Paths carry no API version apart from a `/v1/health` alias (12)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 70, "points": 11.38, "reason": "One request with diagram text in and an image out, and no tool definitions to load. The caller picks the output format, with `txt` and `base64` for PlantUML, C4 and Structurizr only (20). No pagination is needed. Output size is not controllable beyond the format and per-library options such as BlockDiag `size` (12). Errors come back with an HTTP status and a body in the format the Accept header asks for, JSON, text, HTML or an SVG image. This is in `ErrorHandler.java` and not in the docs (12). Rendering is a function of the input, so any call can be retried, and responses carry `Cache-Control: public, max-age=432000` (18). One required field per request. No official SDKs. The Go CLI's newest release is v0.5.0 of December 2022 (8)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 56, "points": 9.8, "reason": "No credential exists to leak or scope. The server has no authentication on its convert endpoints and binds all interfaces by default, so access control is the owner's network (18). `KROKI_SAFE_MODE` defaults to `SECURE`, which blocks file and network reads by diagram libraries, the container runs as the non-root user `kroki`, and the registration API is off in `SECURE` mode. Four advisories in 2026 showed ways round `SECURE` (13). The server renders the caller's own text and returns an image, with remote includes off by default (9). Request logs, `GET /metrics` and optional OpenTelemetry tracing (6). `SECURITY.md` asks for private GitHub advisories, four advisories were published with fixes in July and August 2026, a Trivy scan of the public images runs nightly and Renovate runs weekly. No security.txt (HTTP 404), bug bounty or certification (10)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 60, "points": 7.5, "reason": "Read with the self-hosted rule. Free software with nothing to buy and no payment protocol (0). No price to publish (20). No card or trial needed (20). An agent can pull the Docker image, or call the public instance, with no signup (20)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 86, "points": 7.53, "reason": "Version 0.33.0 on 5 October 2026, four days before the check (30). Five versions in the last 90 days, 0.31.1 on 15 July, 0.31.2, 0.32.0, 0.32.1 and 0.33.0 (20). 97 commits since 11 July 2026, replies on nearly all of the 30 newest issues, and each 2026 advisory published within a day of the version that fixed it (20). The public instance reported 0.33.0 four days after the tag. No official SDKs, and the CLI has had no release since December 2022 (7). Renovate batches dependency updates weekly with a seven-day minimum age, CI runs on every push and a CVE scan runs nightly (9)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 62, "points": 5.43, "note": "editorial 67, provenance 56", "reason": "MIT licence, with every component in one public repository (30). No privacy policy or terms for the software or for the public instance. The docs call the server stateless and say the public instance makes no remote calls. The kroki.io home page loads a Carbon Ads script (15). `KROKI_PORT` is marked deprecated with the reason and a replacement, and no removal date. Removed behaviour is recorded in the changelog (8). OpenTelemetry tracing is configured by environment variable. The 0.32.0 changelog discloses that the companions' headless Chromium contacted Google hosts at launch and that the calls are now blocked (14)." } ], "assessment": { "date": "2026-10-09", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "One request with diagram text in and an image out, and no tool definitions to load. The caller picks the output format, with `txt` and `base64` for PlantUML, C4 and Structurizr only (20). No pagination is needed. Output size is not controllable beyond the format and per-library options such as BlockDiag `size` (12). Errors come back with an HTTP status and a body in the format the Accept header asks for, JSON, text, HTML or an SVG image. This is in `ErrorHandler.java` and not in the docs (12). Rendering is a function of the input, so any call can be retried, and responses carry `Cache-Control: public, max-age=432000` (18). One required field per request. No official SDKs. The Go CLI's newest release is v0.5.0 of December 2022 (8).", "maintenance": "Version 0.33.0 on 5 October 2026, four days before the check (30). Five versions in the last 90 days, 0.31.1 on 15 July, 0.31.2, 0.32.0, 0.32.1 and 0.33.0 (20). 97 commits since 11 July 2026, replies on nearly all of the 30 newest issues, and each 2026 advisory published within a day of the version that fixed it (20). The public instance reported 0.33.0 four days after the tag. No official SDKs, and the CLI has had no release since December 2022 (7). Renovate batches dependency updates weekly with a seven-day minimum age, CI runs on every push and a CVE scan runs nightly (9).", "payments": "Read with the self-hosted rule. Free software with nothing to buy and no payment protocol (0). No price to publish (20). No card or trial needed (20). An agent can pull the Docker image, or call the public instance, with no signup (20).", "reliability": "Read with the local-software lines, because the listing grades the server an owner runs. The free public instance has no status page, SLA or published limit. Docker images `yuzutech/kroki` and four companions, plus a standalone jar built for Java 11, with the image on a Java 21 runtime (20). The `main.yaml` workflow passed on the last ten pushes to `main`, the latest on 7 October 2026 (25). GitHub's search counts 136 open issues. Most of the 30 newest are proposals for new diagram types and nearly all have a reply, while a September 2025 report of Mermaid PNG faults under high concurrency has none (17). CHANGELOG.md follows Keep a Changelog and states semantic versioning, and 0.33.0 records its change of the default Mermaid layout under Changed with the option that restores the old one (12). Version 0.33.0, with no 1.0 and no statement of stability, and diagrams.net marked experimental (0).", "schema": "No OpenAPI file or other machine-readable contract. `GET /health` returns the diagram types and library versions as JSON (3). No llms.txt on kroki.io or docs.kroki.io (HTTP 404). The docs are AsciiDoc files in the repository (2). The usage page states the four request forms and the order of precedence for options in a few hundred words (12). Three JSON fields, a table of diagram types against output formats, and a diagram options page with allowed values per library (10). Examples for cURL and HTTPie, and encoding samples in ten languages. Status codes 400, 408, 413, 414, 422 and 431 are described where each limit is documented, with no error catalogue, and the JSON error shape is not in the docs (9). A public changelog with dated versions. Paths carry no API version apart from a `/v1/health` alias (12).", "security": "No credential exists to leak or scope. The server has no authentication on its convert endpoints and binds all interfaces by default, so access control is the owner's network (18). `KROKI_SAFE_MODE` defaults to `SECURE`, which blocks file and network reads by diagram libraries, the container runs as the non-root user `kroki`, and the registration API is off in `SECURE` mode. Four advisories in 2026 showed ways round `SECURE` (13). The server renders the caller's own text and returns an image, with remote includes off by default (9). Request logs, `GET /metrics` and optional OpenTelemetry tracing (6). `SECURITY.md` asks for private GitHub advisories, four advisories were published with fixes in July and August 2026, a Trivy scan of the public images runs nightly and Renovate runs weekly. No security.txt (HTTP 404), bug bounty or certification (10).", "transparency": "MIT licence, with every component in one public repository (30). No privacy policy or terms for the software or for the public instance. The docs call the server stateless and say the public instance makes no remote calls. The kroki.io home page loads a Carbon Ads script (15). `KROKI_PORT` is marked deprecated with the reason and a replacement, and no removal date. Removed behaviour is recorded in the changelog (8). OpenTelemetry tracing is configured by environment variable. The 0.32.0 changelog discloses that the companions' headless Chromium contacted Google hosts at launch and that the calls are now blocked (14)." }, "sources": [ { "what": "repository, README, CHANGELOG.md, SECURITY.md, licence, docs source, server source, CI workflows and tags (shallow clone)", "url": "https://github.com/yuzutech/kroki", "seen": "2026-10-09" }, { "what": "usage page, request forms and options", "url": "https://docs.kroki.io/kroki/setup/usage/", "seen": "2026-10-09" }, { "what": "configuration, safe mode, timeouts and limits (docs source)", "url": "https://github.com/yuzutech/kroki/blob/main/docs/modules/setup/pages/configuration.adoc", "seen": "2026-10-09" }, { "what": "install page, container images and endpoints (docs source)", "url": "https://github.com/yuzutech/kroki/blob/main/docs/modules/setup/pages/install.adoc", "seen": "2026-10-09" }, { "what": "Kroki CLI page and the demonstration server caution (docs source)", "url": "https://github.com/yuzutech/kroki/blob/main/docs/modules/setup/pages/kroki-cli.adoc", "seen": "2026-10-09" }, { "what": "changelog, versions and security fixes", "url": "https://github.com/yuzutech/kroki/blob/main/CHANGELOG.md", "seen": "2026-10-09" }, { "what": "four published security advisories", "url": "https://github.com/yuzutech/kroki/security/advisories", "seen": "2026-10-09" }, { "what": "home page, diagram types and formats, sponsors and the free service", "url": "https://kroki.io/", "seen": "2026-10-09" }, { "what": "health endpoint of the public instance, one request", "url": "https://kroki.io/health", "seen": "2026-10-09" }, { "what": "robots.txt, llms.txt and security.txt checks", "url": "https://kroki.io/robots.txt", "seen": "2026-10-09" }, { "what": "repository statistics, CI runs, advisories, open issues and CLI releases", "url": "https://api.github.com/repos/yuzutech/kroki", "seen": "2026-10-09" }, { "what": "Kroki CLI releases", "url": "https://github.com/yuzutech/kroki-cli/releases", "seen": "2026-10-09" }, { "what": "vendor site", "url": "https://www.yuzutech.fr/", "seen": "2026-10-09" }, { "what": "domain registration", "url": "https://rdap.identitydigital.services/rdap/domain/kroki.io", "seen": "2026-10-09" } ], "openQuestions": [ "No terms or privacy document was found for the software or the public instance, so `provenance.terms` and `provenance.privacy` are left out", "The legal form of Yuzu tech. Its site names none, and no company register was searched", "What the public instance logs or keeps. Nothing is published, and the listing grades the server an owner runs", "Whether OpenTelemetry sends anything when no `OTEL_*` variable is set. `Main.java` initialises the autoconfigured SDK at start and the exporter default was not traced", "How many of the 136 open issues are crashes or regressions. Only the 30 newest were read", "unchecked: Docker Hub pull counts and image tags. hub.docker.com was not asked", "unchecked: whether `https://demo.kroki.io`, the CLI's default endpoint, still answers. It was not called", "unchecked: the third-party hosts named in the README (Hostinger, Wovalab, Easypanel, ZopDay), which the project says it does not operate", "The gateway reads `KROKI_BODY_LIMIT` in `Server.java`, and the docs name only `KROKI_MAX_BODY_SIZE` for the companions" ] }, "negative": -5, "negativeNotes": [ "27 July to 12 August 2026. Four advisories on the repository. GHSA-wmpp-fj9c-w766 (critical, CVSS 9.8) allowed unauthenticated remote code execution on `/tikz/svg` in 0.21.0 up to 0.32.0 whatever the safe mode. GHSA-r54f-fq6c-53vw (high, CVE-2026-102359), GHSA-px99-rjv4-49g8 (medium, CVE-2026-102356) and GHSA-9p7m-vrmg-qp4q (high) let TikZ, Mermaid and Vega diagrams read local files or fetch URLs in `SECURE` mode. All are fixed, in 0.32.1 at the latest, and the maintainers published each with a changelog entry, so the deduction is five points (https://github.com/yuzutech/kroki/security/advisories)." ], "verdict": "One unauthenticated POST with diagram text returns an image for 29 diagram types, and five versions shipped between 15 July and 5 October 2026. Four advisories were published in July and August 2026, one an unauthenticated remote code execution on `/tikz/svg`, all fixed. No OpenAPI file exists, and the public instance has no terms, privacy policy or status page.", "bestFor": "Agents that write diagrams in several text formats and want one render endpoint, on a private network or through the public instance for non-sensitive diagrams.", "strengths": [ "`POST /` with `diagram_source`, `diagram_type` and `output_format`, or plain text to `/\u003ctype\u003e/\u003cformat\u003e`, returns the image. No account or key", "One API covers 29 diagram types, among them PlantUML, C4, Structurizr, Mermaid, GraphViz, D2, DBML, BPMN, Excalidraw and Vega", "`KROKI_SAFE_MODE` defaults to `SECURE`, which blocks file and network reads by diagram libraries, and the container runs as the non-root user `kroki`", "Five versions shipped between 15 July and 5 October 2026, and the `main.yaml` workflow passed on the last ten pushes to `main`", "MIT licence. The maintainers published four security advisories in 2026, each with a fixed version and a changelog entry" ], "weaknesses": [ "GHSA-wmpp-fj9c-w766 (CVSS 9.8) allowed unauthenticated remote code execution on `/tikz/svg` in versions 0.21.0 up to 0.32.0, whatever the safe mode. Fixed 3 August 2026", "Three more advisories in July and August 2026 let TikZ, Mermaid and Vega diagrams read local files or fetch URLs in `SECURE` mode. All are fixed in 0.32.1", "No OpenAPI file, llms.txt or error catalogue. The JSON error shape is in the source and not in the documentation", "The public instance at kroki.io has no terms, privacy policy, status page or published rate limit. The CLI page limits the demonstration server to reasonable, non-commercial use", "The server has no authentication on its convert endpoints and binds all interfaces on port 8000 by default. The version is 0.33.0, with no 1.0" ], "agentNotes": [ "Send `POST /\u003ctype\u003e/\u003cformat\u003e` with `Content-Type: text/plain` and the diagram as the body. This avoids the deflate and base64 encoding that GET needs", "Send `Accept: application/json` on a JSON request to get errors as `{\"error\": {\"code\", \"message\"}}`. With an SVG Accept header the error arrives as an image", "Call `GET /health` first to list the diagram types and library versions the instance has. Mermaid, BPMN, Excalidraw and diagrams.net need companion containers", "Run 0.32.1 or later before rendering untrusted text. Earlier versions allow remote code execution through `/tikz/svg` and file reads in `SECURE` mode", "Self-host for private diagrams with `docker run -p8000:8000 yuzutech/kroki`, and set `KROKI_LISTEN=127.0.0.1:8000` or a network rule, since the server has no authentication" ], "metrics": { "kind": "local", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59.2 } ], "editorialScores": { "ergonomics": 70, "maintenance": 86, "payments": 60, "reliability": 74, "schema": 48, "security": 56, "transparency": 67 }, "provenanceScore": 56 }, "connect": { "install": "docker run -p8000:8000 yuzutech/kroki", "http": "curl https://kroki.io/graphviz/svg --data-raw 'digraph G {Hello-\u003eWorld}'" }, "letme": { "capability": "https://letme.dev/diagram.as-code", "tool": "https://letme.dev/kroki" }, "notable": [ "The API takes GET with the diagram deflated and base64-encoded in the path, `POST /` with JSON, or `POST /\u003ctype\u003e/\u003cformat\u003e` with plain text. Options go in `diagram_options`, `Kroki-Diagram-Options-*` headers or query parameters (https://docs.kroki.io/kroki/setup/usage/)", "GHSA-wmpp-fj9c-w766, published 3 August 2026 with CVSS 9.8, allowed unauthenticated remote code execution on `/tikz/svg` in 0.21.0 up to 0.32.0, whatever `KROKI_SAFE_MODE` was set to (https://github.com/yuzutech/kroki/security/advisories)", "Version 0.32.0 of 3 August 2026 stopped the headless Chromium in four companion containers from contacting five Google hosts at launch. The changelog says a packet capture confirmed the calls (https://github.com/yuzutech/kroki/blob/main/CHANGELOG.md)", "Version 0.33.0 of 5 October 2026 made ELK the default Mermaid layout, with `layout=dagre` to restore the old one (https://github.com/yuzutech/kroki/blob/main/CHANGELOG.md)", "`https://kroki.io/health` reported Kroki 0.33.0, D2 0.7.1, Mermaid 12.1.0 and PlantUML 1.2026.8 on 9 October 2026 (https://kroki.io/health)", "The Kroki CLI's newest release is v0.5.0 of 8 December 2022, and the docs page for it shows version 0.1.0 (https://github.com/yuzutech/kroki-cli/releases)" ], "area": "design-diagrams", "details": [ { "label": "Surfaces", "value": "HTTP API on a self-hosted gateway server (Java, Vert.x) or the public instance at https://kroki.io. A separate Go CLI, `kroki`, calls either" }, { "label": "Requests", "value": "`GET /\u003ctype\u003e/\u003cformat\u003e/\u003cencoded\u003e`, `POST /` with `diagram_source`, `diagram_type`, `output_format` and optional `diagram_options`, or `POST /\u003ctype\u003e` and `POST /\u003ctype\u003e/\u003cformat\u003e` with a plain text or JSON body" }, { "label": "Diagram types", "value": "29 on the home page. ActDiag, BlockDiag, BPMN, Bytefield, C4 with PlantUML, D2, DBML, Ditaa, Erd, Excalidraw, GoAT, GraphViz, Mermaid, Nomnoml, NwDiag, PacketDiag, Pikchr, PlantUML, RackDiag, SeqDiag, Structurizr, Svgbob, Symbolator, TikZ, UMlet, Vega, Vega-Lite, WaveDrom and WireViz. diagrams.net is experimental" }, { "label": "Export formats", "value": "SVG for every type. PNG for 18, PDF for 14, JPEG for four, and `txt` and `base64` for PlantUML, C4 and Structurizr, per the home page table" }, { "label": "Containers", "value": "`yuzutech/kroki` is the gateway with 25 endpoints built in. Mermaid, BPMN, Excalidraw and diagrams.net run in companion containers `yuzutech/kroki-mermaid`, `-bpmn`, `-excalidraw` and `-diagramsnet`" }, { "label": "Safe mode", "value": "`KROKI_SAFE_MODE` is `SECURE` by default, with `SAFE` and `UNSAFE`. `SECURE` maps PlantUML to its `SANDBOX` profile and Structurizr to restricted mode" }, { "label": "Limits", "value": "5 seconds for a diagram binary, 20 for a Java library, 30 for a companion and 10 for a Mermaid render. URI 4,096 characters, headers 8,192, Mermaid source 50,000 characters and 500 edges. All set by environment variables" }, { "label": "Errors", "value": "HTTP status with a body in the format the Accept header asks for, JSON `{\"error\": {\"code\", \"message\"}}`, plain text, HTML or an SVG image of the message (from `ErrorHandler.java`)" }, { "label": "Operations", "value": "`GET /health` (also `/v1/health` and `/healthz`) lists library versions, `GET /metrics`, OpenTelemetry tracing by environment variable, and TLS with `KROKI_SSL`" }, { "label": "Public instance", "value": "https://kroki.io, free and paid for by sponsors, with no key. No terms, privacy policy, status page or rate limit is published. The CLI page says the demonstration server is for reasonable, non-commercial use with no uptime guarantee" } ], "provenance": { "legalEntity": "Yuzu tech, a French software firm. No registered legal form found", "domain": "kroki.io", "domainRegistered": "2019-01-06", "endpointOnVendorDomain": true, "terms": "", "privacy": "", "statusPage": "", "changelog": "https://github.com/yuzutech/kroki/blob/main/CHANGELOG.md", "securityTxt": "none", "checked": "2026-10-09", "notes": [ "The kroki.io home page says Kroki is built and maintained by Yuzu tech, and links https://yuzutech.fr, whose pages name no legal form or registration number. `LICENSE` reads Copyright (c) 2020-present Kroki", "No terms or privacy document was found on kroki.io or docs.kroki.io, for the software or for the public instance. The MIT licence stands in for the software", "https://kroki.io/.well-known/security.txt answered 404 on 9 October 2026. `SECURITY.md` asks for reports through a private GitHub security advisory", "The lead wrote the vendor as Yuzutech. The site writes Yuzu tech, and the GitHub organisation is `yuzutech`", "The endpoint on the vendor's domain is the free public instance. The listing grades the server an owner runs" ], "score": 56, "checks": [ { "check": "Legal entity named", "value": "Yuzu tech, a French software firm. No registered legal form found", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "kroki.io, registered 2019-01-06 (7 years)", "points": 11, "max": 15, "state": "part" }, { "check": "Endpoint on the vendor's domain", "value": "kroki.io", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Privacy policy", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "not found", "points": 0, "max": 10, "state": "no" } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/kroki.json", "live": { "slug": "kroki", "versions": [ { "registry": "github", "name": "yuzutech/kroki", "version": "v0.33.0", "released": "2026-10-05", "seenAt": "2026-10-09T17:00:57.82489933Z" } ], "githubStars": 4365, "pages": [ { "url": "https://raw.githubusercontent.com/yuzutech/kroki/main/CHANGELOG.md", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:46:31.151891385Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3e34fa594488" } ], "updatedAt": "2026-10-09T18:46:31.151891385Z" } }, "verify": { "accepts": "a page on kroki.io or one of its subdomains, or the README of github.com/yuzutech/kroki", "badgeUrl": "https://www.anchorterminal.com/badges/kroki.svg", "body": { "slug": "kroki", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/kroki", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/kroki\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/kroki.svg\" alt=\"Kroki on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Kroki on Anchor Terminal](https://www.anchorterminal.com/badges/kroki.svg)](https://www.anchorterminal.com/tools/kroki)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/kroki\"\u003eKroki on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/kroki", "json": "https://www.anchorterminal.com/tools/kroki.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/kroki.md", "slim": "https://www.anchorterminal.com/tools/kroki.min.md" }, "markdown": "## Overview\n\n**Grade C · 59.2/100 · rank #558 of 950 · #8 in Diagramming · not agent-ready · confidence medium**\n\n\n## Assessment\n\nOne unauthenticated POST with diagram text returns an image for 29 diagram types, and five versions shipped between 15 July and 5 October 2026. Four advisories were published in July and August 2026, one an unauthenticated remote code execution on `/tikz/svg`, all fixed. No OpenAPI file exists, and the public instance has no terms, privacy policy or status page.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | Yuzu tech (https://kroki.io) |\n| Kind | HTTP API |\n| Category | Diagramming (https://www.anchorterminal.com/categories/diagramming) |\n| Transport | HTTP |\n| Auth | None · No account, key or login on the convert endpoints, on a self-hosted server or on the public instance at kroki.io. The server binds all interfaces on port 8000 unless `KROKI_LISTEN` says otherwise. An optional bearer token, `KROKI_COMPANION_REGISTRATION_TOKEN`, protects only the `/services` registration API, which is off by default. |\n| Pricing | Free (Free · OSS) · Free under the MIT licence, with nothing to buy. The public instance at kroki.io is free and paid for by sponsors, for reasonable, non-commercial use with no uptime guarantee. Third parties sell hosting, which the project says it does not operate. |\n| x402 | No · No x402, MPP or L402 in the docs or the source (checked 2026-10-09). |\n| Licence | MIT |\n| Packages | oci: `yuzutech/kroki`; oci: `yuzutech/kroki-mermaid`; oci: `yuzutech/kroki-bpmn`; oci: `yuzutech/kroki-excalidraw` |\n| Source | https://github.com/yuzutech/kroki |\n| Docs | https://docs.kroki.io/kroki/setup/usage/ |\n| llms.txt | not found |\n| Last release | 2026-10-05 |\n| GitHub stars | 4,365 (as of 2026-10-09) |\n| Surfaces | HTTP API on a self-hosted gateway server (Java, Vert.x) or the public instance at https://kroki.io. A separate Go CLI, `kroki`, calls either |\n| Requests | `GET /\u003ctype\u003e/\u003cformat\u003e/\u003cencoded\u003e`, `POST /` with `diagram_source`, `diagram_type`, `output_format` and optional `diagram_options`, or `POST /\u003ctype\u003e` and `POST /\u003ctype\u003e/\u003cformat\u003e` with a plain text or JSON body |\n| Diagram types | 29 on the home page. ActDiag, BlockDiag, BPMN, Bytefield, C4 with PlantUML, D2, DBML, Ditaa, Erd, Excalidraw, GoAT, GraphViz, Mermaid, Nomnoml, NwDiag, PacketDiag, Pikchr, PlantUML, RackDiag, SeqDiag, Structurizr, Svgbob, Symbolator, TikZ, UMlet, Vega, Vega-Lite, WaveDrom and WireViz. diagrams.net is experimental |\n| Export formats | SVG for every type. PNG for 18, PDF for 14, JPEG for four, and `txt` and `base64` for PlantUML, C4 and Structurizr, per the home page table |\n| Containers | `yuzutech/kroki` is the gateway with 25 endpoints built in. Mermaid, BPMN, Excalidraw and diagrams.net run in companion containers `yuzutech/kroki-mermaid`, `-bpmn`, `-excalidraw` and `-diagramsnet` |\n| Safe mode | `KROKI_SAFE_MODE` is `SECURE` by default, with `SAFE` and `UNSAFE`. `SECURE` maps PlantUML to its `SANDBOX` profile and Structurizr to restricted mode |\n| Limits | 5 seconds for a diagram binary, 20 for a Java library, 30 for a companion and 10 for a Mermaid render. URI 4,096 characters, headers 8,192, Mermaid source 50,000 characters and 500 edges. All set by environment variables |\n| Errors | HTTP status with a body in the format the Accept header asks for, JSON `{\"error\": {\"code\", \"message\"}}`, plain text, HTML or an SVG image of the message (from `ErrorHandler.java`) |\n| Operations | `GET /health` (also `/v1/health` and `/healthz`) lists library versions, `GET /metrics`, OpenTelemetry tracing by environment variable, and TLS with `KROKI_SSL` |\n| Public instance | https://kroki.io, free and paid for by sponsors, with no key. No terms, privacy policy, status page or rate limit is published. The CLI page says the demonstration server is for reasonable, non-commercial use with no uptime guarantee |\n| Capabilities | diagram.as-code, diagram.create, diagram.export, diagram.architecture |\n| Tags | open-source, self-hosted, http-api, docker, diagram-as-code, plantuml, mermaid, graphviz, no-auth, free |\n| JSON | https://www.anchorterminal.com/api/v1/tools/kroki.json |\n\n## Score breakdown (methodology v0.4, October 2026 research run)\n\nAssessed 2026-10-09 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 74 | 14.8 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 48 | 7.8 |\n| Agent ergonomics | 13% | 16.2 | 70 | 11.4 |\n| Security \u0026 auth | 14% | 17.5 | 56 | 9.8 |\n| Payments \u0026 pricing | 10% | 12.5 | 60 | 7.5 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 86 | 7.5 |\n| Transparency \u0026 trust (editorial 67, provenance 56) | 7% | 8.8 | 62 | 5.4 |\n| Negative events | up to −15 | up to −15 | 27 July to 12 August 2026. Four advisories on the repository. GHSA-wmpp-fj9c-w766 (critical, CVSS 9.8) allowed unauthenticated remote code execution on `/tikz/svg` in 0.21.0 up to 0.32.0 whatever the safe mode. GHSA-r54f-fq6c-53vw (high, CVE-2026-102359), GHSA-px99-rjv4-49g8 (medium, CVE-2026-102356) and GHSA-9p7m-vrmg-qp4q (high) let TikZ, Mermaid and Vega diagrams read local files or fetch URLs in `SECURE` mode. All are fixed, in 0.32.1 at the latest, and the maintainers published each with a changelog entry, so the deduction is five points (https://github.com/yuzutech/kroki/security/advisories). | -5 |\n| **Total** | | | | **59.2 → C** |\n\n### Why each score\n\n- Reliability 74: Read with the local-software lines, because the listing grades the server an owner runs. The free public instance has no status page, SLA or published limit. Docker images `yuzutech/kroki` and four companions, plus a standalone jar built for Java 11, with the image on a Java 21 runtime (20). The `main.yaml` workflow passed on the last ten pushes to `main`, the latest on 7 October 2026 (25). GitHub's search counts 136 open issues. Most of the 30 newest are proposals for new diagram types and nearly all have a reply, while a September 2025 report of Mermaid PNG faults under high concurrency has none (17). CHANGELOG.md follows Keep a Changelog and states semantic versioning, and 0.33.0 records its change of the default Mermaid layout under Changed with the option that restores the old one (12). Version 0.33.0, with no 1.0 and no statement of stability, and diagrams.net marked experimental (0).\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 48: No OpenAPI file or other machine-readable contract. `GET /health` returns the diagram types and library versions as JSON (3). No llms.txt on kroki.io or docs.kroki.io (HTTP 404). The docs are AsciiDoc files in the repository (2). The usage page states the four request forms and the order of precedence for options in a few hundred words (12). Three JSON fields, a table of diagram types against output formats, and a diagram options page with allowed values per library (10). Examples for cURL and HTTPie, and encoding samples in ten languages. Status codes 400, 408, 413, 414, 422 and 431 are described where each limit is documented, with no error catalogue, and the JSON error shape is not in the docs (9). A public changelog with dated versions. Paths carry no API version apart from a `/v1/health` alias (12).\n- Agent ergonomics 70: One request with diagram text in and an image out, and no tool definitions to load. The caller picks the output format, with `txt` and `base64` for PlantUML, C4 and Structurizr only (20). No pagination is needed. Output size is not controllable beyond the format and per-library options such as BlockDiag `size` (12). Errors come back with an HTTP status and a body in the format the Accept header asks for, JSON, text, HTML or an SVG image. This is in `ErrorHandler.java` and not in the docs (12). Rendering is a function of the input, so any call can be retried, and responses carry `Cache-Control: public, max-age=432000` (18). One required field per request. No official SDKs. The Go CLI's newest release is v0.5.0 of December 2022 (8).\n- Security \u0026 auth 56: No credential exists to leak or scope. The server has no authentication on its convert endpoints and binds all interfaces by default, so access control is the owner's network (18). `KROKI_SAFE_MODE` defaults to `SECURE`, which blocks file and network reads by diagram libraries, the container runs as the non-root user `kroki`, and the registration API is off in `SECURE` mode. Four advisories in 2026 showed ways round `SECURE` (13). The server renders the caller's own text and returns an image, with remote includes off by default (9). Request logs, `GET /metrics` and optional OpenTelemetry tracing (6). `SECURITY.md` asks for private GitHub advisories, four advisories were published with fixes in July and August 2026, a Trivy scan of the public images runs nightly and Renovate runs weekly. No security.txt (HTTP 404), bug bounty or certification (10).\n- Payments \u0026 pricing 60: Read with the self-hosted rule. Free software with nothing to buy and no payment protocol (0). No price to publish (20). No card or trial needed (20). An agent can pull the Docker image, or call the public instance, with no signup (20).\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 86: Version 0.33.0 on 5 October 2026, four days before the check (30). Five versions in the last 90 days, 0.31.1 on 15 July, 0.31.2, 0.32.0, 0.32.1 and 0.33.0 (20). 97 commits since 11 July 2026, replies on nearly all of the 30 newest issues, and each 2026 advisory published within a day of the version that fixed it (20). The public instance reported 0.33.0 four days after the tag. No official SDKs, and the CLI has had no release since December 2022 (7). Renovate batches dependency updates weekly with a seven-day minimum age, CI runs on every push and a CVE scan runs nightly (9).\n- Transparency \u0026 trust 62: MIT licence, with every component in one public repository (30). No privacy policy or terms for the software or for the public instance. The docs call the server stateless and say the public instance makes no remote calls. The kroki.io home page loads a Carbon Ads script (15). `KROKI_PORT` is marked deprecated with the reason and a replacement, and no removal date. Removed behaviour is recorded in the changelog (8). OpenTelemetry tracing is configured by environment variable. The 0.32.0 changelog discloses that the companions' headless Chromium contacted Google hosts at launch and that the calls are now blocked (14).\n\nFix list for a coding agent, everything this grade says the listing lacks, the biggest gain first (22 items): https://www.anchorterminal.com/fixes/kroki.md (JSON https://www.anchorterminal.com/fixes/kroki.json)\n\n### What we couldn't check\n\n- No terms or privacy document was found for the software or the public instance, so `provenance.terms` and `provenance.privacy` are left out\n- The legal form of Yuzu tech. Its site names none, and no company register was searched\n- What the public instance logs or keeps. Nothing is published, and the listing grades the server an owner runs\n- Whether OpenTelemetry sends anything when no `OTEL_*` variable is set. `Main.java` initialises the autoconfigured SDK at start and the exporter default was not traced\n- How many of the 136 open issues are crashes or regressions. Only the 30 newest were read\n- unchecked: Docker Hub pull counts and image tags. hub.docker.com was not asked\n- unchecked: whether `https://demo.kroki.io`, the CLI's default endpoint, still answers. It was not called\n- unchecked: the third-party hosts named in the README (Hostinger, Wovalab, Easypanel, ZopDay), which the project says it does not operate\n- The gateway reads `KROKI_BODY_LIMIT` in `Server.java`, and the docs name only `KROKI_MAX_BODY_SIZE` for the companions\n\n### Sources\n\n- repository, README, CHANGELOG.md, SECURITY.md, licence, docs source, server source, CI workflows and tags (shallow clone): \u003chttps://github.com/yuzutech/kroki\u003e (seen 2026-10-09)\n- usage page, request forms and options: \u003chttps://docs.kroki.io/kroki/setup/usage/\u003e (seen 2026-10-09)\n- configuration, safe mode, timeouts and limits (docs source): \u003chttps://github.com/yuzutech/kroki/blob/main/docs/modules/setup/pages/configuration.adoc\u003e (seen 2026-10-09)\n- install page, container images and endpoints (docs source): \u003chttps://github.com/yuzutech/kroki/blob/main/docs/modules/setup/pages/install.adoc\u003e (seen 2026-10-09)\n- Kroki CLI page and the demonstration server caution (docs source): \u003chttps://github.com/yuzutech/kroki/blob/main/docs/modules/setup/pages/kroki-cli.adoc\u003e (seen 2026-10-09)\n- changelog, versions and security fixes: \u003chttps://github.com/yuzutech/kroki/blob/main/CHANGELOG.md\u003e (seen 2026-10-09)\n- four published security advisories: \u003chttps://github.com/yuzutech/kroki/security/advisories\u003e (seen 2026-10-09)\n- home page, diagram types and formats, sponsors and the free service: \u003chttps://kroki.io/\u003e (seen 2026-10-09)\n- health endpoint of the public instance, one request: \u003chttps://kroki.io/health\u003e (seen 2026-10-09)\n- robots.txt, llms.txt and security.txt checks: \u003chttps://kroki.io/robots.txt\u003e (seen 2026-10-09)\n- repository statistics, CI runs, advisories, open issues and CLI releases: \u003chttps://api.github.com/repos/yuzutech/kroki\u003e (seen 2026-10-09)\n- Kroki CLI releases: \u003chttps://github.com/yuzutech/kroki-cli/releases\u003e (seen 2026-10-09)\n- vendor site: \u003chttps://www.yuzutech.fr/\u003e (seen 2026-10-09)\n- domain registration: \u003chttps://rdap.identitydigital.services/rdap/domain/kroki.io\u003e (seen 2026-10-09)\n\n## Who's behind it (provenance 56/100, checked 2026-10-09)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | Yuzu tech, a French software firm. No registered legal form found | 20/20 |\n| Domain age | kroki.io, registered 2019-01-06 (7 years) | 11/15 |\n| Endpoint on the vendor's domain | kroki.io | 15/15 |\n| Terms of service | not found | 0/10 |\n| Privacy policy | not found | 0/10 |\n| Status page | not found | 0/10 |\n| Changelog | published | 10/10 |\n| security.txt | not found | 0/10 |\n\nThe kroki.io home page says Kroki is built and maintained by Yuzu tech, and links https://yuzutech.fr, whose pages name no legal form or registration number. `LICENSE` reads Copyright (c) 2020-present Kroki\n\nNo terms or privacy document was found on kroki.io or docs.kroki.io, for the software or for the public instance. The MIT licence stands in for the software\n\nhttps://kroki.io/.well-known/security.txt answered 404 on 9 October 2026. `SECURITY.md` asks for reports through a private GitHub security advisory\n\nThe lead wrote the vendor as Yuzutech. The site writes Yuzu tech, and the GitHub organisation is `yuzutech`\n\nThe endpoint on the vendor's domain is the free public instance. The listing grades the server an owner runs\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service**. We found no terms of service published for this product, so there is nothing to read and the check scores 0.\n\n\n**Privacy policy**. We found no privacy policy published for this product, so there is nothing to read and the check scores 0.\n\n\n## Live (updated 2026-10-09 18:46 UTC)\n\n- github `yuzutech/kroki` v0.33.0, released 2026-10-05\n- Watching changelog \u003chttps://raw.githubusercontent.com/yuzutech/kroki/main/CHANGELOG.md\u003e\n- Always current: https://www.anchorterminal.com/api/v1/live/kroki.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Strengths\n\n- `POST /` with `diagram_source`, `diagram_type` and `output_format`, or plain text to `/\u003ctype\u003e/\u003cformat\u003e`, returns the image. No account or key\n- One API covers 29 diagram types, among them PlantUML, C4, Structurizr, Mermaid, GraphViz, D2, DBML, BPMN, Excalidraw and Vega\n- `KROKI_SAFE_MODE` defaults to `SECURE`, which blocks file and network reads by diagram libraries, and the container runs as the non-root user `kroki`\n- Five versions shipped between 15 July and 5 October 2026, and the `main.yaml` workflow passed on the last ten pushes to `main`\n- MIT licence. The maintainers published four security advisories in 2026, each with a fixed version and a changelog entry\n\n## Weaknesses\n\n- GHSA-wmpp-fj9c-w766 (CVSS 9.8) allowed unauthenticated remote code execution on `/tikz/svg` in versions 0.21.0 up to 0.32.0, whatever the safe mode. Fixed 3 August 2026\n- Three more advisories in July and August 2026 let TikZ, Mermaid and Vega diagrams read local files or fetch URLs in `SECURE` mode. All are fixed in 0.32.1\n- No OpenAPI file, llms.txt or error catalogue. The JSON error shape is in the source and not in the documentation\n- The public instance at kroki.io has no terms, privacy policy, status page or published rate limit. The CLI page limits the demonstration server to reasonable, non-commercial use\n- The server has no authentication on its convert endpoints and binds all interfaces on port 8000 by default. The version is 0.33.0, with no 1.0\n\n## Before you call it (notes for agents)\n\n1. Send `POST /\u003ctype\u003e/\u003cformat\u003e` with `Content-Type: text/plain` and the diagram as the body. This avoids the deflate and base64 encoding that GET needs\n2. Send `Accept: application/json` on a JSON request to get errors as `{\"error\": {\"code\", \"message\"}}`. With an SVG Accept header the error arrives as an image\n3. Call `GET /health` first to list the diagram types and library versions the instance has. Mermaid, BPMN, Excalidraw and diagrams.net need companion containers\n4. Run 0.32.1 or later before rendering untrusted text. Earlier versions allow remote code execution through `/tikz/svg` and file reads in `SECURE` mode\n5. Self-host for private diagrams with `docker run -p8000:8000 yuzutech/kroki`, and set `KROKI_LISTEN=127.0.0.1:8000` or a network rule, since the server has no authentication\n\n## Connect\n\nInstall:\n\n```bash\ndocker run -p8000:8000 yuzutech/kroki\n```\n\nFirst request:\n\n```bash\ncurl https://kroki.io/graphviz/svg --data-raw 'digraph G {Hello-\u003eWorld}'\n```\n\nThrough letme (picks today, calling later): https://letme.dev/kroki. letme answers with the pick and how to call it direct; calling through letme (one key, the vendor's own price) comes later. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| PlantUML | B | 66.9 | 270 | diagram.as-code, diagram.create, diagram.export, diagram.architecture | no | https://www.anchorterminal.com/tools/plantuml.md |\n| D2 | B | 65.3 | 322 | diagram.as-code, diagram.create, diagram.export, diagram.architecture | no | https://www.anchorterminal.com/tools/d2.md |\n| draw.io + MCP | B | 62.2 | 439 | diagram.create, diagram.as-code, diagram.export, diagram.architecture | no | https://www.anchorterminal.com/tools/drawio.md |\n| Structurizr + MCP | C | 59.9 | 533 | diagram.create, diagram.as-code, diagram.export, diagram.architecture | no | https://www.anchorterminal.com/tools/structurizr.md |\n| Eraser API + MCP | E | 38.6 | 918 | diagram.create, diagram.as-code, diagram.export, diagram.architecture | no | https://www.anchorterminal.com/tools/eraser.md |\n| tldraw SDK + MCP | C | 60.7 | 498 | diagram.create, diagram.as-code, diagram.export | no | https://www.anchorterminal.com/tools/tldraw.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- The API takes GET with the diagram deflated and base64-encoded in the path, `POST /` with JSON, or `POST /\u003ctype\u003e/\u003cformat\u003e` with plain text. Options go in `diagram_options`, `Kroki-Diagram-Options-*` headers or query parameters (source: \u003chttps://docs.kroki.io/kroki/setup/usage/\u003e)\n- GHSA-wmpp-fj9c-w766, published 3 August 2026 with CVSS 9.8, allowed unauthenticated remote code execution on `/tikz/svg` in 0.21.0 up to 0.32.0, whatever `KROKI_SAFE_MODE` was set to (source: \u003chttps://github.com/yuzutech/kroki/security/advisories\u003e)\n- Version 0.32.0 of 3 August 2026 stopped the headless Chromium in four companion containers from contacting five Google hosts at launch. The changelog says a packet capture confirmed the calls (source: \u003chttps://github.com/yuzutech/kroki/blob/main/CHANGELOG.md\u003e)\n- Version 0.33.0 of 5 October 2026 made ELK the default Mermaid layout, with `layout=dagre` to restore the old one (source: \u003chttps://github.com/yuzutech/kroki/blob/main/CHANGELOG.md\u003e)\n- `https://kroki.io/health` reported Kroki 0.33.0, D2 0.7.1, Mermaid 12.1.0 and PlantUML 1.2026.8 on 9 October 2026 (source: \u003chttps://kroki.io/health\u003e)\n- The Kroki CLI's newest release is v0.5.0 of 8 December 2022, and the docs page for it shows version 0.1.0 (source: \u003chttps://github.com/yuzutech/kroki-cli/releases\u003e)\n\n- #9 of 15 in Best diagramming APIs and diagram-as-code for AI agents: https://www.anchorterminal.com/best/diagramming/index.md\n- All 99 diagrams comparisons: https://www.anchorterminal.com/compare/diagramming/index.md\n\n## Compare\n\n- [Cloudviz API vs Kroki](https://www.anchorterminal.com/compare/cloudviz-vs-kroki.md): F 37.7 vs C 59.2\n- [Diagrams.so API + MCP vs Kroki](https://www.anchorterminal.com/compare/diagrams-so-vs-kroki.md): C 60 vs C 59.2\n- [draw.io + MCP vs Kroki](https://www.anchorterminal.com/compare/drawio-vs-kroki.md): B 62.2 vs C 59.2\n- [Eraser API + MCP vs Kroki](https://www.anchorterminal.com/compare/eraser-vs-kroki.md): E 38.6 vs C 59.2\n- [Excalidraw vs Kroki](https://www.anchorterminal.com/compare/excalidraw-vs-kroki.md): C 54.5 vs C 59.2\n- [Kroki vs Mural MCP](https://www.anchorterminal.com/compare/kroki-vs-mural-mcp.md): C 59.2 vs E 41.9\n- [Kroki vs Whimsical MCP](https://www.anchorterminal.com/compare/kroki-vs-whimsical.md): C 59.2 vs D 52.6\n- [D2 vs Kroki](https://www.anchorterminal.com/compare/d2-vs-kroki.md): B 65.3 vs C 59.2\n- [Kroki vs Lucid API + MCP](https://www.anchorterminal.com/compare/kroki-vs-lucid.md): C 59.2 vs C 60.6\n- [Kroki vs Mermaid Chart MCP](https://www.anchorterminal.com/compare/kroki-vs-mermaid-chart.md): C 59.2 vs F 31.4\n- [Kroki vs PlantUML](https://www.anchorterminal.com/compare/kroki-vs-plantuml.md): C 59.2 vs B 66.9\n- [Kroki vs Structurizr + MCP](https://www.anchorterminal.com/compare/kroki-vs-structurizr.md): C 59.2 vs C 59.9\n- [Kroki vs tldraw SDK + MCP](https://www.anchorterminal.com/compare/kroki-vs-tldraw.md): C 59.2 vs C 60.7\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on kroki.io or one of its subdomains, or the README of github.com/yuzutech/kroki. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"kroki\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/kroki\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/kroki.svg\" alt=\"Kroki on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Kroki on Anchor Terminal](https://www.anchorterminal.com/badges/kroki.svg)](https://www.anchorterminal.com/tools/kroki)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/kroki\"\u003eKroki on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Kroki is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/kroki-dark.png\n- Light: https://www.anchorterminal.com/assets/share/kroki-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Diagramming", "url": "https://www.anchorterminal.com/categories/diagramming" }, { "name": "Kroki", "url": "" } ], "description": "Kroki is an open-source HTTP server from Yuzu tech that converts diagram text in 29 formats, including PlantUML, Mermaid, GraphViz and D2, into SVG, PNG or PDF. Owners run it from Docker images, and kroki.io is a free public instance.", "facts": [ "rank #558 of 950", "None auth", "0 desk reviews" ], "h1": "Kroki", "image": "https://www.anchorterminal.com/assets/og/tools-kroki.png", "path": "/tools/kroki", "published": "2026-10-01", "section": "tools", "title": "Kroki review (2026): pricing, alternatives and grade C", "toc": null, "updated": "2026-10-09", "url": "https://www.anchorterminal.com/tools/kroki" }, "tokens": { "markdown": 6500, "slim": 1730 }, "version": 1 }