3 compared
Diagramming MCP servers compared
Diagramming and charting MCP servers that let Claude generate visuals, compared on trust, setup, and output.
Open in the interactive comparison tool| Field | Draw.io MCP Server MCP server for controlling Draw.io and diagrams.net diagrams from Claude, including document discovery, page management, layers, shapes, edges, Mermaid import, diagram import/export, and a built-in editor mode. Open dossier | Excalidraw Canvas MCP Server MCP server and live Excalidraw canvas toolkit that lets Claude create, inspect, update, export, snapshot, and iteratively refine diagrams. Open dossier | AntV MCP Server Chart Visualization MCP server for generating charts, diagrams, maps, graphs, spreadsheets, and data-analysis visuals with AntV. Open dossier |
|---|---|---|---|
| Trust | |||
| Install risk | Review first | Review first | Review first |
| Notes | Safety ✓ Privacy ✓ | Safety ✓ Privacy ✓ | Safety ✓ Privacy ✓ |
| Category | mcp | mcp | mcp |
| Source | source-backed | source-backed | source-backed |
| Author | Lukas Gazo | yctimlin | AntV |
| Added | 2026-06-06 | 2026-06-05 | 2026-06-05 |
| Platforms | Claude CodeClaude Desktop | Claude CodeClaude Desktop | Claude CodeClaude Desktop |
| Source repo | — | — | — |
| Safety notes | ✓Draw.io MCP Server can create, edit, delete, import, export, rename, copy, and reorganize diagram pages, layers, shapes, edges, labels, metadata, and Mermaid-derived content. Live operations target connected Draw.io browser tabs or the built-in editor; verify the selected document and page before allowing destructive edits. The server can run local HTTP and WebSocket endpoints, optionally with TLS or auto-generated self-signed certificates; avoid binding it to untrusted network interfaces. Browser-extension mode links a browser tab to the MCP server, so only connect tabs containing diagrams that the agent is allowed to inspect or modify. Export tools can write or return XML, SVG, and PNG files with embedded diagram data; review outputs before sharing them externally. Use trusted package sources, pin versions for repeatable workflows, and review generated diagrams before committing architectural or security documentation. | ✓The canvas server has no built-in authentication; keep it bound to localhost unless network access controls are in place. MCP tools can create, update, duplicate, group, delete, clear, import, export, snapshot, and restore diagram content. File import and export should stay inside an approved export directory; review `EXCALIDRAW_EXPORT_DIR` before enabling file workflows. The URL export tool can upload a scene to Excalidraw hosted sharing, so review the scene before sharing. In-memory canvas state can be lost on restart unless diagrams are exported or snapshots are preserved. | ✓AntV MCP Server Chart can generate visual outputs from provided data, so review charts before using them in reports, dashboards, or customer-facing material. Geographic visualization tools may depend on external map services and have regional limitations described by the upstream project. Disable unsupported or unwanted chart tools with `DISABLED_TOOLS` when an MCP client has compatibility issues or a workflow should expose fewer visualization actions. Use private rendering infrastructure through `VIS_REQUEST_SERVER` when sensitive datasets should not be sent to the default chart generation service. |
| Privacy notes | ✓Diagrams can include private architecture, network topology, cloud account names, customer systems, credentials embedded in labels, incident details, internal process maps, or product plans. The MCP client can receive diagram XML, SVG, PNG exports, page names, layer names, selected-cell data, shape metadata, browser tab document metadata, and imported Mermaid content. Local editor and browser-extension workflows may leave diagrams, exported files, browser state, TLS material, and logs on disk. Treat exported SVG or PNG files with embedded XML as source files, because they can contain full editable diagram data beyond the visible image. Clear temporary files, generated certificates, and MCP logs when they are no longer needed for the diagram workflow. | ✓Diagrams may reveal infrastructure topology, unreleased product plans, customer names, credentials accidentally included as labels, or incident context. Screenshots, exported images, Excalidraw JSON files, snapshots, and share URLs may be visible to the MCP client, browser, logs, and model provider. Avoid exposing the local REST/WebSocket canvas API to shared networks without authentication or a trusted network boundary. Treat imported diagrams from untrusted sources as prompt-injection and data-exposure risks before asking a model to summarize them. | ✓Chart data, labels, prompts, generated images, service identifiers, and rendering requests may contain business metrics, personal data, locations, or customer information. Default chart rendering can involve AntV-hosted services; review data sensitivity before sending private datasets. Protect custom rendering endpoints, service identifiers, and any generated record links in client configs, logs, screenshots, and shared prompts. |
| Prerequisites |
|
|
|
| Install | | | |
| Config | | | |
| Citations | |||
| Claim | Unclaimed | Unclaimed | Unclaimed |
More comparisons, weekly
A short, calm digest of reviewed Claude resources. Unsubscribe any time.