Draw.io MCP Server

Source-backed facts for citing this resource, derived directly from the registry — also available as plain text for AI assistants.

Canonical URL

https://heyclau.de/entry/mcp/drawio-mcp-server

Source URLs

https://raw.githubusercontent.com/lgazo/drawio-mcp-server/main/README.md, https://github.com/lgazo/drawio-mcp-server

Brand

Draw.io MCP Server

Brand domain

diagrams.net

Brand asset source

brandfetch

Safety notes

Draw.io MCP Server can create, edit, delete, import, export, rename, copy, and reorganize diagram pages, layers, shapes, edges, labels, metadata, and Mermaid-derived content., Live operations target connected Draw.io browser tabs or the built-in editor; verify the selected document and page before allowing destructive edits., The server can run local HTTP and WebSocket endpoints, optionally with TLS or auto-generated self-signed certificates; avoid binding it to untrusted network interfaces., Browser-extension mode links a browser tab to the MCP server, so only connect tabs containing diagrams that the agent is allowed to inspect or modify., Export tools can write or return XML, SVG, and PNG files with embedded diagram data; review outputs before sharing them externally., Use trusted package sources, pin versions for repeatable workflows, and review generated diagrams before committing architectural or security documentation.

Privacy notes

Diagrams can include private architecture, network topology, cloud account names, customer systems, credentials embedded in labels, incident details, internal process maps, or product plans., The MCP client can receive diagram XML, SVG, PNG exports, page names, layer names, selected-cell data, shape metadata, browser tab document metadata, and imported Mermaid content., Local editor and browser-extension workflows may leave diagrams, exported files, browser state, TLS material, and logs on disk., Treat exported SVG or PNG files with embedded XML as source files, because they can contain full editable diagram data beyond the visible image., Clear temporary files, generated certificates, and MCP logs when they are no longer needed for the diagram workflow.

Author

Lukas Gazo

Submitted by

oktofeesh1

Claim status

unclaimed

Last verified

2026-06-06

• Diagrams can include private architecture, network topology, cloud account names, customer systems, credentials embedded in labels, incident details, internal process maps, or product plans.
• The MCP client can receive diagram XML, SVG, PNG exports, page names, layer names, selected-cell data, shape metadata, browser tab document metadata, and imported Mermaid content.
• Local editor and browser-extension workflows may leave diagrams, exported files, browser state, TLS material, and logs on disk.
• Treat exported SVG or PNG files with embedded XML as source files, because they can contain full editable diagram data beyond the visible image.
• Clear temporary files, generated certificates, and MCP logs when they are no longer needed for the diagram workflow.

• Node.js 22 or newer for the published npm package.
• An MCP client such as Claude Desktop or Claude Code.
• A browser for the built-in editor, or the Draw.io MCP browser extension when controlling an existing diagrams.net tab.
• Review of which diagrams, browser tabs, pages, and export locations Claude is allowed to modify.
• TLS planning when using Firefox, browser-extension WebSocket connections, reverse proxies, or network-accessible transports.

Show that Draw.io MCP Server is listed on HeyClaude. Paste this Markdown into your README — it renders the badge and links back to this page.

[![Listed on HeyClaude](https://heyclau.de/badge/mcp/drawio-mcp-server.svg)](https://heyclau.de/entry/mcp/drawio-mcp-server)

Draw.io MCP Server side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.

Field	Draw.io MCP Server MCP server for controlling Draw.io and diagrams.net diagrams from Claude, including document discovery, page management, layers, shapes, edges, Mermaid import, diagram import/export, and a built-in editor mode. Open dossier	Agentset MCP Server Official Agentset MCP server that lets Claude retrieve cited knowledge-base results from an Agentset namespace through the `knowledge-base-retrieve` tool, with optional tenant scoping and custom tool descriptions. Open dossier	AI Game Developer Unity MCP Server Unity MCP server, plugin, CLI, and skill generator for controlling Unity Editor and runtime projects from MCP clients through built-in game-dev tools. Open dossier	Anki MCP Server MCP server for Anki flashcards that lets Claude review cards, manage decks, create and update notes, handle tags and media, inspect stats, and drive Anki desktop GUI workflows. Open dossier
Next steps	Open dossierCopy installCopy configAPI JSONOpen LLMMCP feedOpen sourceNewsletterClaim listing	Open dossierCopy installCopy configAPI JSONOpen LLMMCP feedOpen sourceNewsletterClaim listing	Open dossierCopy installCopy configAPI JSONOpen LLMMCP feedOpen sourceNewsletterClaim listing	Open dossierCopy installCopy configAPI JSONOpen LLMMCP feedOpen sourceNewsletterClaim listing
Trust	Review first	Review first	Review first	Review first
Review status	Not reviewed	Not reviewed	Not reviewed	Not reviewed
Package trust	Package not verified	Package not verified	Package not verified	Package not verified
Source provenance	Source-backed	Source-backed	Source-backed	Source-backed
Submitter	oktofeesh1	oktofeesh1	oktofeesh1	oktofeesh1
Install risk	Review first	Review first	Review first	Review first
Notes	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓
Brand	Draw.io MCP Server	Agentset	AI Game Developer	Anki MCP Server
Category	mcp	mcp	mcp	mcp
Source	Source-backed	Source-backed	Source-backed	Source-backed
Author	Lukas Gazo	Agentset	Ivan Murzak	AnkiMCP
Added	2026-06-06	2026-06-06	2026-06-06	2026-06-06
Platforms	Claude CodeCodexCursorClaude Desktop	Claude CodeClaude Desktop	Claude CodeClaude Desktop	Claude CodeClaude Desktop
Harness	Claude CodeCodexCursorClaude Desktop	Claude CodeClaude Desktop	Claude CodeClaude Desktop	Claude CodeClaude Desktop
Source repo	—	—	—	—
Safety notes	✓Draw.io MCP Server can create, edit, delete, import, export, rename, copy, and reorganize diagram pages, layers, shapes, edges, labels, metadata, and Mermaid-derived content. Live operations target connected Draw.io browser tabs or the built-in editor; verify the selected document and page before allowing destructive edits. The server can run local HTTP and WebSocket endpoints, optionally with TLS or auto-generated self-signed certificates; avoid binding it to untrusted network interfaces. Browser-extension mode links a browser tab to the MCP server, so only connect tabs containing diagrams that the agent is allowed to inspect or modify. Export tools can write or return XML, SVG, and PNG files with embedded diagram data; review outputs before sharing them externally. Use trusted package sources, pin versions for repeatable workflows, and review generated diagrams before committing architectural or security documentation.	✓The MCP server sends Claude's retrieval queries to the Agentset API using the configured API key and namespace. The `knowledge-base-retrieve` tool can return up to 100 results per call and can rerank results by relevance. Namespace and tenant selection control which indexed documents are searchable; review them before connecting a shared agent. API keys should be scoped, rotated, and stored only in the MCP server environment or a secret manager. Custom tool descriptions can influence when the model calls the retrieval tool, so review them before use in production workflows.	✓AI Game Developer can create, move, copy, modify, and delete Unity assets, scenes, GameObjects, components, scripts, packages, and generated project files. Tools include dynamic C# script execution, C# reflection method lookup and calls, package installation/removal, Unity test execution, editor state changes, play mode control, screenshots, and profiler access. The MCP server supports streamable HTTP and stdio; HTTP deployments should require a bearer token and stay bound to trusted interfaces. Server variables include optional authorization and webhook settings; webhook endpoints can receive tool, prompt, resource, connection, and authorization events. Unity runtime connections can expose compiled game state or in-game behavior to an MCP client, not just editor-only project data. Use source control, backups, tool filtering, and explicit review before allowing destructive tools such as asset deletion, package removal, script execution, or reflection calls.	✓Anki MCP Server can create, update, delete, move, tag, rate, and sync cards and notes through AnkiConnect. Destructive tools include note deletion, media deletion, unused-tag clearing, deck moves, tag replacement, model styling changes, and review rating actions that affect scheduling. The server supports read-only mode that blocks exposed write actions, but users should still review tool calls before enabling unrestricted study or collection-management workflows. Media tools can store files from local paths, URLs, or base64 data and can retrieve media as base64 content. GUI tools can open Anki windows, select cards, edit notes, show answers, and undo the last Anki action. Remote tunnel or ngrok-style setups expose local Anki to cloud-hosted AI clients and require careful authentication, origin, and URL-sharing controls.
Privacy notes	✓Diagrams can include private architecture, network topology, cloud account names, customer systems, credentials embedded in labels, incident details, internal process maps, or product plans. The MCP client can receive diagram XML, SVG, PNG exports, page names, layer names, selected-cell data, shape metadata, browser tab document metadata, and imported Mermaid content. Local editor and browser-extension workflows may leave diagrams, exported files, browser state, TLS material, and logs on disk. Treat exported SVG or PNG files with embedded XML as source files, because they can contain full editable diagram data beyond the visible image. Clear temporary files, generated certificates, and MCP logs when they are no longer needed for the diagram workflow.	✓Retrieved chunks can include private documents, product specs, policies, support content, internal procedures, historical project information, or customer-specific data. Retrieval queries, namespace IDs, tenant IDs, document chunks, citations, and tool outputs may be visible to the MCP client, model provider, Agentset logs, and application telemetry. Tenant IDs are useful for data segregation, but incorrect tenant or namespace configuration can expose the wrong knowledge base. Do not paste API keys, namespace IDs, tenant IDs, or retrieved private chunks into shared issue reports, screenshots, or repository files.	✓Tool calls may expose Unity project paths, asset names, scene hierarchy, serialized object data, scripts, logs, screenshots, profiler metrics, test output, package metadata, and runtime state. MCP config files and Unity plugin config can contain server URLs, connection modes, bearer tokens, authorization settings, enabled tool IDs, and cloud or local endpoint details. Optional webhooks can receive tool, prompt, resource, connection, authorization, and token-bearing request data. Screenshots from Game View, Scene View, cameras, or isolated GameObjects may include proprietary artwork, level design, UI, debug overlays, or unreleased game content. Generated skills and AI-client configuration files can reveal available tools, project structure, installed packages, and local workflow assumptions.	✓Tool calls can expose deck names, note fields, card contents, tags, review history, media filenames, base64 media, selected notes, collection stats, scheduling metadata, and AnkiConnect errors. Flashcards may contain medical, language-learning, school, work, personal, customer, or confidential study material. Sync can send Anki collection changes to AnkiWeb according to the user's Anki account and sync settings. Local media file paths, URLs imported into cards, and GUI-selected note IDs can enter MCP client context and model logs. Remote tunnel providers and hosted clients may process connection metadata or traffic according to their own policies.
Prerequisites	Node.js 22 or newer for the published npm package. An MCP client such as Claude Desktop or Claude Code. A browser for the built-in editor, or the Draw.io MCP browser extension when controlling an existing diagrams.net tab. Review of which diagrams, browser tabs, pages, and export locations Claude is allowed to modify.	Agentset account or self-hosted Agentset deployment with a populated namespace. Agentset API key with access to the namespace Claude should query. Node.js 18.17 or newer for running the `@agentset/mcp` package. Namespace ID selected with `--ns` or `AGENTSET_NAMESPACE_ID`.	Unity project using Unity 2022.3 or newer for the current package metadata. Unity Hub or a local Unity Editor installation. Node.js 20.19 or newer, or Node.js 22.12 or newer, for `unity-mcp-cli`. An MCP client such as Claude Code, Claude Desktop, Codex, Cursor, Gemini CLI, GitHub Copilot, Cline, or another supported client.	Anki Desktop installed and running. The AnkiConnect add-on installed in Anki. Node.js 22.12 or newer for the npm package path. Review of which decks, cards, tags, media files, and note types the MCP client may access.
Install	npx -y drawio-mcp-server --editor Copy install	Run `npx @agentset/mcp --ns <namespace-id>` with `AGENTSET_API_KEY` set in the MCP server environment. Copy install	npm install -g unity-mcp-cli && unity-mcp-cli install-plugin ./MyUnityProject Copy install	npx -y @ankimcp/anki-mcp-server --stdio Copy install
Config	{ "mcpServers": { "drawio": { "command": "npx", "args": [ "-y", "drawio-mcp-server", "--editor" ], "env": { "NPM_CONFIG_IGNORE_SCRIPTS": "true" }, "type": "stdio" } } } Copy config	{ "mcpServers": { "agentset": { "command": "npx", "args": ["-y", "@agentset/mcp@latest", "--ns", "ns_xxx"], "env": { "AGENTSET_API_KEY": "agentset_xxx" } } } } Copy config	Manual-only setup: npm install -g unity-mcp-cli unity-mcp-cli install-plugin ./MyUnityProject unity-mcp-cli open ./MyUnityProject Copy config	{ "mcpServers": { "anki": { "command": "npx", "args": [ "-y", "@ankimcp/anki-mcp-server", "--stdio" ], "type": "stdio" } } } Copy config
Citations	Source repositorygithub.com 2026-07-21T07:17:01+00:00 Documentationraw.githubusercontent.com Submitted by oktofeesh12026-06-06 Source methodology →	Source repositorygithub.com 2026-07-21T07:17:01+00:00 Documentationdocs.agentset.ai Submitted by oktofeesh12026-06-06 Source methodology →	Source repositorygithub.com 2026-07-21T07:17:01+00:00 Documentationraw.githubusercontent.com Submitted by oktofeesh12026-06-06 Source methodology →	Source repositorygithub.com 2026-07-21T07:17:01+00:00 Documentationraw.githubusercontent.com Submitted by oktofeesh12026-06-06 Source methodology →
Claim	Unclaimed	Unclaimed	Unclaimed	Unclaimed

• Comparison: draw.io vs Excalidraw vs AntV Chart MCP servers for ClaudeOpen 3 picks in the interactive comparison tool