Codepic Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Codepic Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Let your AI coding agent draw editable diagrams — not another Mermaid snippet you have to paste.
Generate editable hand-drawn diagrams from Cursor, Claude Desktop, and other MCP clients.
CodePic MCP lets an AI coding agent create diagrams directly in CodePic instead of returning static images, Mermaid snippets, or JSON that you have to paste manually. The result opens in the CodePic editor, where you can still move shapes, edit labels, adjust connectors, share a read-only link, and export PNG or JSON.
It's a remote Streamable HTTP server — no local install. First create a free API key (the cpk_... token) at https://codepic.cc/settings/api-keys (sign in → New API key → copy), then add the config for your client and replace cpk_your_api_key_here.
Create .cursor/mcp.json in your project:
{
"mcpServers": {
"codepic": {
"url": "https://codepic.cc/api/mcp/mcp",
"headers": {
"Authorization": "Bearer cpk_your_api_key_here"
}
}
}
}Add it with one command:
claude mcp add --transport http codepic https://codepic.cc/api/mcp/mcp \
--header "Authorization: Bearer cpk_your_api_key_here"Add CodePic to your claude_desktop_config.json:
{
"mcpServers": {
"codepic": {
"type": "streamableHttp",
"url": "https://codepic.cc/api/mcp/mcp",
"headers": {
"Authorization": "Bearer cpk_your_api_key_here"
}
}
}
}Add CodePic to .vscode/mcp.json:
{
"servers": {
"codepic": {
"type": "http",
"url": "https://codepic.cc/api/mcp/mcp",
"headers": {
"Authorization": "Bearer cpk_your_api_key_here"
}
}
}
}Add CodePic to ~/.codex/config.toml:
[mcp_servers.codepic]
url = "https://codepic.cc/api/mcp/mcp"
[mcp_servers.codepic.headers]
Authorization = "Bearer cpk_your_api_key_here"Add CodePic to ~/.codeium/windsurf/mcp_config.json:
{
"mcpServers": {
"codepic": {
"serverUrl": "https://codepic.cc/api/mcp/mcp",
"headers": {
"Authorization": "Bearer cpk_your_api_key_here"
}
}
}
}Open Cline's MCP settings (cline_mcp_settings.json) and add:
{
"mcpServers": {
"codepic": {
"type": "streamableHttp",
"url": "https://codepic.cc/api/mcp/mcp",
"headers": {
"Authorization": "Bearer cpk_your_api_key_here"
}
}
}
}Any MCP client that supports remote Streamable HTTP works — point it at the endpoint https://codepic.cc/api/mcp/mcp with header Authorization: Bearer cpk_....
list_templates - list available diagram templates.create_from_template - create a new diagram from a template.create_diagram - create a custom diagram with nodes and edges.get_diagram - fetch the current diagram structure by documentId before making targeted follow-up edits.update_diagram - update an existing diagram by replacing, adding, or removing nodes and edges.Use get_diagram when you already have a CodePic document and want the AI agent to inspect it before changing it. This keeps the workflow grounded in the current diagram instead of guessing from memory.
Example prompt:
Use get_diagram to inspect document <documentId>, then update the diagram by adding a Redis cache between the API server and Postgres database.| Example | What It Generates | Prompt |
|---|---|---|
| System architecture | Next.js SaaS architecture diagram | Next.js + Supabase + Postgres + R2 + Stripe + Vercel |
| Database ER diagram | SaaS billing data model | Users, teams, subscriptions, invoices, payments |
| OAuth sequence flow | PKCE login sequence diagram | Browser, app server, identity provider, database |
| CI/CD pipeline | GitHub Actions deployment pipeline | Type-check, lint, build, preview, production |
| Data pipeline | Analytics pipeline diagram | Segment, Snowflake, dbt, Metabase |
| Iterate existing diagram | Read an existing document, then update it | get_diagram + update_diagram |
If you share this project, lead with the workflow:
I connected Cursor to a diagram editor through MCP, so it can generate editable architecture diagrams instead of Mermaid text.
Avoid generic product claims like "best diagram tool". Developer communities respond better to a concrete workflow and real examples.
MIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.