Diagramzu Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Diagramzu Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for diagramzu.ai. Lets Claude Code, Claude Desktop, Cursor, Windsurf, ChatGPT custom GPTs, and any MCP client read and write Mermaid diagrams in your Space.
You author diagrams by talking to your AI — it stores them at diagramzu.ai/d/<id>, where your team can read and share them.
Available in the official MCP Registry as ai.diagramzu/mcp.Sign up at diagramzu.ai, then create an API token at diagramzu.ai/app/settings/tokens. Tokens look like dz_live_… and are scoped to one Space — no separate space-id needed.
The hosted server is the easy path: no install, no build. Just paste a config.
claude mcp add --scope user --transport http diagramzu https://mcp.diagramzu.ai/mcp \
--header "Authorization: Bearer dz_live_xxx"Add to your client's MCP config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS for Claude Desktop, ~/.cursor/mcp.json for Cursor, etc.):
{
"mcpServers": {
"diagramzu": {
"type": "http",
"url": "https://mcp.diagramzu.ai/mcp",
"headers": { "Authorization": "Bearer dz_live_xxx" }
}
}
}In the GPT builder, add an MCP server action pointing to https://mcp.diagramzu.ai/mcp with a Bearer-token authentication header set to your dz_live_… token.
npx -y @diagramzu/mcpwith environment:
DIAGRAMZU_BASE_URL=https://diagramzu.ai
DIAGRAMZU_API_TOKEN=dz_live_xxx
DIAGRAMZU_SPACE_ID=<your space id>Most users should prefer the remote HTTP transport above — the stdio path exists for clients without HTTP MCP support.
| Tool | Description |
|---|---|
list_diagrams | List diagrams in the Space (filter with q, sort by updated / created) |
list_folders | List folders in the Space |
get_diagram | Fetch one diagram by id (returns title + Mermaid source) |
create_diagram | Create a new diagram (returns the share URL) |
update_diagram | Update title and/or Mermaid source of an existing diagram |
analyze_diagram | Get a structural summary of a diagram (nodes, edges, density) |
list_versions | List version history for a diagram |
get_version | Fetch a specific historical version of a diagram |
If you publish your MCP / Claude Code config in a dotfiles or example repo, drop this in the README so the next person knows where the diagrams come from:
[](https://diagramzu.ai)Renders as a small shields-style badge — gray MCP + indigo diagramzu.
For hacking on diagramzu itself, build from source:
cd packages/mcp-diagramzu
pnpm install
pnpm run build
# point your client at: node dist/index.js
# with DIAGRAMZU_BASE_URL / DIAGRAMZU_API_TOKEN / DIAGRAMZU_SPACE_IDMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.