excalidraw-mcp
Verified Safeby cmd8
Overview
Model Context Protocol (MCP) server for programmatically creating, modifying, and querying Excalidraw diagrams.
Installation
npx -y @cmd8/excalidraw-mcp --diagram /path/to/diagram.excalidrawSecurity Notes
The server uses `fs.readFile` and `fs.writeFile` to interact with a local Excalidraw diagram file. The path to this file is resolved using `path.resolve(process.cwd(), argv.diagram.trim())`, which limits file access to the current working directory and its subdirectories, mitigating arbitrary file system access risks. Data is parsed and stringified as JSON. No `eval` or dynamic code execution is observed. The server operates over stdio, not exposing network ports by default. Potential for resource exhaustion if very large or malformed Excalidraw JSON files are processed, but this is a general file processing risk.
Similar Servers
XcodeBuildMCP
Provides an MCP (Model Context Protocol) server for AI agents and other clients to programmatically build, test, run, and debug iOS and macOS applications, manage simulators/devices, and capture logs.
f2c-mcp
A Model Context Protocol server for Figma Design to Code, enabling AI tools to convert Figma designs into production-ready frontend code.
tmcp
A server implementation for the Model Context Protocol (MCP) to enable LLMs to access external context and tools.
redBookMCP
This server provides a Model Context Protocol (MCP) interface for generating Xiaohongshu-style graphic content, including outlines and images, by orchestrating calls to external AI services.