No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by peng-shawn · MCP Server · ★ 233
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is mermaid-mcp-server safe to install? View the security audit →
Mermaid MCP Server A Model Context Protocol (MCP) server that converts Mermaid diagrams to PNG images or SVG files. This server allows AI assistants and other applications to generate visual diagrams from textual descriptions using the Mermaid markdown syntax. Features Converts Mermaid diagram code to PNG images or SVG files Supports multiple diagram themes (default, forest, dark, neutral) Customizable background colors Uses Puppeteer for high-quality headless browser rendering Implements the MCP protocol for seamless integration with AI assistants Flexible output options: return images/SVG directly or save to disk Error handling with detailed error messages How It Works The server uses Puppeteer to launch a headless browser, render the Mermaid diagram to SVG, and optionally capture a screenshot of the rendered diagram. The process involves: Launching a headless browser instance Creating an HTML template with the Mermaid code Loading the Mermaid.js library Rendering the diagram to SVG Either saving the SVG directly or taking a screenshot as PNG Either returning the image/SVG directly or saving it to disk Build Usage Use with Claude desktop Use with Cursor and Cline You
| Stars | 233 |
| Forks | 20 |
| Language | JavaScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 78.7229924577577/100 |
| Open Issues | 5 |
| Last Updated | 2025-06-21 |
| Created | 2025-03-05 |
| Platforms | mcp, node |
| Est. Tokens | ~26k |
These tools work well together with mermaid-mcp-server for enhanced workflows:
Explore other popular mcp server tools:
mermaid-mcp-server is A Model Context Protocol (MCP) server that converts Mermaid diagrams to PNG images. It is categorized as a MCP Server with 233 GitHub stars.
mermaid-mcp-server is primarily written in JavaScript.
You can find installation instructions and usage details in the mermaid-mcp-server GitHub repository at github.com/peng-shawn/mermaid-mcp-server. The project has 233 stars and 20 forks, indicating an active community.
mermaid-mcp-server is released under the MIT license, making it free to use and modify according to the license terms.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: