by yctimlin · MCP Server · ★ 2.5k
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is mcp_excalidraw safe to install? View the security audit →
Excalidraw MCP Server & Agent Skill Run a live Excalidraw canvas and control it from AI agents. This repo provides: MCP Server: Connect via Model Context Protocol (Claude Desktop, Cursor, Codex CLI, etc.) Agent Skill: Portable skill for Claude Code, Codex CLI, and other skill-enabled agents Keywords: Excalidraw agent skill, Excalidraw MCP server, AI diagramming, Claude Code skill, Codex CLI skill, Claude Desktop MCP, Cursor MCP, Mermaid to Excalidraw. Demo AI agent creates a complete architecture diagram from a single prompt (4x speed). Watch full video on YouTube Table of Contents Demo What It Is How We Differ from the Official Excalidraw MCP What's New Quick Start (Local) Quick Start (Docker) [Configure MCP Clien
docker run -d -p 3000:3000 --name mcp-excalidraw-canvas ghcr.io/yctimlin/mcp_excalidraw-canvas:latestTaken from the project's README on GitHub. Check the security audit before running it.
No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
| Stars | 2,517 |
| Forks | 283 |
| Language | TypeScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 73.9462915547341/100 |
| Open Issues | 38 |
| Last Updated | 2026-10-09 |
| Created | 2025-03-16 |
| Platforms | claude-code, mcp, node |
| Est. Tokens | ~18k |
These tools work well together with mcp_excalidraw for enhanced workflows:
Explore other popular mcp server tools:
mcp_excalidraw is MCP server and Claude Code skill for Excalidraw — programmatic canvas toolkit to create, edit, and export diagrams via AI agents with real-time canvas sync.. It is categorized as a MCP Server with 2.5k GitHub stars.
mcp_excalidraw is primarily written in TypeScript.
The README on GitHub (github.com/yctimlin/mcp_excalidraw) gives: docker run -d -p 3000:3000 --name mcp-excalidraw-canvas ghcr.io/yctimlin/mcp_excalidraw-canvas:latest. Usage details are in the same README.
mcp_excalidraw is released under the MIT license, making it free to use and modify according to the license terms.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: