Excalidraw MCP server icon

Excalidraw

by Excalidraw

HIPAA CompliantSOC2 ReadyISO 27001 Ready
Productivity5 toolsNo Auth Required

Draw hand-drawn diagrams on a live Excalidraw canvas in the chat, edit them by hand, and export a shareable excalidraw.com link. 5 tools, no sign-in.

Verified connector

Listed by Anthropic as a partner connector in its Connectors Directory.

Connection checked by Agentman on .

Anthropic states this reflects the level of review a connector received, not a security audit.

Connect Excalidraw via MCP

https://mcp.excalidraw.com/mcp

Works in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.

Use in Agentman

Connect Excalidraw once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.

Open in Agentman Studio

Excalidraw Tools & Capabilities (5)

read_meRead-only

Returns the Excalidraw element format reference with color palettes, examples, and tips. Call this BEFORE using create_view for the first time.

create_viewRead-only

Renders a hand-drawn diagram using Excalidraw elements. Elements stream in one by one with draw-on animations. Call read_me first to learn the element format.

export_to_excalidrawNot annotated

Upload diagram to excalidraw.com and return shareable URL.

save_checkpointNot annotated

Update checkpoint with user-edited state.

read_checkpointNot annotated

Read checkpoint state for restore.

Read from the server on 2026-08-18, including each tool's own safety annotations.

Limits

  • Three of the five tools carry no safety annotations at all. export_to_excalidraw, save_checkpoint and read_checkpoint ship an empty annotations object, so the vendor asserted nothing about them. That is a gap in the metadata, not a finding about the tools.
  • Checkpoints are not private storage. The store code keys them on the identifier alone and we found no per-user scoping in it. Identifiers minted by the server are unguessable, but save_checkpoint accepts any caller-supplied identifier.
  • Checkpoints do not last. The file and memory stores keep only the 100 most recent; the Redis store expires entries after thirty days. A drawing you want to keep should be exported.
  • Export sends your diagram to a third party. export_to_excalidraw posts to json.excalidraw.com, and the returned link carries the decryption key in its fragment. Anyone with the full link can open the drawing.
  • 5 MB input ceiling. The handlers reject an elements, json or checkpoint data string larger than 5 MB, and create_view's error text suggests building up through checkpoints instead.
  • No canvas without an MCP Apps client. The drawing is the product; without the extension you get text.
  • Claude only, per the listing. Anthropic's directory records works_with as Claude alone for this entry, even though the repository's README names other MCP Apps clients.
  • No prompts. The server's initialize capability block names only tools and resources, and prompts/list answers -32601 "Method not found" rather than an empty list.
  • The README's own links point at the repository's former home. Its issue link and build instructions name antonpk1/excalidraw-mcp-app, which now redirects to excalidraw/excalidraw-mcp. The code is the same; the links are stale. Anthropic's directory publishes the current location.
  • MIT is stated, not filed. The README and manifest.json both say MIT, but there is no LICENSE file in the repository and GitHub detects no licence for it.
  • No tool deletes a drawing. Removal happens only as a delete element merged during a create_view call, so there is no way to purge a checkpoint through the connector.

Frequently asked questions

No. We opened an anonymous handshake against the endpoint on 2026-08-18 and the server returned all five tool definitions with no credential. The server's own code registers no authentication middleware on the request path, and its deployment config sets a wildcard CORS origin. Nothing on the connector reads an Excalidraw account, so the paid Excalidraw Plus product is not involved.

Because it draws into your chat rather than writing to an Excalidraw account. Reading the handler in the server source, create_view parses the elements string, renders it in the widget, and saves a checkpoint the same conversation can restore. It touches no Excalidraw document, no file and no account, so the vendor annotated it readOnlyHint true. It does write server-side checkpoint state.

In server-side storage keyed only by the checkpoint identifier. The code offers three stores: a temp-directory file store, an in-process memory map, and Upstash Redis with a thirty-day expiry. In every one, read_checkpoint looks up the identifier you pass with no per-user scoping in the code we read. Identifiers are 18 random hex characters, so guessing one is impractical.

Yes, and that is the point of export_to_excalidraw. Reading the handler, it compresses your diagram, encrypts it with a freshly generated AES-GCM key, uploads the ciphertext to json.excalidraw.com, and returns a link of the form excalidraw.com/#json=id,key. The key sits in the URL fragment, so anyone holding the whole link can open the drawing.

The open-source editor. The connector renders the open-source Excalidraw canvas inside the chat widget, and its export path posts to the free excalidraw.com backend. Excalidraw Plus is a separate paid product, and nothing in the server source authenticates against it or reads a Plus workspace. We publish no price because the connector does not depend on one.

Three of the five: export_to_excalidraw, save_checkpoint and read_checkpoint ship an empty annotations object, so the vendor never stated a posture either way. Treat them as unknown rather than safe. Reading their handlers shows the first uploads to excalidraw.com, the second overwrites a checkpoint by identifier, and the third reads one back.

For the drawing, yes. The server registers one HTML resource at ui://excalidraw/mcp-app.html and points create_view at it, so a client implementing the MCP Apps extension renders an interactive canvas. Anthropic's directory lists the connector as working with Claude only. In a client without the extension the tools still return text, but no diagram appears.

Sources

  • Live initialize, tools/list, prompts/list and resources/list handshake against https://mcp.excalidraw.com/mcp — 2026-08-18. Anonymous, no credential sent, and no tool was called. initialize declared tools and resources only; prompts/list returned -32601; resources/list returned one widget resource. · retrieved 2026-08-18
  • Excalidraw — excalidraw-mcp repository README — https://github.com/excalidraw/excalidraw-mcp (fetched 2026-08-18) · retrieved 2026-08-18
  • Excalidraw — MCP server tool handlers, src/server.ts in https://github.com/excalidraw/excalidraw-mcp (fetched 2026-08-18) · retrieved 2026-08-18
  • Excalidraw — checkpoint stores, src/checkpoint-store.ts in https://github.com/excalidraw/excalidraw-mcp (fetched 2026-08-18) · retrieved 2026-08-18
  • Excalidraw — extension manifest and deployment config, manifest.json, vercel.json and api/mcp.ts in https://github.com/excalidraw/excalidraw-mcp (fetched 2026-08-18) · retrieved 2026-08-18
  • Excalidraw — Privacy Policy — https://plus.excalidraw.com/privacy-policy (fetched 2026-08-18) · retrieved 2026-08-18
  • GitHub repositories API for excalidraw/excalidraw-mcp — https://api.github.com/repos/excalidraw/excalidraw-mcp (fetched 2026-08-18). Used to confirm the canonical repository name and that GitHub detects no licence file. https://raw.githubusercontent.com/excalidraw/excalidraw-mcp/main/LICENSE returns 404. · retrieved 2026-08-18
  • Anthropic connector directory — https://claude.ai/directory/934bf25a-e0d1-43ff-a488-b2c5567ec956 (snapshot 2026-08-16) · retrieved 2026-08-16

Server Info

Category
Productivity
Developer
Excalidraw
Tools
5
Domain
mcp.excalidraw.com

Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.

Ready to connect Excalidraw?

Connect Excalidraw once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.