drawio-mcp is an official Model Context Protocol server that lets AI assistants create and open editable diagrams in the draw.io editor. It supports diagram workflows ranging from inline chat previews to browser editing and generated draw.io, PNG, SVG, or PDF files. The catalogue entries provide its MCP servers, assistant integrations, project instructions, and skill.
Borrowing it
Nothing to install: this file belongs to jgraph/drawio-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/jgraph/drawio-mcp/main/AGENTS.mdgit clone --depth 1 https://github.com/jgraph/drawio-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/jgraph/drawio-mcp/agents-md)<a href="https://agentmods.dev/instructions/jgraph/drawio-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/jgraph/drawio-mcp/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/instructions/jgraph/drawio-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/jgraph/drawio-mcp/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.07554 | $0.07554 |
| Opus 5.5 | $0.03022 | $0.03022 |
| Sonnet 5.5 | $0.01511 | $0.01511 |
| Haiku 4.5 | $0.00755 | $0.00755 |
Grade A, and why
drawio-mcp AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 216 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Draw.io MCP Server
The official draw.io MCP (Model Context Protocol) server that enables LLMs to open and create diagrams in the draw.io editor.
Repository Structure
.claude-plugin/marketplace.json— Claude Code plugin marketplace manifest. Lists this repo's plugins (currently justdrawio, sourced from./plugins/claude-code); plugin metadata is inherited from each plugin's ownplugin.json. Users install with/plugin marketplace add jgraph/drawio-mcpthen/plugin install drawio@drawio..agents/plugins/marketplace.json— Codex CLI plugin marketplace manifest (Codex's format:sourceobject +policy+category). Lists thedrawioplugin sourced from./plugins/codex/drawio; metadata is inherited from that plugin's own.codex-plugin/plugin.json. Users install withcodex plugin marketplace add jgraph/drawio-mcpthencodex plugin add drawio@drawio..github/plugin/marketplace.json— GitHub Copilot CLI plugin marketplace manifest (same schema family as Claude's, but plugin metadata is inlined in theplugins[]entry rather than inherited — keep it in sync withplugins/copilot/plugin.json). Lists thedrawioplugin sourced from./plugins/copilot. Users install withcopilot plugin marketplace add jgraph/drawio-mcpthencopilot plugin install drawio@drawio. Copilot CLI checks this path first and falls back to.claude-plugin/marketplace.json..cursor-plugin/marketplace.json— Cursor plugin marketplace manifest (Cursor's format:owner+plugins[]entries whosesourceis the plugin directory). Lists thedrawioplugin sourced fromplugins/cursor; metadata comes from that plugin's own.cursor-plugin/plugin.json. Users install from the Cursor Marketplace (every version is reviewed by Cursor, submitted at cursor.com/marketplace/publish); Teams/Enterprise admins can import this repo as a team marketplace.glama.json— Ownership file for the Glama MCP directory: lists the GitHub users (maintainers) who may claim the listing of this org-hosted repo, which a GitHub sign-in alone can't. After editing it, run Glama's Claim flow again. We make no Glama releases: in October 2026 the listing had views but no use and sent no traffic.shared/— Single source of truth shared by every delivery mechanism: the LLM-facing references (xml-reference.md, its condensedxml-essentials.md,mermaid-reference.md,style-reference.md) and the shared logic both MCP servers run (shape-search.js,icon-search.js,mermaid-elk.js, the repairs for common LLM slips in XMLrepair-xml.js, plus the headless mxGraph stackmx-model.js/mx-xml.js/normalize-model.js, andlabel-perimeter.js, which marks labels outside the shape so edges end at them).mcp-app-server/— MCP App server (renders diagrams inline in chat via iframe). Hosted athttps://mcp.draw.io/mcp. Can also be self-hosted via Node.js, thejgraph/drawio-mcpDocker Hub image (built and pushed by.github/workflows/publish-app-server-image.yml; Hub page text inmcp-app-server/DOCKER_HUB.md) or Cloudflare Workers. Itsserver.jsonis the MCP Community Registry manifest (io.draw/mcp— feeds github.com/mcp and VS Code's MCP browser); publish runbook in its README.mcp-tool-server/— Original MCP tool server (stdio-based, opens browser). Published as@drawio/mcpon npm.project-instructions/— Claude Project instructions (no MCP required, no install).plugins/— Assistant-side plugins grouped by host, one subdirectory per AI assistant.plugins/claude-code/— Claude Code plugin: ships thedrawioskill (generates native.drawiofiles, authored as Mermaid — converted + laid out by the desktop CLI — or as XML directly with optional ELK--layout; exports to PNG/SVG/PDF, or opens as a browser URL viaapp.diagrams.net). For shape-library and brand icons the skill runs its bundledscripts/find-shapes.js, which searches thesearch_shapesindex (from jsDelivr) and the draw.io icon service. Mermaid conversion, ELK layout, and image export need draw.io Desktop; plain XML.drawio/urloutput does not. Installable via the repo-root marketplace orclaude --plugin-dir ./plugins/claude-code. Since 1.2.3 it also bundles the hosted MCP App Server (.mcp.json,https://mcp.draw.io/mcp), so its Claude directory listing can be paired with the draw.io connector listing and the skill can defer tocreate_diagramwhere Claude shows diagrams inline (Claude.ai); in Claude Code's terminal the skill still writes the files. The Codex and Copilot ports stay skill-only.plugins/codex/drawio/— Codex CLI plugin: the Codex port of the Claude Code plugin, shipping the samedrawioskill.skills/drawio/(SKILL.mdandscripts/) is byte-identical to the Claude plugin's copy (Codex uses the same/drawio:drawioinvocation and fetches the same shared references from GitHub). Differs only in host wrapping: a.codex-plugin/plugin.jsonmanifest with aninterfaceblock (official draw.io SVG logo,brandColor, default prompts). Nested undercodex/because Codex requires the plugin root folder name to equalplugin.json"name"(drawio). No MCP required.plugins/copilot/— GitHub Copilot CLI plugin: the Copilot port of the Claude Code plugin, shipping the samedrawioskill.skills/drawio/(SKILL.mdandscripts/) is byte-identical to the Claude plugin's copy (the in-skill/drawio:drawioexample lines are model-facing; Copilot's user-facing command is plain/drawiosince Copilot doesn't prefix plugin skills). Differs only in host wrapping: a rootplugin.jsonmanifest (Copilot's format,skillsdirectory list); no folder-name rule, socopilot/is itself the plugin root. The same skill folder also works in other Copilot surfaces (VS Code agent mode, coding agent, code review) when copied to a repo's.github/skills/. No MCP required.plugins/cursor/— Cursor plugin: the samedrawioskill (skills/drawio/,SKILL.mdandscripts/, byte-identical to the Claude plugin's copy) plus anmcp.jsonthat adds the hosted MCP App Server (https://mcp.draw.io/mcp), because Cursor's Agent chat (≥ 2.6) renders MCP Apps inline; the skill's own instructions already defer tocreate_diagramin such a chat and keep files and exports for the skill. Manifest.cursor-plugin/plugin.json(onlynameis required;logois a repo-relative path, here the draw.io SVG inassets/). No folder-name rule, socursor/is itself the plugin root.plugins/antigravity/— Antigravity plugin: the samedrawioskill (skills/drawio/,SKILL.mdandscripts/, byte-identical to the Claude plugin's copy) with a minimal rootplugin.json(Antigravity's schema allows onlyname,description,$schema; components are found by folder). Skill-only: Antigravity's converter turns a Claude plugin's HTTP MCP server into an empty command, and a terminal can only get links from the hosted server, so the README showsagy mcp addseparately. No marketplace for other publishers: users install from the directory URL (agy plugin install https://github.com/jgraph/drawio-mcp/tree/main/plugins/antigravity); the repository URL installs every plugin in the repo under the same name. Porting notes in itsDEVELOPING.md.
shape-search/— Shape search index generator. Loads draw.io'sapp.min.jsvia jsdom to extract all shape styles and tags intosearch-index.json, which powers thesearch_shapesMCP tool and the skill'sscripts/find-shapes.js(it readstitle,tags,w,handstylefrom the@maincopy on jsDelivr, so renaming a field breaks every installed skill). Re-run after updatingdrawio-devto pick up new or changed shapes.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed · +2 lines · +147 tokens per session a815080a8f8a
- 3d ago Changed · +29 tokens per session 83f76bf86efb
- 5d ago Changed · -1 lines · +116 tokens per session 118dc7db0312
- 6d ago Changed · +16 lines · +535 tokens per session 6b4c313cecec
- 10d ago Changed · +118 tokens per session d30c7791bf70
- 15d ago Changed · +64 tokens per session 0a02f9467a5f
- 18d ago Changed · +1 lines · +182 tokens per session 05e7660c3ed5
- 19d ago Changed · +1 lines · +358 tokens per session 65e4196dbfb5
- 20d ago Changed · +4 lines · +547 tokens per session ebdcedfc3847
- 21d ago First seen · 193 lines · 5,458 tokens per session scan A e108908c06a0
drawio-mcp AGENTS.md is an instructions file published in the GitHub repository jgraph/drawio-mcp (5,779 stars, last pushed yesterday), licensed Apache-2.0. It adds 7,554 tokens to every session, about $0.0302 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-25.
drawio-mcp AGENTS.md compared with instructions from other repositories
| Mod | Type | Stars | Last push | Licence | Scan | Tokens | Works with |
|---|---|---|---|---|---|---|---|
| drawio-mcp AGENTS.mdjgraph/drawio-mcp | Instructions file | 5.8k | yesterday | Apache-2.0 | A | 7,554 | Claude Code, Codex, OpenCode |
| vscode buildNext.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 9,719 | GitHub Copilot |
| next.js AGENTS.mdvercel/next.js | Instructions file | 143k | today | MIT | A | 7,461 | Codex, OpenCode |
| langchain AGENTS.mdlangchain-ai/langchain | Instructions file | 149k | yesterday | MIT | A | 4,680 | Codex, OpenCode |
| vscode oss-third-party-notices.instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 5,516 | GitHub Copilot |
| vscode copilot-instructions.mdmicrosoft/vscode | Instructions file | 195k | yesterday | MIT | A | 3,093 | GitHub Copilot |
| deepseek-harness AGENTS.mddeepseek-ai/deepseek-harness | Instructions file | 274k | 2d ago | MIT | A | 4,313 | Codex, OpenCode |