Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "endiagram-mcp": {
      "type": "http",
      "url": "https://api.endiagram.com/mcp"
    }
  }
}

claude mcp add --transport http endiagram-mcp https://api.endiagram.com/mcp

[mcp_servers.endiagram-mcp]
url = "https://api.endiagram.com/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "endiagram-mcp": {
      "type": "remote",
      "url": "https://api.endiagram.com/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "endiagram-mcp": {
      "type": "http",
      "url": "https://api.endiagram.com/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=endiagram-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYXBpLmVuZGlhZ3JhbS5jb20vbWNwIn0%3D"
}

{
  "servers": {
    "endiagram-mcp": {
      "type": "http",
      "url": "https://api.endiagram.com/mcp"
    }
  }
}

{
  "mcpServers": {
    "endiagram-mcp": {
      "httpUrl": "https://api.endiagram.com/mcp"
    }
  }
}

extensions:
  "endiagram-mcp":
    enabled: true
    name: "endiagram-mcp"
    type: streamable_http
    uri: "https://api.endiagram.com/mcp"
    timeout: 300

Quality 64 / 100needs work

protocoln/a · weight 25

n/a
protocol.modern, protocol.stateless, protocol.transport, protocol.list_ttlno remote answered a protocol handshake (not probed yet, unreachable, or local-only)

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene71 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
fail
tools.annotationsno tool declares readOnlyHint or destructiveHint, so clients cannot tell safe calls from risky ones
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: structure (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); invariant (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); live (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); …
pass
tools.token_costabout 2,175 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stabilityn/a · weight 15

n/a
stability.changes, stability.rug_pulltool history not recorded yet

dependencies50 · weight 15

warn
deps.known_vulns1 advisory of lower severity or without a published fix: GHSA-5r4p-p66f-jhc7 in [email protected] (indirect, fixed in 4.13.11)
fail
deps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 3 known advisories (GHSA-22jm-h49p-29qw, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.32.0 or later
pass
deps.resolvable@endiagram/[email protected] resolved: 98 packages

7 tools, about 2,175 tokens to load them all · checked 2026-10-20 20:14 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 78 / 100

multi-version-spam

provenance80

liveness100

freshness45

hygiene75

+repository +namespace-matches-repo +reachable +uptime-99% -stale-182d -multi-version-spam(46)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

@endiagram/[email protected] npm97 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-20

advisory	severity	package	fixed in
GHSA-22jm-h49p-29qwMCP TypeScript SDK: Experimental tasks were not tied to the session that created them	high	`@modelcontextprotocol/[email protected]`MCP SDK, direct	fixed in `1.32.0`
GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server	high	`@modelcontextprotocol/[email protected]`MCP SDK, direct	fixed in `1.31.0`
GHSA-6prh-2h8m-c8cwMCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies	moderate	`@modelcontextprotocol/[email protected]`MCP SDK, direct	fixed in `1.32.0`
GHSA-5r4p-p66f-jhc7Hono: `serveStatic` decodes the request path a second time, leading to bypass of middleware on static paths	moderate	`[email protected]`indirect	fixed in `4.13.11`

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://api.endiagram.com/mcp` streamable-http	unknown	yes	99%	179 ms	–	2026-10-20

package	registry	version	runtime	secrets
`@endiagram/mcp`	npm	0.3.16	–

Tools (7)

`compose`	How do parts combine, or how does a part stand alone? Merge mode (source_a + source_b + links): declare which entities in A are the same as entities in B; the combined graph is wired via string-equality of shared names. Extract mode (source + subsystem): pull a named subsystem out as standalone EN with boundary inputs/outputs, actors, and locations. Valid subsystem names come from structure's `subsystems` field — call structure on the source first to discover them. See the server instructions for EN language syntax.
`equivalent`	Are two systems the same, or what changes if I change this one? Compare mode (source_a + source_b): structural differences, edit distance, spectral equivalence. isCospectral=true means identical graph structure up to relabeling — topologically the same despite different names, actors, or locations. Evolve mode (source + patch): dry-run a change, shows diff plus new/lost bridge nodes. Patch has three directive types — plain EN statement adds an action; a line starting with `-` (and not containing `do:`) removes the named action; a statement whose action name matches an existing one replaces the original. See the server instructions for EN language syntax.
`invariant`	What's always true — automatic findings and on-demand checks. Automatic outputs: conservationLaws (weighted entity sums constant across executions), sustainableCycles (T-invariants — action sequences returning to start state), depletableSets (entity groups whose simultaneous depletion is irreversible), behavioral.deficiency (0 means structure fully determines dynamics), behavioral.isReversible, behavioral.hasUniqueEquilibrium. On-demand via `rules`: encode domain-specific claims and verify them against the graph — this is how to check things the topology alone can't see (precedence, coverage, centrality bounds, resilience). See the rules parameter for supported sentence shapes.
`live`	Can it deadlock? Can entities overflow? isStructurallyLive means every siphon contains a trap — no structural deadlock possible. uncoveredSiphons are entity groups that can drain permanently, with the actors and locations affected. isStructurallyBounded means no entity can accumulate without limit. unboundedCycles are action sequences that could cause overflow. See the server instructions for EN language syntax.
`reachable`	Can X reach Y? Follows directed data flow first; falls back to undirected. `from` and `to` accept entity names or action names (resolved against the program). Path shows each step with actor and location. locationCrossings counts boundary transitions. defense_nodes checks if guards cover all paths; coverage.fullCoverage=false means unguarded routes exist. See the server instructions for EN language syntax.
`render`	SVG or PNG diagram. Only call when user explicitly asks to visualize. The rendered image is delivered to the user, not injected into the model's context. See the server instructions for EN language syntax.
`structure`	What is this system? Returns shape (Pipeline, Fork-Join, DAG, Star, Cycle, Tree, Complete, etc.), stages with roles, bridge nodes, cycles, parallelism, critical path, dominator tree, min-cuts, subsystems, interface nodes, actors (who does what, workload entropy), locations (where work happens, boundary crossings). Levers: node=X returns per-node centrality (betweenness, closeness, eigenvector) for a specific node. detect_findings=true flags named structural risks — unguarded-sink (sinks reachable via only pipeline actions, no JOIN/HUB gating), single-cut-path (source-sink pairs with only one vertex-disjoint path), multi-cut-path (paths with redundant defense, min-cut > 1). See server instructions for EN language syntax.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.dushyant30suthar/endiagram-mcp",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://api.endiagram.com/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.3.16",
  "packages": [
    {
      "version": "0.3.16",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@endiagram/mcp",
      "registryType": "npm"
    }
  ],
  "repository": {
    "url": "https://github.com/dushyant30suthar/endiagram-mcp",
    "source": "github"
  },
  "description": "EN Diagram — structural verification for concurrent systems. Pure math, no AI."
}