Azure DiagramBLOCK
MCP server that turns natural-language prompts into Microsoft Azure architecture diagrams (PNG) using Python Diagrams + Graphviz.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](#license) []() [](https://diagrams.mingrammer.com/)
This tool lets you create Microsoft Azure architecture diagrams automatically. You write a short description (using GitHub Copilot in Visual Studio Code to generate it), and the server will turn it into a diagram image. It’s perfect for anyone who wants to quickly draw cloud diagrams without dragging shapes around.
What's included
This MCP server seamlessly creates diagrams using the Python diagrams package DSL. This server allows you to generate Microsoft Azure diagrams, sequence diagrams, flow diagrams, and class diagrams using Python code.
What it does
- Turn a short plain-English sentence into a clean Azure architecture diagram (PNG).
- Uses the Python
diagramspackage and Azure icons behind the scenes. - Saves images into the
diagrams/folder in this project.
Features
The Diagrams MCP Server provides the following capabilities:
- Generate Diagrams: Create Azure diagrams using Python code
- Multiple Diagram Types: Support for Azure architecture, sequence diagrams, flow charts, class diagrams, and more
- Customization: Customize diagram appearance, layout, and styling
What you’ll need
- Visual Studio Code installed → Download here
- GitHub Copilot → Enable here
- Python → we’ll install this in the steps below
- GraphViz (a small program that actually draws the diagrams) → [Download here](https://graphviz.org/downl
d5aca3f612beOBSERVED · 2026-10-09Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_diagram_examples | read | Get example code for different types of diagrams (Azure only). |
Trust audit
BLOCKgrade D · trust 63/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- UNDECLARED (1 observation(s))
- Network
- declared (2 observation(s))
- Shell
- declared (7 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (10)
'B506': 'Use of yaml.load() can result in arbitrary code execution. Use yaml.safe_load() instead.',
exec(code, namespace)
('exec(', 'Code execution detected'),('eval(', 'Code evaluation detected'),'exec(','eval(','B501': 'Request with verify=False disables SSL certificate verification and is not secure.',
service_module = importlib.import_module(module_path)
&& rm -rf /var/lib/apt/lists/*
diagrams, mcp, pydantic, bandit, setuptools, starlette, urllib3
Gates applied: no_behavioural_pass.
d5aca3f612befull audit observations/trust-audit/mcp-server/dminkovski__azure-diagram.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-09 | d5aca3f612be | BLOCK | D | 63 | first audit |
Questions
What is the Azure Diagram MCP server?
MCP server that turns natural-language prompts into Microsoft Azure architecture diagrams (PNG) using Python Diagrams + Graphviz.
What tools does Azure Diagram expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Azure Diagram safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (63/100) and found 7 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does Azure Diagram need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (d5aca3f612be), read on 2026-10-09. The repository is watched and re-audited when it changes.