markdy-comCAUTION
🎬 Open-source animated architecture diagrams as code. Diagram-native DSL, 17 layout engines, Web Animations API, and MCP server for AI agents.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Turn architecture diagrams into step-by-step explanations of how your system works. Markdy turns text into animated diagrams for system design, documentation, and walkthroughs.
Cache hit: return from Redis. Cache miss: query PostgreSQL and refill the cache. Try this example → • View the source Open in your browser. No installation or AI account required.
Documentation • Examples • VS Code Extension • AI & Agent Guide • Sponsor & Pro Blueprints
36261b42c6cbOBSERVED · 2026-10-07Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add website --env NODE_AUTH_TOKEN=${NODE_AUTH_TOKEN} -- npx -y @markdy/website{
"mcpServers": {
"website": {
"command": "npx",
"args": [
"-y",
"@markdy/website"
],
"env": {
"NODE_AUTH_TOKEN": "${NODE_AUTH_TOKEN}"
}
}
}
}Exposed tools (23)
22 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
01_compact_auto_sized | read | Compact 2-node flow without width/height |
02_dense_horizontal_pipeline | read | Dense 8-rank architecture auto-sized |
03_vertical_flowchart | read | Vertical flowchart with 5 tiers |
04_sequence_flow | read | Multi-turn sequence diagram |
05_explicit_override | read | Diagram with explicit width=1600 height=900 |
audit_architecture | read | Review a MarkdyScript diagram for Well-Architected governance, cycle overlap, and layer violations. |
code | read | The broken or erroneous MarkdyScript code to diagnose and repair. |
create_architecture_diagram | write | Guided workflow to design an animated Markdy architecture diagram following the 4-step mental model. |
debug_markdy_syntax | read | Diagnose, troubleshoot, and heal broken MarkdyScript syntax, typos, undefined node references, or flow cycles. |
diagnose_markdy_syntax | read | Deep diagnostic tool that analyzes MarkdyScript diagram syntax, detects typos in keywords/node kinds/operators/nodes, identifies flow cycle overlaps, unquoted strings, and provides |
explain_architecture | read | Analyzes a MarkdyScript AST to output structural topology summaries, component role counts, and governance health metrics. |
fix_markdy_code | read | Automatically repairs common MarkdyScript syntax errors, typos, missing colons, invalid flow operators, unquoted strings, cycle return edges, and wraps top-level bare cues into a valid scene. |
format | read | Source format (mermaid, docker-compose, k8s, terraform, drawio). |
generate_markdy_prompt | read | Generates optimal LLM system prompts and grammar constraints for building high-quality, hallucination-resistant Markdy architecture animations. |
get_architecture_catalog | read | Returns the catalog of production-grade golden architecture templates (Microservices, RAG, Kafka, Kubernetes Ingress, GitOps CI/CD, OAuth2, HA Multi-Region, Flowcharts) with full runnable MarkdyScript code. |
get_markdy_intellicode | read | Provides zero-dependency intelligent code completion, predictive ghost-text next-line suggestions, and Well-Architected proactive recommendations for MarkdyScript diagrams. |
layout | read | Layout direction (LR, TB, RL, BT). |
source | read | The source code to convert. |
theme | read | Preferred visual theme (paper, editorial, midnight, blueprint, graphite, nebula, sketchy, terminal, ink, doodle). |
transpile_architecture | read | Migrate existing Mermaid, Docker Compose, Kubernetes, or Terraform configurations into animated MarkdyScript. |
transpile_to_markdy | read | Converts external infrastructure or diagram code (Mermaid, Docker Compose, Kubernetes manifests, Terraform state, or Draw.io XML) into animated MarkdyScript scenes. |
userGoal | read | The system or architecture to visualize. |
validate_markdy_code | read | Validates MarkdyScript diagram syntax, detects architectural rule violations, and outputs diagnostic suggestions with AI healing prompts. |
Trust audit
CAUTIONgrade B · trust 87/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (5 observation(s))
- Network
- declared (6 observation(s))
- Shell
- declared (5 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (24)
const url = `http://127.0.0.1:${port}`;const requestUrl = new URL(request.url ?? "/", "http://127.0.0.1");
const url = new URL(req.url ?? "/", "http://127.0.0.1");
.stackblitzrc
.vscodeignore
const rootDir = path.resolve(__dirname, '../../../..');
const rootDir = path.resolve(__dirname, '../../../..');
import { parse, type DiagramAST } from "../../core/src/index.js";const repositoryRoot = fileURLToPath(new URL("../../../", import.meta.url));expect(parseCodeAnchor("foo/../../bar#L1")).toBeNull();markdy # launch a local browser playground on http://127.0.0.1:4242
The harness runs on **`http://127.0.0.1:4325`** (port 4325 is decoupled from Astro's default port 4321 to avoid collisions with documentation previews). It serves canonical test fixtures, live theme s
const binaryStr = atob(payload);
astro, @markdy/astro, @markdy/core, @markdy/renderer-dom
@types/pixelmatch, @types/pngjs, chrome-launcher, lighthouse, pixelmatch, pngjs, puppeteer-core, tsx
astro, typescript
mdast-util-from-markdown, unist-util-visit, @types/node, tsup, typescript, vitest
@types/node, tsup, tsx, typescript, vitest
You are a Senior Distributed Systems Architect and Markdy expert.
docs/images/markdy-cache-aside.gif
docs/images/mascot/male-markdy-ads.png
docs/images/mascot/male-markdy.png
docs/images/mascot/markdy-com.png
docs/images/mascot/markdy.png
Gates applied: no_behavioural_pass.
36261b42c6cbfull audit observations/trust-audit/mcp-server/hoangyell__markdy-com.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 36261b42c6cb | CAUTION | B | 87 | first audit |
Questions
What is the markdy-com MCP server?
🎬 Open-source animated architecture diagrams as code. Diagram-native DSL, 17 layout engines, Web Animations API, and MCP server for AI agents.
What tools does markdy-com expose?
23 in total: 22 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is markdy-com safe to connect to an agent?
With care. The audit graded it B (87/100) and found 24 things worth knowing before you trust this server, listed below with the exact line each was found on.
What credentials does markdy-com need?
It reads NODE_AUTH_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does markdy-com run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as @markdy/website.
How current is this page?
The grade is for one exact copy of the source (36261b42c6cb), read on 2026-10-07. The repository is watched and re-audited when it changes.