# @vrun-design/openflowkit-mcp

Local-first Model Context Protocol server for OpenFlowKit — pair the live editor or edit .openflow.json files: create/update/read diagrams from DSL, scene ops, icon search, export. No account, no cloud.

- **Type:** MCP server
- **Trust:** 60/100 (B), scored on the package rubric
- **Verification:** community-indexed — nobody has claimed this listing
- **Version:** 0.2.2
- **Author:** io.github.Vrun-design
- **License:** MIT
- **npm:** @vrun-design/openflowkit-mcp
- **Source:** https://github.com/openflowkit/openflowkit
- **Compatible clients:** claude-code, cursor, copilot, gemini (basis: transport)

## Trust

60/100 (B), scored on the package rubric
- Publisher verified: no
- Install scripts: nothing suspicious found
- Prompt-injection scan: not run
- Obfuscation scan: not run
- Evidence age: 0 days

## Security scan

- **Status:** clean
- **Scanned:** 2026-10-22T01:28:04.216Z
- **Version scanned:** 0.2.2
- **CVEs:** none found by OSV at scan time

## Tools

37 declared. Statically extracted from the shipped source — a floor on the surface, not a census.
- `analyze_codebase` — Walk a directory on disk and report detected cloud platform, services,
- `discover_architecture` — Walk a local repo (compose, Dockerfiles, k8s, terraform, package manifests, datastore and
- `drift_report` — Compare an architecture model (inline dsl, a documentId, or else architecture.ofk in path) against a repository.
- `explain_element` — Everything known about one element: the model entry, its relations, repository evidence
- `list_diagram_node_types` — Quick reference for the OpenFlow DSL vocabulary: family names, shape words, edge arrows, and the wireframe controls and screen frames.
- `server_info` — Return the server version and the tools, resources and prompts it serves.
- `get_starter_template` — Return the OpenFlow DSL for a named starter template. Use
- `list_starter_templates` — List built-in OpenFlow starter templates that can be loaded without any AI
- `create_diagram` — Draw a new diagram frame from text, placed right of what the page already holds (or at `at`). One undo step. To change a diagram that exists, use update_diagram
- `update_diagram` — Redraw an existing diagram frame from new text, in place: same frame id and position, one undo step (a C4 workspace redraws every view page it owns). The text r
- `get_diagram`
- `list_diagrams` — Every diagram frame in the document: frameId, page, family, title, and `edited` (the canvas no longer matches its text).
- `get_syntax` — The OpenFlow DSL grammar: the full reference, or one family’s section.
- `search_icons` — Search the shipped icon packs by name (e.g. "lambda", "sql database"). Use the returned provider/slug in DSL `icon:` attributes.
- `find_icons_for` — Concept search ("cache", "queue", "auth") expanded into catalog queries and ranked; the fastest way to pick icon ids for architecture DSL.
- `export` — Export the document, a page, or a selection as SVG, PNG, PDF (print HTML), JSON, or an animation (animated SVG, GIF, MP4, WebM). Returns the file bodies. Raster
- `screenshot` — A PNG image of one diagram frame, or of the whole page, to check your work by eye. Needs a live editor (the user clicks "Connect agent").
- `fit_view` — Point the live editor's camera at one diagram frame, some ids, or (with neither) the whole page. Changes the view only, not the document.
- `get_document` — Nodes and connectors of one page, with ids, labels and geometry, plus `selection`: the ids the user has selected on that page in the live editor ("the box I sel
- `list_pages` — Every page in the document with its shape counts and diagram kind.
- `move` — Move nodes on the canvas, by `delta`, or so the first id lands at `to` (the rest keep their offsets). Pass exactly one of the two. One undo step. A diagram rege
- `style` — Set fill, stroke, stroke width, dash, opacity or text colour on nodes, or move the icon on icon cards (iconPlacement). Pass at least one property. One undo step
- `delete` — Delete nodes (with their children and the connectors attached to them) or connectors, by id. One undo step.
- `add_shape`
- `c4-workspace`
- `auth-flow`
- `three-tier-architecture`
- `request-sequence`
- `order-state`
- `event-pipeline`
- `simple-process`
- `openflow_create` — Create an empty file-mode document in this process.
- `openflow_open` — Load a canonical document from disk into file mode and return its id.
- `openflow_save` — Write a document to disk (svg: true also writes the first page as a .svg beside it). With a paired editor and no documentId, saves what the editor currently sho
- `whoami` — Local-only status: whether an editor is paired, and the documents this server holds.
- `render_diagram` — Draw a diagram from OpenFlow DSL or Mermaid and show it inline. Pass `source` (flowchart, architecture, sequence,
- `validate_openflow_dsl` — Parse and compile OpenFlow DSL — or Mermaid, Structurizr DSL or D2, converted first — and return structured diagnostics

## Install

**Verdict: review** — Installable, but 1 thing to check first: No publisher has proved control of this listing; it is indexed, not vouched for.
**Cautions** (coverage gaps and advisories — never blocking)
- No publisher has proved control of this listing; it is indexed, not vouched for.
**Config** (claude-code):
```json
"{\n  \"mcpServers\": {\n    \"openflowkit\": {\n      \"command\": \"npx\",\n      \"args\": [\n        \"-y\",\n        \"@vrun-design/openflowkit-mcp\"\n      ]\n    }\n  }\n}"
```

## Blast radius

Extensive to critical — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: deletes data; runs on your machine.
- Floor 37, ceiling 61 (tier: unknown)
- `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low.
- This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score.

## Machine-readable views of this entry

- Signed JSON: https://forgeregistry.com/api/v1/packages/%40vrun-design%2Fopenflowkit-mcp
- Install plan: https://forgeregistry.com/api/v1/packages/%40vrun-design%2Fopenflowkit-mcp/install-plan
- Alternatives: https://forgeregistry.com/api/v1/alternatives/%40vrun-design%2Fopenflowkit-mcp
- HTML page: https://forgeregistry.com/registry/%40vrun-design%2Fopenflowkit-mcp
- MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan`

## About this document

Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.