Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

io.github.den-indance/network-diagram-mcp

NPM · @DEN.DANCE/NETWORK-DIAGRAM-MCP · SCANNED AUG 4

Network topology editor — Claude builds diagrams via MCP. nmap/CSV import, one-click SSH.

+44 this week 68 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security83
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known medium-severity CVE affects hono 4.12.33, reached via @modelcontextprotocol/sdk > hono. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
Schema Quality & AI Usability71
  • AI-judged instruction clarity (good).Pass
  • Tool/resource definitions use about 2805 tokens (~63/item across 44 items; 44 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management30
  • Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @den.dance/network-diagram-mcp

# add to Claude Code
claude mcp add den-indance-network-diagram-mcp -- npx -y @den.dance/network-diagram-mcp
# add to Codex CLI
codex mcp add den-indance-network-diagram-mcp -- npx -y @den.dance/network-diagram-mcp
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "den-indance-network-diagram-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@den.dance/network-diagram-mcp"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add den-indance-network-diagram-mcp --command npx --arg -y --arg @den.dance/network-diagram-mcp
# ~/.hermes/config.yaml
mcp_servers:
  den-indance-network-diagram-mcp:
    command: "npx"
    args: ["-y", "@den.dance/network-diagram-mcp"]
// mcp.json
{
  "mcpServers": {
    "den-indance-network-diagram-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@den.dance/network-diagram-mcp"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Aug 26 +4
    • CVE-2026-69207 affects this package: medium security
    • Known CVEs: partial → fail security
    • Stability: unverified → 0.30 functional
  • 2 Aug 26 +51
    • Install scripts: pass → unverified security
    • Provenance: fail → unverified security
    • Known CVEs: unverified → partial security
    • Malware scan: unverified → pass security
    • Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window). security
    • Security disclosure: unverified → fail functional
    • License: pass → unverified functional
    • Maintenance: pass → unverified functional
    • Dependency health: unverified → partial functional
    • Schema quality: unverified → good functional
    • MCP protocol: unverified → pass functional
    • Tool coverage: unverified → 100 functional
    • Licence: MIT functional
  • 1 Aug 26 −8
    • Provenance: unverified → fail security
    • Install scripts: unverified → pass security
    • Tool coverage: 100 → unverified functional
    • Security disclosure: fail → unverified functional
    • Maintenance: unverified → pass functional
    • License: unverified → pass functional
    • Licence: MIT functional
  • 31 Jul 26 −7
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 30 Jul 26 +4
    • Malware scan: pass → unverified security
    • Tool coverage: unverified → 100 functional
  • 28 Jul 26 −22
    • Tool coverage: 100 → unverified functional
    • First check of Schema quality: unverified functional
  • 27 Jul 26 46

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Aug 2026 · Analysed npm/@den.dance/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Vulnerabilities 1 finding
ID CVE Severity Vector Fix available
GHSA-8j4g-w8fx-2239 CVE-2026-69207 medium CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L yes
Dependencies 95 packages

95 packages in the resolved dependency tree · 95 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 44 exposed · ~2,805 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
map_add_connection ~73

Add a manual connection between two nodes. Returns the new connection id.

NameTypeReqDescription
colorstringOptional line color, e.g. #ef4444
from_idstringyesSource node id
labelstringOptional connection label
to_idstringyesTarget node id

No output schema declared.

No examples provided.

map_add_node ~76

Add a new node to the map. Returns the new node id.

NameTypeReqDescription
ipstringIP address (optional)
namestringyesDisplay name
typestringyesNode type
xnumberCanvas X position (optional)
ynumberCanvas Y position (optional)

No output schema declared.

No examples provided.

map_add_sticky ~77

Add a sticky note to the map. Returns the new sticky id.

NameTypeReqDescription
colorstringHex color, e.g. #fbbf24 (optional)
textstringyesNote text
xnumberCanvas X position (optional)
ynumberCanvas Y position (optional)

No output schema declared.

No examples provided.

map_arrange ~30

Auto-arrange all nodes in a grid or circle layout.

NameTypeReqDescription
layoutstringyesLayout type

No output schema declared.

No examples provided.

map_bulk_add_connections ~35

Add multiple connections in a single call. Returns array of created ids.

NameTypeReqDescription
connectionsarrayyesArray of connection objects

No output schema declared.

No examples provided.

map_bulk_add_nodes ~63

Add multiple nodes in a single call. Each node accepts the same fields as map_add_node plus all type-specific fields (ports, dockerServices, domains, parentServer, etc.). Returns array of created ids.

NameTypeReqDescription
nodesarrayyesArray of node objects

No output schema declared.

No examples provided.

map_clear ~35

Remove all nodes, connections and stickies from the current sheet.

NameTypeReqDescription
confirmbooleanyesMust be true to confirm destructive action

No output schema declared.

No examples provided.

map_create_sheet ~40

Create a new empty sheet and switch to it. Returns new sheet id.

NameTypeReqDescription
namestringSheet name (optional, auto-generated if omitted)

No output schema declared.

No examples provided.

map_delete_connection ~24

Delete a connection by id.

NameTypeReqDescription
idstringyesConnection id

No output schema declared.

No examples provided.

map_delete_node ~26

Delete a node and all its connections.

NameTypeReqDescription
idstringyesNode id

No output schema declared.

No examples provided.

map_delete_sheet ~43

Delete a sheet. Cannot delete the last remaining sheet.

NameTypeReqDescription
confirmbooleanyesMust be true to confirm destructive action
idstringyesSheet id

No output schema declared.

No examples provided.

map_delete_sticky ~27

Delete a sticky note by id.

NameTypeReqDescription
idstringyesSticky note id

No output schema declared.

No examples provided.

map_duplicate_node ~90

Clone a node with all its properties (ports, services, domains, etc.). Returns new node id.

NameTypeReqDescription
idstringyesSource node id
namestringOverride name for the clone (default: same as original)
offset_xnumberX offset from original (default 40)
offset_ynumberY offset from original (default 40)

No output schema declared.

No examples provided.

map_export ~95

Export current or specified sheet as JSON / PNG / PDF. PNG and PDF return base64-encoded blobs with mimeType — the client decodes and saves to a file. Server raises the response timeout to 30s for PNG/PDF since large maps can take several seconds to render.

NameTypeReqDescription
formatstringOutput format (default: json)
sheet_idstringSheet id (omit for the active sheet)

No output schema declared.

No examples provided.

map_export_sheet ~38

Export sheet data as JSON including auto-connections. Defaults to active sheet.

NameTypeReqDescription
idstringSheet id (omit for active sheet)

No output schema declared.

No examples provided.

map_find_node ~112

Search nodes by name, IP, type, or free-text query. Returns id, name, type, ip, x, y for each match. Use this to locate a node before updating it.

NameTypeReqDescription
ipstringExact match on primary IP or any secondary IP
namestringSubstring match on node name (case-insensitive)
textstringFree-text search across name, IPs, and domain records
typestringFilter by node type

No output schema declared.

No examples provided.

map_get_all_connections ~53

Return all connections including auto-generated ones (DNS→server, project→server, service→node). Auto connections have auto:true flag. Use this instead of map_get_state.connections when you need the full topology picture.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

map_get_nodes_by_type ~65

Return all nodes of a given type with FULL field data (ports, dockerServices, domains, ips, notes, parentServer, etc.). For stripped projection or multi-criteria filtering use map_find_node instead.

NameTypeReqDescription
typestringyesNode type to filter by

No output schema declared.

No examples provided.

map_get_notes ~16

Return the sheet-level notes text.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

map_get_selection ~51

Return currently selected node/sticky ids and connection id. Result shape: { nodeIds: string[], nodeId: string|null (= nodeIds[0], legacy single-id), connId: string|null }.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

map_get_settings ~31

Return current app settings (sshMode, dblClickAction, perfMode, showGrid, showZoomSlider).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

map_get_sheet_data ~43

Return nodes/connections/stickies/notes for a specific sheet (defaults to active sheet).

NameTypeReqDescription
idstringSheet id (omit for active sheet)

No output schema declared.

No examples provided.

map_get_state ~58

Return the current map state: all nodes, manual connections, stickies and notes. NOTE: only manual connections are included — use map_get_all_connections to also get auto-generated connections (DNS→server, project→server, service→node).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

map_get_view ~18

Return current canvas zoom level and pan offset.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

map_import_csv ~174

Import nodes from CSV. Auto-detects columns from the header row (name/ip/type/ports/notes — case-insensitive, aliases like hostname/description/host_ip accepted). Ports field accepts 'port/protocol,port/protocol' (e.g. '22/tcp,80/tcp') or bare port numbers (default tcp). Nodes laid out in a 6-column grid. Returns {count, ids}.

NameTypeReqDescription
columnsobjectOptional explicit column mapping: {name: 0, ip: 1, type: 2, ports: 3, notes: 4} — overrides auto-detect; missing keys default to -1
csvstringyesCSV content with header row (RFC 4180-lite: quoted fields, escaped "", UTF-8 BOM tolerated)

No output schema declared.

No examples provided.

map_import_nmap ~146

Parse nmap scan output (XML from `nmap -oX`) and create nodes with their open ports. Auto-infers node type from OS fingerprint + port profile (router/switch/firewall/server/printer/etc.). Provide either raw `xml` OR pre-parsed `hosts[]` — `hosts` takes priority when both are given. Nodes are auto-arranged in a grid. Returns {count, ids}.

NameTypeReqDescription
hostsarrayAlternative: pre-parsed hosts [{ip, hostnames[], ports[{portid, protocol, service}], osMatch}]
xmlstringRaw nmap XML output (use `nmap -oX -`)

No output schema declared.

No examples provided.

map_import_sheet ~52

Replace active sheet content with provided JSON data. Useful for loading a prepared topology in one call.

NameTypeReqDescription
dataobjectyesSheet data: { nodes: [], connections: [], stickies?: [], notes?: '' }

No output schema declared.

No examples provided.

map_list_sheets ~29

List all sheets with their id, name, createdAt, updatedAt and which is active.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

map_lock_sheet ~67

Lock or unlock a sheet. A locked sheet rejects all MCP mutations and disables manual editing in the UI. Pass locked: false to unlock.

NameTypeReqDescription
idstringSheet id (omit for active sheet)
lockedbooleantrue = lock (default), false = unlock

No output schema declared.

No examples provided.

map_move_node ~53

Move a node to new canvas coordinates without changing any other fields.

NameTypeReqDescription
idstringyesNode id
xnumberyesNew canvas X position
ynumberyesNew canvas Y position

No output schema declared.

No examples provided.

map_move_sticky ~57

Move a sticky note to new canvas coordinates without changing its text or color.

NameTypeReqDescription
idstringyesSticky note id
xnumberyesNew canvas X position
ynumberyesNew canvas Y position

No output schema declared.

No examples provided.

map_rename_sheet ~37

Rename a sheet.

NameTypeReqDescription
idstringyesSheet id
namestringyesNew name (max 50 chars)

No output schema declared.

No examples provided.

map_search ~81

Full-text search across nodes (name/ip/notes), stickies, connection labels, and ports (port-number/service). Returns categorized hits with a total count. Use map_find_node for structured node-only filtering.

NameTypeReqDescription
qstringyesQuery string (case-insensitive substring match)
typesarrayLimit search scope (default: all 4)

No output schema declared.

No examples provided.

map_select ~127

Programmatically select node(s)/sticky(s) and/or a connection. Pass node_ids (array) for multi-select; node_id (string) is legacy single-select. Empty array or null deselects. Connection selection remains single (multi-select connections out of scope v1).

NameTypeReqDescription
conn_idstring|nullConnection id to select (single-select)
node_idstring|nullLegacy single node/sticky id (prefer node_ids for multi-select)
node_idsarrayArray of node/sticky ids to select (multi-select). Replaces the existing selection.

No output schema declared.

No examples provided.

map_set_canvas_offset ~40

Pan canvas to an absolute pixel offset.

NameTypeReqDescription
xnumberyesHorizontal offset in pixels
ynumberyesVertical offset in pixels

No output schema declared.

No examples provided.

map_set_notes ~25

Set the sheet-level notes text.

NameTypeReqDescription
notesstringyesNotes content

No output schema declared.

No examples provided.

map_set_zoom ~50

Set canvas zoom level (0.1–3.0).

NameTypeReqDescription
zoomnumberyesZoom level, e.g. 1.0 = 100%, 0.5 = 50%

No output schema declared.

No examples provided.

map_suggest_layout ~119

Smart auto-layout: force-directed (organic, deterministic with seed), cluster-by-type (horizontal lanes per node type), or cluster-by-connection (BFS components → separate zones). Different from map_arrange (naive grid/circle). Mutates node positions in-place.

NameTypeReqDescription
algorithmstringLayout algorithm (default: force)
iterationsnumberForce-directed only; default 200, recommended range 50-1000
seednumberPRNG seed for force-directed reproducibility (default 42)

No output schema declared.

No examples provided.

map_switch_sheet ~32

Switch the active sheet. Saves current sheet state first.

NameTypeReqDescription
idstringyesSheet id to switch to

No output schema declared.

No examples provided.

map_update_connection ~37

Update label or color of an existing connection.

NameTypeReqDescription
changesobjectyesFields to update
idstringyesConnection id

No output schema declared.

No examples provided.

map_update_node ~353

Update fields of an existing node by id. FIELD SCHEMA BY NODE TYPE All types: name, ip, x, y, w, h, notes ips: [{address, label}] — extra IP addresses server / pc / nas / ap / camera / printer / router / switch / firewall / other: ports: [{port, protocol("tcp"|"udp"|"icmp"), service, url, bindIp}] dockerServices: [{name, image, hostPort, containerPort, protocol("tcp"|"udp"), url}] project: parentServer — id of the parent server node (creates auto-connection) repoUrl — Git/GitLab URL deployPath — deployment directory cicdUrl — CI/CD pipeline URL dockerServices (same as server) domain (DNS Zone): ip — registrar name (e.g. "Cloudflare") registrarUrl — registrar control panel URL domains: [{name, record("A"|"AAAA"|"CNAME"|"MX"|"TXT"|"NS"|"SRV"), target, url}] target IP in 'target' triggers auto-connection to matching server node service (External Service): provider — provider name (e.g. "Supabase", "Vercel") dashboardUrl — link to service dashboard serviceConns: [{toId, label}] — links to other nodes (creates auto-connections) servedDomains: [string]

NameTypeReqDescription
changesobjectyesFields to update — see tool description for full schema per node type
idstringyesNode id

No output schema declared.

No examples provided.

map_update_settings ~27

Update one or more app settings.

NameTypeReqDescription
changesobjectyesSettings fields to update

No output schema declared.

No examples provided.

map_update_sticky ~41

Update text, color or size of a sticky note.

NameTypeReqDescription
changesobjectyesFields to update
idstringyesSticky note id

No output schema declared.

No examples provided.

map_zoom_to_fit ~39

Auto-fit all nodes into the viewport by adjusting zoom and pan.

NameTypeReqDescription
paddingnumberPadding around content in pixels (default 80)

No output schema declared.

No examples provided.