io.github.den-indance/network-diagram-mcp
NPM · @DEN.DANCE/NETWORK-DIAGRAM-MCP · SCANNED SEP 20
Network topology editor — Claude builds diagrams via MCP. nmap/CSV import, one-click SSH.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 96 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 117 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability79
- AI-judged instruction clarity (excellent).Pass
- Tool/resource definitions use about 2805 tokens (~63/item across 44 items; 44 tools + 0 resources), lean.Pass
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management90
- Stability observed for 27 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety75
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- 0 of 5 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "map_delete_node" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default. See how to fix → Fail
- An AI judge read all 44 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.den-indance/network-diagram-mcp server?
io.github.den-indance/network-diagram-mcp runs locally as an npm package, launched with npx -y @den.dance/network-diagram-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · @den.dance/network-diagram-mcp
claude mcp add den-indance-network-diagram-mcp -- npx -y @den.dance/network-diagram-mcp
{
"mcpServers": {
"den-indance-network-diagram-mcp": {
"command": "npx",
"args": [
"-y",
"@den.dance/network-diagram-mcp"
]
}
}
} {
"servers": {
"den-indance-network-diagram-mcp": {
"command": "npx",
"args": [
"-y",
"@den.dance/network-diagram-mcp"
]
}
}
} codex mcp add den-indance-network-diagram-mcp -- npx -y @den.dance/network-diagram-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"den-indance-network-diagram-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"@den.dance/network-diagram-mcp"
],
"enabled": true
}
}
} openclaw mcp add den-indance-network-diagram-mcp --command npx --arg -y --arg @den.dance/network-diagram-mcp
mcp_servers:
den-indance-network-diagram-mcp:
command: "npx"
args: ["-y", "@den.dance/network-diagram-mcp"] {
"McpServers": {
"den-indance-network-diagram-mcp": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"@den.dance/network-diagram-mcp"
]
}
}
} assistant mcp add den-indance-network-diagram-mcp -t stdio -c npx -a -y @den.dance/network-diagram-mcp
{
"mcpServers": {
"den-indance-network-diagram-mcp": {
"command": "npx",
"args": [
"-y",
"@den.dance/network-diagram-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 −3
- Stability: pass → 0.80 functional
- 16 Sept 26 0
- Stability: 0.97 → pass security
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 13 Sept 26 +1
- Security disclosure: unverified → fail ▼ functional
- 11 Sept 26 +1
- Security disclosure: fail → unverified ▼ functional
- 10 Sept 26 −3
- Stability: pass → 0.80 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/@den.dance/network-diagram-mcp@1.0.7
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Dependencies 96 packages
| Packages resolved | 96 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
map_add_connection ~73
Add a manual connection between two nodes. Returns the new connection id.
| Name | Type | Req | Description |
|---|---|---|---|
| color | string | – | Optional line color, e.g. #ef4444 |
| from_id | string | yes | Source node id |
| label | string | – | Optional connection label |
| to_id | string | yes | Target node id |
No output schema declared.
No examples provided.
map_add_node ~76
Add a new node to the map. Returns the new node id.
| Name | Type | Req | Description |
|---|---|---|---|
| ip | string | – | IP address (optional) |
| name | string | yes | Display name |
| type | string | yes | Node type |
| x | number | – | Canvas X position (optional) |
| y | number | – | Canvas Y position (optional) |
No output schema declared.
No examples provided.
map_add_sticky ~77
Add a sticky note to the map. Returns the new sticky id.
| Name | Type | Req | Description |
|---|---|---|---|
| color | string | – | Hex color, e.g. #fbbf24 (optional) |
| text | string | yes | Note text |
| x | number | – | Canvas X position (optional) |
| y | number | – | Canvas Y position (optional) |
No output schema declared.
No examples provided.
map_arrange ~30
Auto-arrange all nodes in a grid or circle layout.
| Name | Type | Req | Description |
|---|---|---|---|
| layout | string | yes | Layout type |
No output schema declared.
No examples provided.
map_bulk_add_connections ~35
Add multiple connections in a single call. Returns array of created ids.
| Name | Type | Req | Description |
|---|---|---|---|
| connections | array | yes | Array of connection objects |
No output schema declared.
No examples provided.
map_bulk_add_nodes ~63
Add multiple nodes in a single call. Each node accepts the same fields as map_add_node plus all type-specific fields (ports, dockerServices, domains, parentServer, etc.). Returns array of created ids.
| Name | Type | Req | Description |
|---|---|---|---|
| nodes | array | yes | Array of node objects |
No output schema declared.
No examples provided.
map_clear ~35
Remove all nodes, connections and stickies from the current sheet.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | yes | Must be true to confirm destructive action |
No output schema declared.
No examples provided.
map_create_sheet ~40
Create a new empty sheet and switch to it. Returns new sheet id.
| Name | Type | Req | Description |
|---|---|---|---|
| name | string | – | Sheet name (optional, auto-generated if omitted) |
No output schema declared.
No examples provided.
map_delete_connection ~24
Delete a connection by id.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Connection id |
No output schema declared.
No examples provided.
map_delete_node ~26
Delete a node and all its connections.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Node id |
No output schema declared.
No examples provided.
map_delete_sheet ~43
Delete a sheet. Cannot delete the last remaining sheet.
| Name | Type | Req | Description |
|---|---|---|---|
| confirm | boolean | yes | Must be true to confirm destructive action |
| id | string | yes | Sheet id |
No output schema declared.
No examples provided.
map_delete_sticky ~27
Delete a sticky note by id.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Sticky note id |
No output schema declared.
No examples provided.
map_duplicate_node ~90
Clone a node with all its properties (ports, services, domains, etc.). Returns new node id.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Source node id |
| name | string | – | Override name for the clone (default: same as original) |
| offset_x | number | – | X offset from original (default 40) |
| offset_y | number | – | Y offset from original (default 40) |
No output schema declared.
No examples provided.
map_export ~95
Export current or specified sheet as JSON / PNG / PDF. PNG and PDF return base64-encoded blobs with mimeType — the client decodes and saves to a file. Server raises the response timeout to 30s for PNG/PDF since large maps can take several seconds to render.
| Name | Type | Req | Description |
|---|---|---|---|
| format | string | – | Output format (default: json) |
| sheet_id | string | – | Sheet id (omit for the active sheet) |
No output schema declared.
No examples provided.
map_export_sheet ~38
Export sheet data as JSON including auto-connections. Defaults to active sheet.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | – | Sheet id (omit for active sheet) |
No output schema declared.
No examples provided.
map_find_node ~112
Search nodes by name, IP, type, or free-text query. Returns id, name, type, ip, x, y for each match. Use this to locate a node before updating it.
| Name | Type | Req | Description |
|---|---|---|---|
| ip | string | – | Exact match on primary IP or any secondary IP |
| name | string | – | Substring match on node name (case-insensitive) |
| text | string | – | Free-text search across name, IPs, and domain records |
| type | string | – | Filter by node type |
No output schema declared.
No examples provided.
map_get_all_connections ~53
Return all connections including auto-generated ones (DNS→server, project→server, service→node). Auto connections have auto:true flag. Use this instead of map_get_state.connections when you need the full topology picture.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
map_get_nodes_by_type ~65
Return all nodes of a given type with FULL field data (ports, dockerServices, domains, ips, notes, parentServer, etc.). For stripped projection or multi-criteria filtering use map_find_node instead.
| Name | Type | Req | Description |
|---|---|---|---|
| type | string | yes | Node type to filter by |
No output schema declared.
No examples provided.
map_get_notes ~16
Return the sheet-level notes text.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
map_get_selection ~51
Return currently selected node/sticky ids and connection id. Result shape: { nodeIds: string[], nodeId: string|null (= nodeIds[0], legacy single-id), connId: string|null }.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
map_get_settings ~31
Return current app settings (sshMode, dblClickAction, perfMode, showGrid, showZoomSlider).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
map_get_sheet_data ~43
Return nodes/connections/stickies/notes for a specific sheet (defaults to active sheet).
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | – | Sheet id (omit for active sheet) |
No output schema declared.
No examples provided.
map_get_state ~58
Return the current map state: all nodes, manual connections, stickies and notes. NOTE: only manual connections are included — use map_get_all_connections to also get auto-generated connections (DNS→server, project→server, service→node).
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
map_get_view ~18
Return current canvas zoom level and pan offset.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
map_import_csv ~174
Import nodes from CSV. Auto-detects columns from the header row (name/ip/type/ports/notes — case-insensitive, aliases like hostname/description/host_ip accepted). Ports field accepts 'port/protocol,port/protocol' (e.g. '22/tcp,80/tcp') or bare port numbers (default tcp). Nodes laid out in a 6-column grid. Returns {count, ids}.
| Name | Type | Req | Description |
|---|---|---|---|
| columns | object | – | Optional explicit column mapping: {name: 0, ip: 1, type: 2, ports: 3, notes: 4} — overrides auto-detect; missing keys default to -1 |
| csv | string | yes | CSV content with header row (RFC 4180-lite: quoted fields, escaped "", UTF-8 BOM tolerated) |
No output schema declared.
No examples provided.
map_import_nmap ~146
Parse nmap scan output (XML from `nmap -oX`) and create nodes with their open ports. Auto-infers node type from OS fingerprint + port profile (router/switch/firewall/server/printer/etc.). Provide either raw `xml` OR pre-parsed `hosts[]` — `hosts` takes priority when both are given. Nodes are auto-arranged in a grid. Returns {count, ids}.
| Name | Type | Req | Description |
|---|---|---|---|
| hosts | array | – | Alternative: pre-parsed hosts [{ip, hostnames[], ports[{portid, protocol, service}], osMatch}] |
| xml | string | – | Raw nmap XML output (use `nmap -oX -`) |
No output schema declared.
No examples provided.
map_import_sheet ~52
Replace active sheet content with provided JSON data. Useful for loading a prepared topology in one call.
| Name | Type | Req | Description |
|---|---|---|---|
| data | object | yes | Sheet data: { nodes: [], connections: [], stickies?: [], notes?: '' } |
No output schema declared.
No examples provided.
map_list_sheets ~29
List all sheets with their id, name, createdAt, updatedAt and which is active.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
map_lock_sheet ~67
Lock or unlock a sheet. A locked sheet rejects all MCP mutations and disables manual editing in the UI. Pass locked: false to unlock.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | – | Sheet id (omit for active sheet) |
| locked | boolean | – | true = lock (default), false = unlock |
No output schema declared.
No examples provided.
map_move_node ~53
Move a node to new canvas coordinates without changing any other fields.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Node id |
| x | number | yes | New canvas X position |
| y | number | yes | New canvas Y position |
No output schema declared.
No examples provided.
map_move_sticky ~57
Move a sticky note to new canvas coordinates without changing its text or color.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Sticky note id |
| x | number | yes | New canvas X position |
| y | number | yes | New canvas Y position |
No output schema declared.
No examples provided.
map_rename_sheet ~37
Rename a sheet.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Sheet id |
| name | string | yes | New name (max 50 chars) |
No output schema declared.
No examples provided.
map_search ~81
Full-text search across nodes (name/ip/notes), stickies, connection labels, and ports (port-number/service). Returns categorized hits with a total count. Use map_find_node for structured node-only filtering.
| Name | Type | Req | Description |
|---|---|---|---|
| q | string | yes | Query string (case-insensitive substring match) |
| types | array | – | Limit search scope (default: all 4) |
No output schema declared.
No examples provided.
map_select ~127
Programmatically select node(s)/sticky(s) and/or a connection. Pass node_ids (array) for multi-select; node_id (string) is legacy single-select. Empty array or null deselects. Connection selection remains single (multi-select connections out of scope v1).
| Name | Type | Req | Description |
|---|---|---|---|
| conn_id | string|null | – | Connection id to select (single-select) |
| node_id | string|null | – | Legacy single node/sticky id (prefer node_ids for multi-select) |
| node_ids | array | – | Array of node/sticky ids to select (multi-select). Replaces the existing selection. |
No output schema declared.
No examples provided.
map_set_canvas_offset ~40
Pan canvas to an absolute pixel offset.
| Name | Type | Req | Description |
|---|---|---|---|
| x | number | yes | Horizontal offset in pixels |
| y | number | yes | Vertical offset in pixels |
No output schema declared.
No examples provided.
map_set_notes ~25
Set the sheet-level notes text.
| Name | Type | Req | Description |
|---|---|---|---|
| notes | string | yes | Notes content |
No output schema declared.
No examples provided.
map_set_zoom ~50
Set canvas zoom level (0.1–3.0).
| Name | Type | Req | Description |
|---|---|---|---|
| zoom | number | yes | Zoom level, e.g. 1.0 = 100%, 0.5 = 50% |
No output schema declared.
No examples provided.
map_suggest_layout ~119
Smart auto-layout: force-directed (organic, deterministic with seed), cluster-by-type (horizontal lanes per node type), or cluster-by-connection (BFS components → separate zones). Different from map_arrange (naive grid/circle). Mutates node positions in-place.
| Name | Type | Req | Description |
|---|---|---|---|
| algorithm | string | – | Layout algorithm (default: force) |
| iterations | number | – | Force-directed only; default 200, recommended range 50-1000 |
| seed | number | – | PRNG seed for force-directed reproducibility (default 42) |
No output schema declared.
No examples provided.
map_switch_sheet ~32
Switch the active sheet. Saves current sheet state first.
| Name | Type | Req | Description |
|---|---|---|---|
| id | string | yes | Sheet id to switch to |
No output schema declared.
No examples provided.
map_update_connection ~37
Update label or color of an existing connection.
| Name | Type | Req | Description |
|---|---|---|---|
| changes | object | yes | Fields to update |
| id | string | yes | Connection id |
No output schema declared.
No examples provided.
map_update_node ~353
Update fields of an existing node by id. FIELD SCHEMA BY NODE TYPE All types: name, ip, x, y, w, h, notes ips: [{address, label}] — extra IP addresses server / pc / nas / ap / camera / printer / router / switch / firewall / other: ports: [{port, protocol("tcp"|"udp"|"icmp"), service, url, bindIp}] dockerServices: [{name, image, hostPort, containerPort, protocol("tcp"|"udp"), url}] project: parentServer — id of the parent server node (creates auto-connection) repoUrl — Git/GitLab URL deployPath — deployment directory cicdUrl — CI/CD pipeline URL dockerServices (same as server) domain (DNS Zone): ip — registrar name (e.g. "Cloudflare") registrarUrl — registrar control panel URL domains: [{name, record("A"|"AAAA"|"CNAME"|"MX"|"TXT"|"NS"|"SRV"), target, url}] target IP in 'target' triggers auto-connection to matching server node service (External Service): provider — provider name (e.g. "Supabase", "Vercel") dashboardUrl — link to service dashboard serviceConns: [{toId, label}] — links to other nodes (creates auto-connections) servedDomains: [string]
| Name | Type | Req | Description |
|---|---|---|---|
| changes | object | yes | Fields to update — see tool description for full schema per node type |
| id | string | yes | Node id |
No output schema declared.
No examples provided.
map_update_settings ~27
Update one or more app settings.
| Name | Type | Req | Description |
|---|---|---|---|
| changes | object | yes | Settings fields to update |
No output schema declared.
No examples provided.
map_update_sticky ~41
Update text, color or size of a sticky note.
| Name | Type | Req | Description |
|---|---|---|---|
| changes | object | yes | Fields to update |
| id | string | yes | Sticky note id |
No output schema declared.
No examples provided.
map_zoom_to_fit ~39
Auto-fit all nodes into the viewport by adjusting zoom and pan.
| Name | Type | Req | Description |
|---|---|---|---|
| padding | number | – | Padding around content in pixels (default 80) |
No output schema declared.
No examples provided.
What is the io.github.den-indance/network-diagram-mcp server?
io.github.den-indance/network-diagram-mcp is listed in the public MCP registry as io.github.den-indance/network-diagram-mcp. Network topology editor, Claude builds diagrams via MCP. nmap/CSV import, one-click SSH. This page covers its npm package (@den.dance/network-diagram-mcp).
Is the io.github.den-indance/network-diagram-mcp server safe to use?
io.github.den-indance/network-diagram-mcp scores 82 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.den-indance/network-diagram-mcp server expose?
io.github.den-indance/network-diagram-mcp exposes 44 tools: map_get_state, map_add_node, map_update_node, map_delete_node, map_add_connection, and 39 more. Their descriptions and schemas cost roughly 2,805 tokens of context every time the server is loaded.
Is the io.github.den-indance/network-diagram-mcp server still maintained?
io.github.den-indance/network-diagram-mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.den-indance/network-diagram-mcp server under?
io.github.den-indance/network-diagram-mcp declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.