Provides a standalone MCP server for tldraw diagrams, enabling clients to create, edit, and persist multiple canvases over Streamable HTTP with semantic protocol v2.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for the top badge — read-only, revoke anytime. What we access →
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
esbuild allows arbitrary file read when running the development server on Windows
process.env. You'll be asked to provide them before it can run.APP_HTML_PATHHOSTINTEROP_TLDRAW_HEALTH_URLINTEROP_TLDRAW_MCP_URLOPENCHAMBER_TLDRAW_HEALTH_URLOPENCHAMBER_TLDRAW_MCP_ALLOWED_HOSTSOPENCHAMBER_TLDRAW_MCP_ALLOWED_ORIGINSOPENCHAMBER_TLDRAW_MCP_ALLOW_HEAVY_BUILDOPENCHAMBER_TLDRAW_MCP_APP_HTML_PATHOPENCHAMBER_TLDRAW_MCP_ASSET_GC_MODEOPENCHAMBER_TLDRAW_MCP_CANVAS_IDOPENCHAMBER_TLDRAW_MCP_HOSTOPENCHAMBER_TLDRAW_MCP_INSTALLATION_IDOPENCHAMBER_TLDRAW_MCP_PORTOPENCHAMBER_TLDRAW_MCP_PROVENANCE_PATHOPENCHAMBER_TLDRAW_MCP_REUSE_UPSTREAMOPENCHAMBER_TLDRAW_MCP_RUNTIME_DIROPENCHAMBER_TLDRAW_MCP_SCOPE_IDOPENCHAMBER_TLDRAW_MCP_STATE_PATHOPENCHAMBER_TLDRAW_MCP_STORE_ROOTOPENCHAMBER_TLDRAW_MCP_URLOPENCHAMBER_TLDRAW_MCP_WORKSPACE_IDPORTTLDRAW_CANVAS_IDTLDRAW_MCP_ACCEPTANCE_REPORT_DIRTLDRAW_MCP_ALLOWED_HOSTS— loopback hostnames HTTP Host allowlist; required for non-loopback bindTLDRAW_MCP_ALLOWED_ORIGINS— loopback hostnames HTTP Origin-host allowlist; required for non-loopback bindTLDRAW_MCP_ALLOW_HEAVY_BUILDTLDRAW_MCP_APP_HTML_PATH— sibling dist/app.html Verified App bundleTLDRAW_MCP_ASSET_GC_MODE— delete Startup-only revision-aware asset maintenance: delete, dry-run, or offTLDRAW_MCP_CANVAS_ID— interop-acceptance Initial/default canvasTLDRAW_MCP_HEALTH_URLTLDRAW_MCP_HOST— 127.0.0.1 Listen addressTLDRAW_MCP_INSTALLATION_ID— resolved store root Stable installation identity seed used to partition App cachesTLDRAW_MCP_PORT— 39512 Listen portTLDRAW_MCP_PROBE_CANVAS_IDTLDRAW_MCP_PROVENANCE_PATH— sibling provenance App integrity metadataTLDRAW_MCP_REUSE_UPSTREAMTLDRAW_MCP_RUNTIME_DIR— /tmp/tldraw-mcp-test \TLDRAW_MCP_SCOPE_ID— local-user Stable deployment/user namespace identityTLDRAW_MCP_STATE_PATH— runtime state file Legacy monolithic state import source and rollback evidenceTLDRAW_MCP_STORE_ROOT— next to state path Namespaced catalog, canvas records, history, recoverable trash, and content-addressed assetsTLDRAW_MCP_TEST_FAIL_RENAME_ATTLDRAW_MCP_TEST_FAIL_WRITE_ATTLDRAW_MCP_URL— loopback MCP URL Probe targetTLDRAW_MCP_WORKSPACE_ID— default-workspace Stable workspace namespace identityTLDRAW_PROVENANCE_PATHTLDRAW_STATE_PATHXDG_DATA_HOME[](https://m8ven.ai/mcp/zunbaran-tldraw-mcp-app-qcgjd0)Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check