Flowzap

io.github.flowzap-xyzPublished by GitHub account flowzap-xyzv2.1.0Updated Oct 24, 2026

Create workflow, sequence, architecture, and mind map diagrams via AI assistants.

VerifiedStreamable HTTPWeb executableDeveloper ToolsSecurity & MonitoringMedia & Design

Overview

AI-generated overview

FlowZap lets an assistant write, validate, repair and share FlowZap Code diagrams — workflow, sequence, architecture and mind map — via a local npm server or a

What you can do
Write and check diagrams: validate FlowZap Code, repair mechanical errors, and fetch syntax documentation and examples with stats on errors found. Mind maps: validate mind-map readiness, approve rendering suitability, generate a tree skeleton, and open a mind-map playground. Share and inspect: create shareable playground URLs in workflow, sequence, architecture or mind-map view, and export code as a structured JSON graph of lanes, nodes and edges. Edit and compare: diff two code versions and apply structured patches that insert, remove or update nodes and edges. Convert and audit: turn HTTP logs, OpenAPI specs or code snippets into diagrams, and run SOC2, GDPR, PIPL or EU AI Act compliance-
When to use it
Use it when you want an assistant to turn a description, log, spec or code into a shareable diagram, to keep an existing diagram valid and incrementally patched, or to get a quick architectural compliance review of a data-flow diagram.
Requirements
Either the remote endpoint or a local process via npx flowzap-mcp (Node.js with npx). No authentication, API keys or environment variables are declared. Network access to flowzap.xyz is needed for validation, playground creation and compliance checks.
Before you install
Playground URLs are ephemeral (15-minute TTL) and compliance result pages expire after 60 minutes. The compliance check sends diagram code to a third-party LLM (Deepseek) and is rate limited, with a free quota of 10 reviews. Diagram code you submit leaves your machine to flowzap.xyz. The server cannot read your existing diagrams or account.

Installation

In SourceWeft

  1. Open Flowzap in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.flowzap-xyz%2Fflowzap/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "flowzap": {
      "type": "http",
      "url": "https://flowzap.xyz/mcp"
    }
  }
}

README

FlowZap MCP Server

[npm version] [MCP]

Create workflow, sequence, architecture, and mind map diagrams using AI assistants like Claude, Cursor, Windsurf, and 8 other MCP-compatible tools.

FlowZap is a visual workflow diagramming tool with a text-based DSL called FlowZap Code. This MCP server lets AI assistants create diagrams for you.

What is FlowZap?

FlowZap turns text prompts into quad-view diagrams (Workflow, Sequence, Architecture & Mind Map) using FlowZap Code DSL. It is NOT Mermaid, NOT PlantUML - it is a unique domain-specific language designed for simplicity and AI generation.

Key Facts:

  • Only 4 shapes: circle, rectangle, diamond, taskbox
  • Node attributes use colon: label:"Text"
  • Edge labels use equals: [label="Text"]
  • Handles required: n1.handle(right) -> n2.handle(left)
  • Lane display label must be on the same line as the opening brace: laneName { # Label
  • Sequence diagram quality: every cross-lane request needs a matching response edge before the next major request; define edges in chronological order; keep a strict request → response → next request rhythm; no orphaned nodes

Installation

The FlowZap MCP Server works with any tool that supports the Model Context Protocol (MCP):

All Compatible Coding Tools

ToolHow to Configure
Claude DesktopAdd to claude_desktop_config.json:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
Windows: %APPDATA%\Claude\claude_desktop_config.json
Claude CodeRun: claude mcp add --transport stdio flowzap -- npx -y flowzap-mcp
Or add to .mcp.json in your project root.
CursorOpen Settings → Features → MCP Servers → Add Server. Use the same JSON config.
Windsurf IDEAdd to ~/.codeium/windsurf/mcp_config.json
OpenAI CodexAdd to ~/.codex/config.toml:
[mcp_servers.flowzap]
command = "npx"
args = ["-y", "flowzap-mcp"]
Or run: codex mcp add flowzap -- npx -y flowzap-mcp
Warp TerminalSettings → MCP Servers → Click "+ Add" → Paste the JSON config.
Zed EditorAdd to settings.json:
{"context_servers": {"flowzap": {"command": "npx", "args": ["-y", "flowzap-mcp"]}}}
Cline (VS Code)Open Cline sidebar → MCP Servers icon → Edit cline_mcp_settings.json
Roo Code (VS Code)Add to .roo/mcp.json in project or global settings.
Continue.devCreate .continue/mcpServers/flowzap.yaml with:
name: FlowZap
mcpServers:
- name: flowzap
command: npx
args: ["-y", "flowzap-mcp"]
Sourcegraph CodyAdd to VS Code settings.json via openctx.providers configuration.

Not Compatible: Replit and Lovable.dev only support remote MCP servers via URL. Use the Public API instead.

JSON Configuration

All tools use the same JSON configuration format:

json
{  "mcpServers": {    "flowzap": {      "command": "npx",      "args": ["-y", "flowzap-mcp"]    }  }}

Windows Users: If tools don't appear, use the absolute path:

json
"command": "C:\\Program Files\\nodejs\\npx.cmd"

Find your npx path with: where.exe npx

Available Tools

Core Tools

ToolDescription
flowzap_validateValidate FlowZap Code syntax
flowzap_fixDeterministically repair mechanical FlowZap Code errors (numbering, inferred handles, label syntax, missing lane labels, emoji/control chars) and return the repaired code plus the corrections applied
flowzap_create_playgroundCreate a shareable diagram URL
flowzap_get_syntaxGet FlowZap Code syntax documentation

Agent-Focused Tools

ToolDescription
flowzap_export_graphExport FlowZap Code as structured JSON graph (lanes, nodes, edges) for reasoning
flowzap_artifact_to_diagramParse HTTP logs, OpenAPI specs, or code into FlowZap diagrams
flowzap_diffCompare two versions of FlowZap Code and get structured diff
flowzap_apply_changeApply structured patch operations (insert/remove/update nodes/edges)

Compliance Tool

ToolDescription
flowzap_compliance_checkRun automated SOC2, GDPR, and PIPL compliance analysis on a FlowZap Code data-flow diagram. Backed by Deepseek LLM with strict rate limits (3/day per IP, 1/hour burst, global 5-min circuit breaker). Returns a shareable ephemeral result URL (60-min TTL).

Mind Map Tools

ToolDescription
flowzap_mindmap_validateValidate FlowZap Code syntax and mind-map readiness
flowzap_mindmap_approveCheck if code is suitable for Mind Map rendering (diamonds/taskboxes = ERROR)
flowzap_mindmap_templateGenerate a ready-to-extend Mind Map tree skeleton
flowzap_mindmap_create_playgroundCreate a playground URL with ?view=mindmap

Usage Examples

Basic Diagram Creation

Ask your AI assistant:

  • "Generate a Sequence diagram of the current Sign In flow implemented in this App"
  • "Create a workflow diagram for an order processing system"
  • "Create an architecture diagram for a microservices API gateway"
  • "Make a flowchart showing user registration flow"
  • "Diagram a CI/CD pipeline with build, test, and deploy stages"

Agent-Focused Workflows

Parse HTTP Logs into Diagrams:

"Here are my nginx access logs. Create a sequence diagram showing the request flow."

The agent uses flowzap_artifact_to_diagram with artifactType: "http_logs".

Analyze Diagram Structure:

"Which steps in this workflow touch the database?"

The agent uses flowzap_export_graph to get a JSON graph, then queries it.

Show What Changed:

"I updated the workflow. What's different from the previous version?"

The agent uses flowzap_diff to compare old and new code.

Safe Incremental Updates:

"Add a logging step after the API call in this diagram."

The agent uses flowzap_apply_change with a structured patch instead of regenerating.

Repair Invalid Code:

"My FlowZap Code fails validation. Fix the mechanical errors for me."

The agent uses flowzap_fix to deterministically repair numbering, inferred handles, label syntax, lane labels, emoji and control characters, then validates the repaired code. Anything the repairer cannot fix is reported as-is — it never invents content.

Compliance Audit:

"Check my data flow diagram for SOC2, GDPR, and PIPL compliance."

The agent uses flowzap_compliance_check to run an automated audit and returns a shareable result page.

Mind Map Creation:

"Create a mind map about AI agent architecture"

The agent uses flowzap_mindmap_template to generate a skeleton, then validates and creates a playground with ?view=mindmap.

The assistant will:

  1. Generate FlowZap Code based on your description
  2. Validate the code
  3. Create a playground URL with the appropriate view (workflow, sequence, or architecture) to view and share

FlowZap Code Example

sales { # Sales Team  n1: circle label:"Order Received"  n2: rectangle label:"Submit Order"  n5: rectangle label:"Receive decision"  n1.handle(right) -> n2.handle(left)  n2.handle(bottom) -> fulfillment.n3.handle(top) [label="Submit"]}
fulfillment { # Fulfillment  n3: rectangle label:"Review Order"  n4: rectangle label:"Return decision"  n3.handle(right) -> n4.handle(left)  n4.handle(top) -> sales.n5.handle(bottom) [label="Approved"]}

Public API Endpoints

These endpoints are available for external integrations (no authentication required):

EndpointMethodRate LimitDescription
/api/validatePOST30/minValidate FlowZap Code syntax
/api/fixPOST30/minDeterministically repair mechanical FlowZap Code errors and return the repaired code + applied corrections
/api/playground/createPOST5/min, 50/dayCreate ephemeral playground URL (15-min TTL)
/api/compliance-checkPOST5/min, 30/dayRun SOC2/GDPR/PIPL compliance analysis on FlowZap Code. Returns frameworks + shareable result URL (60-min TTL). Backed by Deepseek LLM.

Security

  • No authentication required - Uses only public FlowZap APIs
  • No user data access - Cannot read your diagrams or account
  • Runs locally - The MCP server runs on your machine
  • SSRF protected - Only connects to flowzap.xyz
  • Rate limited - 30 requests/minute client-side
  • Input validation - 50KB max code size

Agent Skill (skills.sh)

Install the FlowZap skill for 40+ compatible coding agents via skills.sh:

bash
npx skills add flowzap-xyz/flowzap-mcp

Public MCP Adoption Signals

Official Listings

Links

License

MIT

Source: README.md at commit b23b4b4

Tools

13

flowzap_validate

Validate FlowZap Code syntax. Returns errors and stats.

Parameterslngcoderequired

flowzap_fix

Deterministically repair mechanical FlowZap Code errors: non-sequential node numbering, inferred edge handles, node/edge label syntax, missing lane display labels, emoji and non-printable characters. Returns the repaired code plus the list of corrections that were applied. Errors that cannot be repaired are reported as-is — the repairer never invents content.

Parameterslngcoderequired

flowzap_mindmap_validate

Validate FlowZap Code syntax specifically for Mind Map diagrams. Checks syntax validity and whether the code is mind-map-ready (no diamonds, no taskboxes, at least one circle for the root, at least one rectangle for branches). Use this before flowzap_mindmap_approve and flowzap_mindmap_create_playground.

Parameterscoderequired

flowzap_mindmap_approve

Check if valid FlowZap Code is suitable for Mind Map rendering. Returns structured verdict with errors (blocking), warnings (advisory), and info. Rules: diamonds and taskboxes are ERROR (not rendered in mind maps), multiple circles produce WARNING (only the first is the root), edge directions are INFO (ignored by renderer), large/deep diagrams produce advisory warnings. Uses local parsing only - no API call.

Parameterscoderequired

flowzap_mindmap_template

Generate a ready-to-extend FlowZap Code skeleton for a Mind Map. Returns a tree structure with a central circle root, rectangle branches and sub-branches, and optional cross-links between branches. Use this to bootstrap a new mind map.

Parametersdepthtopicbranches

flowzap_mindmap_create_playground

Create a FlowZap playground session that opens directly in Mind Map view (?view=mindmap). Validates the code first, then creates a shareable URL. Use this after flowzap_mindmap_validate and flowzap_mindmap_approve have passed.

Parameterscoderequired

flowzap_create_playground

Create a shareable FlowZap playground URL. Set view to 'architecture', 'sequence', or 'mindmap' when appropriate.

Parameterslngcoderequiredview

flowzap_get_syntax

Get FlowZap Code syntax documentation and examples.

Takes no parameters.

flowzap_export_graph

Parse FlowZap Code into a structured JSON graph (lanes, nodes, edges).

Parameterscoderequired

flowzap_artifact_to_diagram

Convert HTTP logs, OpenAPI specs, or code snippets into a FlowZap diagram.

ParametersviewcontentrequiredartifactTyperequired

flowzap_diff

Compare two FlowZap Code versions and return a structured diff.

ParametersnewCoderequiredoldCoderequired

flowzap_apply_change

Apply structured patch operations (insert/remove/update nodes or edges) to FlowZap Code.

Parameterscoderequiredoperationsrequired

flowzap_compliance_check

Run an automated SOC2 / GDPR / PIPL / EU AI Act architectural compliance review of a FlowZap Code data flow. Returns a Markdown summary of findings (control · status · detail · recommendation) for each framework whose elements are detectable in the diagram. Free quota: 10 free compliance reviews per client per rolling 30-day period. For unlimited manual reviews, paste your code at https://flowzap.xyz/soc2-gdpr-pipl-compliance-checker. Processor disclosure (GDPR Art. 13): analysis powered by Deepseek (Hangzhou DeepSeek AI, China) — see https://flowzap.xyz/legal/subprocessors. This is an advisory architectural review, not legal advice.

Parameterslngcoderequired

Version history

2
  1. v2.1.0LatestSep 20, 2026
  2. v2.0.0Sep 16, 2026

Score

100% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts