Is Draw.io MCP Extension safe?
Connects Draw.io to MCP clients for programmatic diagram control and analysis.
This extension communicates with a Draw.io MCP Server over WebSocket on localhost port 3333. It lets MCP-powered applications create, modify, manage, and retrieve information about Draw.io diagrams, and it shows the current server connection status in the extension popup.
Who publishes itladislav.gazo - no other listings under this identity, 2 shared hostnames
ladislav.gazo - no other listings under this identity, 2 shared hostnames
What this publisher told the store about itself, and the other listings that told it the same thing.
Shared hosts - 2 hostnames
Hostnames hardcoded in this extension that few other listings call. That can mean one operator behind both, and it can equally mean a small shared vendor, so it is context rather than a conclusion. Hosts that many listings call are left out: they are services, not connections.
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.
Where it sends data
Destinations our analysis observed Draw.io MCP Extension contacting. Sending data somewhere is not a finding on its own - an extension that syncs your settings has to talk to its own server - but it is where your data can go, and who else it goes to.
- localhost
Draw.io MCP Extension sends data to localhost. Named as a recipient by 19 other extensions we have analysed.