DiagramZu · Authentication Profile

Diagramzu Ai Authentication

Authentication

DiagramZu declares 3 security scheme(s) across its OpenAPI definitions.

CompanyDiagrammingMermaidMCPDeveloper ToolsDocumentationCollaborationAI Agents
Methods: Schemes: 3 OAuth flows: API key in:

Security Schemes

apiToken http
scheme: bearer
claudeConnectorOAuth oauth2
session cookie-session

Source

Authentication Profile

diagramzu-ai-authentication.yml Raw ↑ 
generated: '2026-11-05'
method: searched
source: https://diagramzu.ai/docs
docs: https://diagramzu.ai/docs
summary: >-
  Every REST request and every MCP call carries an `Authorization: Bearer <token>` header holding a DiagramZu API token
  (prefix dz_live_), minted at /app/settings/connections and shown once. The Claude custom connector instead authorizes
  with the DiagramZu account through OAuth (no token copied). Some endpoints (minting share links, creating/revoking tokens,
  deleting pages) need a signed-in browser session; the docs state an API token gets 403 on them.
schemes:
- name: apiToken
  type: http
  scheme: bearer
  token_prefix: dz_live_
  applies_to:
  - 'REST API https://diagramzu.ai/api/spaces/{spaceId}/...'
  - MCP https://mcp.diagramzu.ai/mcp
  issuance: "Open /app/settings/connections and generate one. Copy it immediately — you won't see it again."
  scope_model: A token is scoped either to one workspace or to all the workspaces its owner belongs to, chosen when the token
    is authorized (per the @diagramzu/mcp README).
  source: https://diagramzu.ai/docs
- name: claudeConnectorOAuth
  type: oauth2
  applies_to:
  - MCP https://mcp.diagramzu.ai/mcp
  description: >-
    "In Claude, open Settings → Connectors → Add custom connector, paste https://mcp.diagramzu.ai/mcp , and authorize
    with your DiagramZu account. No API token to copy." Flows, scopes and endpoints are not documented on the docs page.
  source: https://diagramzu.ai/docs
- name: session
  type: cookie-session
  description: Browser sign-in session; required for share-link minting/revocation, token create/revoke and page delete
    ("Needs a signed-in session — an API token gets 403").
  source: https://diagramzu.ai/docs

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/diagramzu-ai-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.