Eraser MCP

Live

API KEY

DESIGN

Design

Your agent creates, updates, and retrieves Eraser diagrams and docs on behalf of each engineer, with credentials scoped per user.

  • Acts as the engineer. Diagrams are authored and attributed to the right user, not a service account.
  • Keys stay vaulted. AES-256 encrypted, resolved at request time, never written to context.
  • Scoped before every call. Tool access enforced per tenant. Every call logged to a 90-day audit trail.
Eraser MCP
agent · Acme Q3
Run
Generate an architecture diagram for our new auth service and save it to Eraser.
S
eraser_diagram_create
85ms
Eraser MCP agent
Diagram created: 'Auth Service Architecture' with 6 nodes and 4 edges. Saved to your Eraser workspace.
Sources: 1 diagram, auth-service workspace
erasermcp
1 diagram created
18:29
Message Claude...

Tools your diagram generation agent reaches for on Eraser MCP, scoped per user.

CALL ANY TOOL
Each tool maps to a live Eraser API endpoint and runs under the requesting user's scoped API key.
erasermcp_add_or_remove_template_or_reference
Add Or Remove Template Or Reference
Attach or detach an EXISTING file as a template (style anchor) or reference (terminology/concept anchor) of a preset. Use this tool when: - the user has an existing workspace they want to promote into a preset (e.g. 'use this file as a template for the System Design preset'), - you need to detach a file from a preset, - or you just created a template via `create_template_or_reference` WITHOUT a `presetId` and need to attach it now. To create a NEW template/reference file and attach it in a single call, use `create_template_or_reference` with `presetId` set — that avoids leaving a detached file in the team. When removing a file leaves it orphaned from all presets, the file is archived automatically. Templates and references are inherently team-scoped (no private/personal templates exist); the preset choice is the only scoping decision.
Parameters
Name
Type
Required
Description
fileId
string
Required
No description.
kind
string
Required
No description.
operation
string
Required
No description.
presetId
string
Required
No description.
erasermcp_create_diagram
Create Diagram
erasermcp_create_document
Create Document
erasermcp_create_file
Create File
erasermcp_create_folder
Create Folder
erasermcp_create_preset
Create Preset
erasermcp_create_template_or_reference
Create Template Or Reference
erasermcp_delete_diagram
Delete Diagram
erasermcp_delete_document
Delete Document
erasermcp_delete_file
Delete File
erasermcp_delete_folder
Delete Folder
erasermcp_delete_preset
Delete Preset
erasermcp_export_diagram
Export Diagram
erasermcp_export_document
Export Document
erasermcp_export_file
Export File
erasermcp_get_diagram
Get Diagram
erasermcp_get_document
Get Document
erasermcp_get_file
Get File
erasermcp_get_folder
Get Folder
erasermcp_get_me
Get Me
erasermcp_get_preset
Get Preset
erasermcp_get_template_or_reference
Get Template Or Reference
erasermcp_list_diagrams
List Diagrams
erasermcp_list_files
List Files
erasermcp_list_folders
List Folders
erasermcp_list_presets
List Presets
erasermcp_list_teams
List Teams
erasermcp_manually_create_diagram
Manually Create Diagram
erasermcp_manually_create_document
Manually Create Document
erasermcp_manually_update_diagram
Manually Update Diagram

For more tools, view docs.

Build your Agent
The same Scalekit vault and scope enforcement works across every agent framework.
Python · LlamaIndex
Try these prompts
Drop any of these into your agent to start generating and managing Eraser content.
Diagram generation
Copy the prompt
Copied
Create a cloud architecture diagram for our microservices setup and save it to Eraser.
Copy the prompt
Copied
Generate an ER diagram for the users and orders tables in our database.
Copy the prompt
Copied
Draw a sequence diagram showing the OAuth 2.0 authorization code flow.
Copy the prompt
Copied
Build a flowchart for our customer onboarding process and save it to my workspace.
Docs and design reviews
Copy the prompt
Copied
Create a design doc in Eraser for the new payment service architecture.
Copy the prompt
Copied
Fetch the latest version of the 'Auth Service' diagram and summarize its components.
Copy the prompt
Copied
List all architecture diagrams in my workspace created this month.
Maintenance and export
Copy the prompt
Copied
Update the 'Data Pipeline' diagram to add the new Kafka broker node.
Copy the prompt
Copied
Export the 'System Overview' diagram as a PNG and give me the download link.
Copy the prompt
Copied
Which diagrams in my workspace are missing documentation?
SEE HOW AUTH WORKS
Each user authorizes once via their Eraser API key; your agent resolves and scopes it on every subsequent call.
1
Authorize
Your user connects
Eraser MCP
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
Eraser MCP
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
Eraser MCP
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
Eraser MCP
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
The same per-user auth pattern applies across every connector in the Scalekit catalog.
No items found.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
Most MCP integrations wire a single API key into the environment and call it done.
01.
Shared tokens break per-user analytics
A shared Eraser API key works in a demo. In production, every diagram your agent creates is attributed to a service account rather than the engineer who asked for it. Scalekit resolves the real user credential so attribution and audit stay accurate.
// shared key
diagram.created_by → bot_service_account

// scalekit
diagram.created_by → alice@acme.com ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
Eraser MCP today. Others tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does each user need their own Eraser API key, or can I use one shared key?
Each user connects their own Eraser API key through a Scalekit magic-link flow. Scalekit vaults it per user and resolves the right credential on every agent call, so diagrams are attributed to the correct person and you get per-user audit logs.
How does Scalekit store the API keys?
Keys are encrypted with AES-256 at rest and resolved in memory at request time. They are never written to agent context, prompt history, or logs. Only the encrypted ciphertext is persisted in Scalekit's vault.
How do I limit which Eraser tools a specific agent can call?
Call listScopedTools with the user and agent context to get the subset of tools that tenant has authorized. Your agent only sees and can call tools within that scope, so eraser_diagram_create can be enabled for one agent and disabled for another.
What happens if a user revokes their Eraser API key?
The next agent call that resolves that user's credential will receive an auth error. Scalekit surfaces this as a structured error your agent can catch and redirect to a re-authorization flow, rather than silently failing or exposing a stale token.
Can my agent create diagrams in a specific Eraser workspace, or only the user's default?
The eraser_diagram_create and eraser_document_create tools accept an optional workspace_id parameter. If omitted, Eraser defaults to the authenticated user's primary workspace. Use eraser_workspace_list to discover available workspace IDs before calling create operations.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""erasermcp"": {
""url"": ""https://mcp.scalekit.com/erasermcp"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.erasermcp]
url = ""https://mcp.scalekit.com/erasermcp""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""erasermcp"": {
""url"": ""https://mcp.scalekit.com/erasermcp"",
""type"": ""http""
}
}
}