Secure Lucid access for AI agents
Search, create, and edit Lucidchart diagrams, mind maps, org charts, ERDs, and sequence diagrams, and manage documents and folders, using Lucid's official MCP server.
Lucid documents carry org charts, architecture diagrams, ERDs, and process maps — exactly the kind of structured, reusable knowledge an agent is good at generating and searching, and exactly the kind of internal detail you don't want an agent sharing or deleting without oversight. Adding Lucid here routes every call through your policies and onto the audit log.
Server URL: https://mcp.lucid.app/mcp
Before you begin
- A Lucid account. Lucid supports dynamic client registration, so there is no OAuth app to create on Lucid's side.
- Administrator access to your SecureAuth Agent Authority workspace, to add the resource.
Setup
- Navigate to Resources and click Add Resource
- Select Lucid from the catalog
- Click the Per-org dynamic registration card. Lucid is DCR-only, so this is the single option shown, and picking it installs the resource immediately
When you save, the gateway sends you to Lucid to sign in (through your SSO, if configured) and authorize the app. Review the requested access and click Grant Access. You return to the gateway with your Lucid account connected.
Access is per user. Each additional user connects their own Lucid account the first time their agent calls a Lucid tool: the gateway returns a sign-in link, the user authorizes once, and the tools work from then on. Manage linked accounts in Connections.
Lucid's own document, folder, and account permissions still apply, so each user only reaches content in their own Lucid account.
Verify the connection
After you save, the gateway syncs the available Lucid tools automatically. To confirm the connection works end to end, ask your agent to run a request, for example:
Create a folder in LucidIf the folder is created in your Lucid account, the connection is working.
Dynamic client registration
Lucid's remote MCP server supports OAuth 2.0 dynamic client registration, so the gateway registers a fresh OAuth client per org during install. Lucid's own document, folder, and account permissions still apply — the gateway never widens access beyond what the authorizing user could already do in Lucid.
See Credential modes for how this compares to the other modes catalog resources use.
Available tools
Lucid exposes 35 tools spanning search, document creation, editing, sharing, collaboration, and organization.
| Area | Tools |
|---|---|
| Search & fetch | search, fetch, lucid_search_document, get_mcp_resource |
| Create diagrams | lucid_create_diagram_from_specification, lucid_create_org_chart, lucid_create_mind_map, lucid_create_sequence_diagram, lucid_create_erd |
| Edit content | lucid_add_block, lucid_add_line, lucid_edit_item, lucid_delete_items, lucid_add_dynamic_table, lucid_add_items_to_dynamic_table, lucid_edit_dynamic_table_metadata |
| Shapes | lucid_shape_library, lucid_shape_details |
| Export & embed | lucid_export_document_as_PNG, lucid_fetch_item_image, _lucid_create_embed, _lucid_create_embed_session_token |
| Sharing | lucid_create_document_share_link, share_document_with_collaborators |
| Comments & threads | list_document_threads, list_document_thread_comments, post_document_thread_comment |
| Integrations | lucid_list_integrations, lucid_import_integration_cards |
| Documents/folders | lucid_get_document_metadata, lucid_update_document, lucid_create_folder, lucid_update_folder, lucid_list_folder_contents |
| Other | lucid_submit_feedback |
Two of these are worth a second look before allowing them broadly: lucid_delete_items is destructive and cannot be undone via the API, and share_document_with_collaborators/lucid_create_document_share_link change who can reach a document. _lucid_create_embed and _lucid_create_embed_session_token are internal tools for Lucid's own MCP Apps extension rather than general-purpose agent use.
Policy examples
Read-only Lucid for everyone
One deny rule blocks every mutating tool while leaving search and reads on the default path:
- In Access Policies, click Add Rule and name it "Lucid: no document mutations."
- Set the effect pill to Deny and the MCP scope pill to Lucid.
- Add these tool patterns:
lucid_create_*,lucid_add_*,lucid_edit_*,lucid_delete_items,lucid_update_*,share_document_with_collaborators,post_document_thread_comment,lucid_import_integration_cards. - Set the status to Active and click Create.
Search, fetch, shape discovery, and metadata reads keep working.
Keep sharing and deletes off the table
To allow diagram creation and editing but never let an agent change who can access a document or delete content:
- In Access Policies, click Add Rule and name it "Lucid: no sharing or deletes."
- Set the effect pill to Deny and the MCP scope pill to Lucid.
- Add the tool patterns
lucid_create_document_share_link,share_document_with_collaborators,lucid_delete_items. - Set the status to Active and click Create.