Lucid
Search and read diagrams through the Lucid MCP server, and choose which AI agents can edit or share them
An agent with Lucid can search your documents and read diagrams, but it can also edit diagrams and share documents with collaborators. Adding Lucid here puts each tool behind a policy rule and records each call in the audit log, so you decide which agents can edit diagrams and which can share them.
Server URL: https://mcp.lucid.app/mcp
Credential modes
Lucid supports per-org dynamic registration only, so there is no app to create on Lucid's side and no client ID or secret to enter. See Credential modes for how it compares with Use SecureAuth's app and Bring your own app.
Before you begin
- A Lucid account.
- Administrator access to your SecureAuth Agent Authority workspace, to add the resource.
Setup
- In the Agent Authority console, go to Tools & Services and click Add Resource.
- Select Lucid from the catalog.
- On Choose how to install Lucid, click Per-org dynamic registration. Selecting it adds the resource right away with its tools pre-configured.
Dynamic client registration
When you add the resource, the gateway registers its own OAuth client with Lucid, the credential that lets it sign users in. Lucid's own document, folder, and account permissions still apply, so an agent can only reach what the person who signed in could already reach.
Verify the connection
The gateway syncs the Lucid tools automatically. To check the connection end to end, ask your agent to run a request:
Search my Lucid documentsIf your documents come back, the connection is working.
How users connect
The first time you connect, the gateway sends you to Lucid to sign in, through your SSO if configured, and authorize the app. Review the requested access and click Grant Access. You return to the console with your Lucid account connected.
Access is per user. Each additional user connects their own Lucid account the first time their agent calls a Lucid tool: the gateway returns a sign-in link, the user authorizes once, and the tools work from then on. Each user only reaches content in their own Lucid account. Go to Connections to manage linked accounts.
Available tools
Every Lucid tool listed below carries one of the built-in tags read-only, write, or destructive.
Lucid exposes 35 tools spanning search, document creation, editing, sharing, collaboration, and organization.
| Area | Tools |
|---|---|
| Search & fetch | search, fetch, lucid_search_document, get_mcp_resource |
| Create diagrams | lucid_create_diagram_from_specification, lucid_create_org_chart, lucid_create_mind_map, lucid_create_sequence_diagram, lucid_create_erd |
| Edit content | lucid_add_block, lucid_add_line, lucid_edit_item, lucid_delete_items, lucid_add_dynamic_table, lucid_add_items_to_dynamic_table, lucid_edit_dynamic_table_metadata |
| Shapes | lucid_shape_library, lucid_shape_details |
| Export & embed | lucid_export_document_as_PNG, lucid_fetch_item_image, _lucid_create_embed, _lucid_create_embed_session_token |
| Sharing | lucid_create_document_share_link, share_document_with_collaborators |
| Comments & threads | list_document_threads, list_document_thread_comments, post_document_thread_comment |
| Integrations | lucid_list_integrations, lucid_import_integration_cards |
| Documents/folders | lucid_get_document_metadata, lucid_update_document, lucid_create_folder, lucid_update_folder, lucid_list_folder_contents |
| Other | lucid_submit_feedback |
Two of these are worth a second look before allowing them broadly:
lucid_delete_items is destructive and cannot be undone via the API, and share_document_with_collaborators/lucid_create_document_share_link change who can reach a document.
_lucid_create_embed and _lucid_create_embed_session_token are internal tools for Lucid's own MCP Apps extension rather than general-purpose agent use.
Required scopes
The gateway does not request a fixed scope list for Lucid. It registers the client without naming any scopes and records the ones Lucid returns.
Policy examples
Read-only Lucid for everyone
One deny rule blocks every mutating tool while leaving search and reads on the default path:
- In Agent Access, click Add Rule and name it "Lucid: no document mutations."
- Set the effect pill to Deny and the MCP scope pill to Lucid.
- Add these tool patterns:
lucid_create_*,lucid_add_*,lucid_edit_*,lucid_delete_items,lucid_update_*,share_document_with_collaborators,post_document_thread_comment,lucid_import_integration_cards. - Set the status to Active and click Create.
Search, fetch, shape discovery, and metadata reads keep working.
Keep sharing and deletes off the table
To allow diagram creation and editing but never let an agent change who can access a document or delete content:
- In Agent Access, click Add Rule and name it "Lucid: no sharing or deletes."
- Set the effect pill to Deny and the MCP scope pill to Lucid.
- Add the tool patterns
lucid_create_document_share_link,share_document_with_collaborators,lucid_delete_items. - Set the status to Active and click Create.
Block destructive tools
One deny rule blocks every tool tagged destructive, regardless of its name:
- In Agent Access, click Add Rule and name it "Lucid: no destructive tools."
- Set the effect pill to Deny and the MCP scope pill to Lucid.
- Open the Tools pill and pick the built-in tag
destructive. - Set the status to Active and click Create.
Next steps
- Create a policy – start from the read-only pattern in Policy examples above.
- Connections – manage the Lucid accounts your users have linked.