Doczoid

MCP Server

Let AI agents work in Doczoid the way you do. The Doczoid MCP server gives Claude Desktop, claude.ai, Claude Code, Cursor and other MCP clients access to your documents, diagrams and zoids — with exactly the rights of your own account, at the access level you choose.

Endpoint

https://mcp.doczoid.io/mcp

Streamable HTTP transport. A POST to https://mcp.doczoid.io/ works too.

Claude Desktop, claude.ai & Claude Code

These sign you in — no token to copy. In Claude Desktop or claude.ai go to Settings → Connectors → Add custom connector, paste the endpoint above and click Connect. You land on a Doczoid page where you pick the access level, and you're done.

Claude Code does the same from the terminal:

claude mcp add --transport http doczoid https://mcp.doczoid.io/mcp

Cursor, scripts & CI: use a token

Open app.doczoid.io and go to Settings → Profile → Connect to MCP. Create a token with the access level you need — it starts with dzm_ and is shown exactly once. Then:

claude mcp add --transport http doczoid https://mcp.doczoid.io/mcp \
  --header "Authorization: Bearer dzm_YOUR_TOKEN"

Or add it to any MCP client's configuration (e.g. .mcp.json):

{
  "mcpServers": {
    "doczoid": {
      "type": "http",
      "url": "https://mcp.doczoid.io/mcp",
      "headers": {
        "Authorization": "Bearer dzm_YOUR_TOKEN"
      }
    }
  }
}

A Read + AI refresh token lets a CI job re-generate a repo-linked document after every deploy, without being able to touch anything else. The response streams progress as NDJSON and ends with the saved result:

curl -N https://app.doczoid.io/api/repo-docs/refresh \
  -H "Authorization: Bearer dzm_YOUR_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"documentId": "DOCUMENT_ID"}'

Access levels

Read only

List teams and documents, read content, export documents.

Read + AI refresh

Read access plus "Refresh with AI" on repo-linked documents — made for CI jobs.

Full access

Everything your account can do: create, edit, organize, delete.

You pick the level when you create a token or on the sign-in consent screen; an app can never get more than you chose.

What agents can do

Documents

Create, read, edit and organize documents — markdown text and the diagram side by side.

Zoids

Build slide decks: add, edit, reorder and style slides and their content.

Folders

Create, rename and delete folders, and move documents between them.

Import & export

Round-trip .doczoid files, and export documents as Markdown or HTML.

Photos & images

Search free stock photos or upload images straight into diagrams and slides.

PortalSnips

Create reusable live-updating snippets and insert them across documents.

Security

An agent acts with exactly your rights — every request runs under the same row-level security rules as when you use the app yourself. It sees your teams, your documents, your private notes; nothing more.
Credentials are stored only as hashes and can be revoked anytime from the same settings page — connected apps included. OAuth access tokens expire after an hour and are renewed with a rotating refresh token. Requests are rate-limited per credential.
The server is stateless: no conversation or session data is stored between requests.
Content edits automatically snapshot a version first, so you can roll back any agent change from the document's version history.