Miro MCP Server: Setup, Tools and Safety

Q: What is Miro MCP?

It's Miro's hosted MCP server at https://mcp.miro.com/. It lets an AI agent read your Miro boards, create diagrams, docs and tables, make boards and reply to comments. Nothing runs on your machine.

Q: Is there an official Miro MCP server?

Yes. Miro hosts it at https://mcp.miro.com/, and it's in the MCP Registry as io.github.miroapp/mcp-server. The plugins, skills and docs live in the miroapp/miro-ai repo, but the server code isn't public.

Q: How do I connect Miro to Claude Code?

Run claude mcp add --transport http miro https://mcp.miro.com, start claude, open /mcp and sign in to Miro, then pick your team. Or install Miro's plugin with /plugin marketplace add miroapp/miro-ai and /plugin install miro@miro-ai. Use one, not both.

Q: Why did my Miro MCP tools stop working?

Miro removed its older layout_*, diagram_*, doc_*, context_* and board_list_items tools on 14 September 2026. The replacements are the canvas_* tools. Fully disconnect and reconnect the server so your client picks up the new list, and update any prompts or skills that name the old tools.

On this page

Miro MCP Server: Setup, Team Access, Tools and Safety (Nov 2026)

The Miro MCP server is Miro's own hosted server at https://mcp.miro.com/. Add that URL to Claude Code, Cursor, VS Code or Claude, sign in with OAuth and pick one Miro team. The agent can then read and edit boards you can open. There's no read-only option. TrustedMCP grades it B.

What the Miro MCP server does

It lets an AI agent work on your Miro boards. You paste a board link into the chat, and the agent can read what's on it, find frames and items, draw diagrams, add docs and tables, create boards and reply to comments. Miro's MCP docs say it "works for all Miro plans, even free teams".

Typical uses:

Turn a board of sticky notes into a written summary or a spec.
Draw a flowchart, sequence diagram or ER diagram from code or a description.
Keep a Miro table in step with tasks from another tool.
Build code from a wireframe or design on a board.

We read Miro's docs, changelog, GitHub repo, the MCP Registry entry and the server's public OAuth metadata for this guide. We did not sign in or run any tools, so the tool behaviour below is what Miro and its users document.

The tools changed in September 2026

Miro removed 15 older tools on 14 September 2026. Its changelog post Legacy MCP board tools have been removed lists the swaps:

Removed	Use instead
`board_list_items`, `context_get`	`canvas_search` plus `canvas_read_as_svg`
`context_explore`	`canvas_search` with `result_mode="overview"`
`layout_create`, `diagram_create`, `doc_create`	`canvas_create_from_svg`
`layout_update`, `doc_update`, `diagram_update_mermaid`	`canvas_update_from_svg`
`layout_read`, `doc_get`	`canvas_read_as_svg`
`layout_get_dsl`, `diagram_get_dsl`	`canvas_get_canvas_composer_skill` (plus `canvas_load_format_skill` for diagrams)

The table_* tools stay for now, and Miro says they "will be deprecated at a later date". Some of Miro's own pages still show the old tool list, and so do many third-party guides. If a prompt or skill calls a tool that's gone, it fails.

A user who checked on 22 September 2026 (miro-ai issue #67) saw these tool groups: canvas_*, board_*, comment_*, image_*, table_*, space_*, prototype_*, blog_post_*, section_* and user_who_am_i. Ask your client to list the Miro tools for the current set.

Miro MCP setup in Claude Code, Cursor, VS Code and Claude

You need a Miro account and an MCP client. Nothing runs on your machine. Use one setup method per client. Miro warns that a plugin plus a manual entry gives you two servers, each with its own sign-in, and "duplicate tools and auth confusion".

Claude Code. This is the command from Miro's getting-started page:

claude mcp add --transport http miro https://mcp.miro.com

Start claude, open /mcp and complete the Miro sign-in. More options, such as adding it for one project only, are in our Claude Code MCP setup guide.

Miro also ships a Claude Code plugin that bundles the server with its skills (board browsing, code review on a board, diagrams and more). The miro-ai README installs it with:

/plugin marketplace add miroapp/miro-ai
/plugin install miro@miro-ai

Skills are instruction files your agent loads, so read what a plugin adds before you install it. Pick the plugin or the claude mcp add line, not both.

Cursor. Miro points to its plugin on the Cursor Marketplace. To add it by hand, the README gives this config:

{
  "mcpServers": {
    "miro": {
      "url": "https://mcp.miro.com/"
    }
  }
}

Click Connect and finish the OAuth sign-in.

VS Code with GitHub Copilot. Open Miro's entry in the GitHub MCP Registry, choose Install in VS Code, confirm in VS Code and sign in. If you'd rather edit mcp.json yourself, the standard VS Code format (ours, not from Miro's docs) is:

{
  "servers": {
    "miro": {
      "type": "http",
      "url": "https://mcp.miro.com/"
    }
  }
}

Workspace versus user config is covered in our VS Code MCP server guide.

Claude on the web and Claude Desktop. Miro's docs use the connector: click + in the chat box, then Add connectors, search for Miro, click Connect, sign in and pick your team.

When you sign in, Miro asks you to pick one team. Miro's setup guide in the repo says: "You can only access boards from the team you selected during OAuth." Inside that team, the agent sees only boards your account can already open, and your board permissions still apply.

One team at a time. Miro's FAQ says a new sign-in for another team or client replaces the old connection. To switch, sign in again while viewing a board in the other team.
Wrong team is the usual "board not found". Paste the full board URL in your prompt and check you signed in to that board's team.
The scopes are broad within the team. The server's OAuth metadata lists boards:read, boards:write, openid and email. When we sent a request without a token on 2026-11-05, the 401 named no scope. The MCP authorization spec (2026-07-28) says that in that case clients should "use all scopes defined in scopes_supported". So your client asks for read and write, and Miro's docs offer no read-only switch.

Signing in this way is safer than an API key: no long-lived secret sits in a config file, and the sign-in uses PKCE. Our guide to MCP authentication explains why that matters.

Miro MCP on Enterprise plans

On Enterprise, the server is off by default. The FAQ says an admin turns it on under Admin settings > Apps & Integrations > MCP, for the whole organization or for chosen teams. Until then, users get an "MCP not enabled" error. Miro's admin guide has the steps.

Things to check before you switch it on:

Beta terms. The Enterprise guide in the repo asks admins to read Miro's Beta Acknowledgement before enabling it. Miro's main MCP pages don't say "beta", so ask your account team which terms apply to you.
Audit logs. The repo's Enterprise guide says MCP actions are logged in your audit trail. The FAQ says audit, client and tool limits and rate controls are still evolving. Test that the events you need actually show up.
Data handling. Miro says content "is not stored by the MCP server", and board data is fetched live. Whatever the agent reads still goes to your AI client and its model, so your AI tool's data terms apply to it too.

What the Miro MCP server can change

There's no read-only mode, so plan for writes. Going by Miro's docs and changelog, the server can:

Create boards in your team.
Add and edit content on any board you can edit: shapes, sticky notes, frames, text, diagrams, docs and tables.
Sync table rows, adding or updating rows by key.
Reply to comments and resolve threads, which other people see.

We found no documented tool that deletes a board. The tool list has changed a lot this year, so check the live list before you rely on that.

Two other things to know:

Board content is untrusted input. Anyone who can edit a board can leave text there. When the agent reads it, that text can carry instructions aimed at the agent. Our prompt injection guide explains the risk, which is highest when one agent can read shared boards and also has other write tools.
Comment replies go out as you. Replies and resolved threads appear under your account, so check them before you approve.

How to limit what the Miro MCP can do

Sign in to the smallest team that has the boards you need. The agent can reach every board you can open in that team, so a small project team is better than your company-wide one.
Keep approval prompts on for writes. In Claude Code, any Miro tool you don't allow asks first. Allow only the read tools, using names from Miro's changelog:

{
  "permissions": {
    "allow": [
      "mcp__miro__canvas_search",
      "mcp__miro__canvas_read_as_svg"
    ]
  }
}

Tool names follow mcp__<server>__<tool>, so this assumes you named the server miro. Run /mcp to check the live names first. Everything else, such as canvas_create_from_svg or table_sync_rows, then needs your OK. Our tool annotations guide explains why a tool's "read-only" label is only a hint. 3. Point it at one board. Paste the exact board link, and if you can, a link to one frame. Miro says links with moveToWidget or focusWidget limit the operation to that item. 4. Test on a copy. Duplicate an important board and let the agent work on the copy first. Diagrams usually take a few rounds to come out right.

Troubleshooting the Miro MCP server

"Board not found" or access denied. Use the full board URL, sign in to that board's team, and check you can open the board yourself.
Tool not found, or calls fail after September 2026. The tool was probably one of the removed ones. Miro says some clients cache the tool list, so "fully disconnect and reconnect" the server.
Duplicate Miro tools. You have both a plugin and a manual entry. Remove one.
Asked to sign in again after a few hours. A user reported a refresh token rejected about six hours after it was issued (miro-ai issue #59, still open on 2026-11-05). Signing in again fixes it for now. Unattended jobs may break.
"MCP not enabled". You're on Enterprise and an admin hasn't turned it on.

Official Miro MCP or a community server?

Use Miro's. The MCP Registry lists it as io.github.miroapp/mcp-server (version 1.0.2, published 2026-03-06), pointing at https://mcp.miro.com/. The older community evalstate/mcp-miro (113 stars) hasn't had a push since December 2024. k-jarzyna/mcp-miro (65 stars) is active. Community servers run on your machine and you set up their access yourself. We haven't graded them.

Why the Miro MCP server grades B

Scored against our trust scoring rubric:

Authentication, 18 of 30. OAuth 2.1 with PKCE is the default, a sign-in covers one team, and a request with no token gets a 401. But clients get read and write together, and there's no read-only option. That's the biggest deduction, and the same score Notion's server and Figma's get for similar reasons.
Maintenance, 18 of 25. Active: the tool overhaul shipped on 14 September 2026, and the miro-ai repo had commits from two people up to 17 September. But the server's source isn't public. The repo holds plugins, skills and docs, so we can't see who maintains the server itself. Closed-source hosted servers score one band lower here.
Known CVEs, 25 of 25. OSV, GitHub advisories and the repo's security tab showed nothing on 2026-11-05.
Transport, 20 of 20. Streamable HTTP over TLS with HSTS, and plain HTTP redirects to HTTPS. Nothing runs locally.

Overall: grade B. More detail is on the Miro MCP listing.

A B here doesn't mean the server is careless. Its weak spot is that a sign-in always includes write access, and team choice plus approval prompts cover most of that.

Want a Miro agent that only touches certain boards, or a workflow Miro's tools don't cover? Tell us what you need to connect.

Frequently asked questions

What is Miro MCP?

It's Miro's hosted MCP server at https://mcp.miro.com/. It lets an AI agent read your Miro boards, create diagrams, docs and tables, make boards and reply to comments. Nothing runs on your machine.

Is there an official Miro MCP server?

Yes. Miro hosts it at https://mcp.miro.com/, and it's in the MCP Registry as io.github.miroapp/mcp-server. The plugins, skills and docs live in the miroapp/miro-ai repo, but the server code isn't public.

Is the Miro MCP server free?

Miro's docs say it works on all plans, including free teams. Miro doesn't publish a separate price for it. Your plan's API limits apply, and some AI features use Miro AI credits, so check Miro's pricing for your plan.

How do I connect Miro to Claude Code?

Run claude mcp add --transport http miro https://mcp.miro.com, start claude, open /mcp and sign in to Miro, then pick your team. Or install Miro's plugin with /plugin marketplace add miroapp/miro-ai and /plugin install miro@miro-ai. Use one, not both.

How do I set up the Miro MCP server in Cursor or VS Code?

In Cursor, install the Miro plugin from the Cursor Marketplace, or add https://mcp.miro.com/ as a server URL in your MCP config. In VS Code, install it from Miro's page in the GitHub MCP Registry. Both then ask you to sign in with OAuth.

Can the Miro MCP server read every board I have?

No. It reads only boards in the one team you pick at sign-in, and only boards you can already open. To work in a second team, sign in again for that team, which replaces the first connection.

Does the Miro MCP server have a read-only mode?

No. Sign-in asks for read and write access together. To keep it read-only in practice, allow only read tools such as canvas_search and canvas_read_as_svg in your client and make every other tool ask first.

Is the Miro MCP server safe to use?

TrustedMCP grades it B. Sign-in uses OAuth 2.1 with PKCE and covers one team, with no long-lived secret in a config file. The weak spot is that every sign-in includes write access, so sign in to a small team and keep approval prompts on for write tools.

Why did my Miro MCP tools stop working?

Miro removed its older layout_*, diagram_*, doc_*, context_* and board_list_items tools on 14 September 2026. The replacements are the canvas_* tools. Fully disconnect and reconnect the server so your client picks up the new list, and update any prompts or skills that name the old tools.

Why can't I connect Miro MCP at work?

If your company is on Miro Enterprise, the server is off by default. An admin has to turn it on under Admin settings > Apps & Integrations > MCP, for the whole organization or for your team.