# Lucid

> Lucid Software Inc. is the visual collaboration company behind the Lucid Suite — Lucidchart (intelligent diagramming), Lucidspark (virtual whiteboarding) and Lucidscale (cloud visualization). The Lucid Developer Platform publishes three OpenAPI-described surfaces (REST, Data, SCIM 2.0), an in-editor Extension API, an Embed SDK, and an OAuth-gated remote MCP server.

Generated by the API Evangelist enrichment pipeline on 2026-08-01. Lucid publishes no llms.txt of its own (probed: developer.lucid.co/llms.txt 404, lucid.co/llms.txt 404, lucid.app/llms.txt 404), so this file is generated from apis.yml and the artifacts in this repository.

## APIs

- [Lucid REST API](https://developer.lucid.co/reference/api): Documents, folders, sharing, embeds, comments, users, teams, repositories, legal holds, subscriptions, licenses, audit logs and Lucidscale cloud model sync. 154 operations. Base URL https://api.lucid.co
- [Lucid Data API](https://developer.lucid.co/reference/api): Data sets, data sources, collections, field-definition schemas and data items behind data-linked diagrams. 50 operations. Base URL https://data.lucid.app
- [Lucid SCIM API](https://developer.lucid.co/reference/overview-scim): SCIM 2.0 user and group provisioning for Enterprise accounts. 15 operations. Base URL https://users.lucid.app/scim/v2
- [Lucid MCP Server](https://developer.lucid.co/docs/mcp): OAuth-protected remote MCP server for AI clients. Endpoint https://mcp.lucid.app/mcp
- [Lucid ChatGPT Plugin API](https://lucid.app/.well-known/ai-plugin.json): Create a diagram from Mermaid source. Base URL https://mlai.lucid.app

## Specs

- [lucid-rest-api-openapi.yml](openapi/lucid-rest-api-openapi.yml): OpenAPI 3.0.3, 125 paths / 154 operations
- [lucid-data-api-openapi.yml](openapi/lucid-data-api-openapi.yml): OpenAPI 3.0.3, 18 paths / 50 operations
- [lucid-scim-api-openapi.yml](openapi/lucid-scim-api-openapi.yml): OpenAPI 3.0.3, 7 paths / 15 operations
- [lucid-chatgpt-plugin-openapi.yaml](openapi/lucid-chatgpt-plugin-openapi.yaml): OpenAPI 3.1.0, 1 operation, saved verbatim from https://lucid.app/ai/openapi.yaml

## Authentication

- API key: HTTP bearer, account-scoped, permissions set by grants. https://developer.lucid.co/docs/api-keys
- OAuth 2.0 authorization code + PKCE. Authorize https://lucid.app/oauth2/authorize · Token https://api.lucid.co/oauth2/token
- Discovery: https://lucid.app/.well-known/oauth-authorization-server
- 143 scopes derived from the specs: [scopes/lucid-scopes.yml](scopes/lucid-scopes.yml)
- Profile: [authentication/lucid-authentication.yml](authentication/lucid-authentication.yml)

## Conventions

- [conventions/lucid-conventions.yml](conventions/lucid-conventions.yml): pagination (cursor on audit logs, SCIM startIndex/count, Data API start/end), Lucid-Request-As impersonation, Accept-header export negotiation, versioning
- No idempotency-key contract, no RFC 9457 problem+json, no documented rate-limit headers
- Rate limits: 750 req/min per user (Data API); 300 requests in 5 seconds per account on document search. https://developer.lucid.co/reference/rate-limits
- [errors/lucid-problem-types.yml](errors/lucid-problem-types.yml): 4xx/5xx catalog derived from the specs

## Agents

- [mcp/lucid-mcp.yml](mcp/lucid-mcp.yml): both MCP servers, their OAuth metadata, and the 6 captured documentation tools
- [mcp/lucid-tool-crosswalk.yml](mcp/lucid-tool-crosswalk.yml): MCP tools vs REST operations
- [skills/_index.yml](skills/_index.yml): packaged agent skills grounded in real operationIds
- [agentic-access/lucid-agentic-access.yml](agentic-access/lucid-agentic-access.yml): recommended x-agentic-access contracts for all 220 operations
- No A2A agent card published (probed /.well-known/agent-card.json and /.well-known/agent.json on every host)

## Docs

- [Developer portal](https://developer.lucid.co/)
- [Getting started](https://developer.lucid.co/docs/welcome)
- [API reference](https://developer.lucid.co/reference/api)
- [Access scopes](https://developer.lucid.co/reference/access-scopes)
- [Rate limits](https://developer.lucid.co/reference/rate-limits)
- [Extension API](https://developer.lucid.co/docs/lucid-extension-api)
- [lucid-package CLI](https://developer.lucid.co/docs/lucid-package-cli)
- [MCP](https://developer.lucid.co/docs/mcp)
- [Developer community](https://community.lucid.co/lucid-for-developers-6)

## Operations

- [Status page](https://status.lucid.co/) (Atlassian Statuspage, JSON at /api/v2/status.json)
- [Release notes](https://community.lucid.co/product-updates)
- [Security](https://lucid.co/security) — HackerOne bug bounty, security@lucid.co
- [Trust center](https://trust.lucid.co/) — SOC 2 Type II, ISO 27001:2022, ISO 27701, ISO 42001, CSA STAR, PCI DSS, FedRAMP Moderate, TX-RAMP, IRAP
- [GitHub](https://github.com/lucidsoftware)

## Packages

- [lucid-extension-sdk](https://www.npmjs.com/package/lucid-extension-sdk) — npm, Apache-2.0
- [lucid-package](https://www.npmjs.com/package/lucid-package) — npm CLI, Apache-2.0
- No first-party server-side REST SDK is published.