DocsExcalidrawSkill & Agent Access

Excalidraw Skill & Agent Access

Non-LLM direct APIPython 3.9+

Install the HiGantic Excalidraw skill to let a coding agent create readable, editable Canvas workflows through semantic nodes and edges, or safely read and replace complete Excalidraw scene JSON.

1. Install the skill

npx --yes skills add Aneaire/higantic-skills --skill higantic-excalidraw --global

2. Generate dedicated access

Open Settings → Excalidraw, review the Canvas design skill, and generate a key with only the scopes the coding agent needs.

Scope	Access
excalidraw:read	List Canvas pages/scenes and read scene JSON
excalidraw:write	Create, revision-safely replace, and delete scenes
excalidraw:share	Opt in to stable read-only public viewer links
excalidraw_pages:create	Create Canvas pages

The key is shown once

Store it in your operating system or CI secret manager. Never put it in a prompt, repository, command argument, or committed environment file.

export HIGANTIC_API_BASE_URL="https://agent.higantic.com"
export HIGANTIC_AGENT_ID="your-agent-id"
export HIGANTIC_API_KEY="your-scoped-key"

3. Create a validated workflow

python3 scripts/higantic_excalidraw.py pages list
python3 scripts/higantic_excalidraw.py pages create --label "Release workflow"
python3 scripts/higantic_excalidraw.py scenes create   --page-id PAGE_ID   --title "Release workflow"   --flowchart-file ./workflow.json

The flowchart file contains semantic nodes, optional stages, directed edges, and optional edge labels. HiGantic chooses coordinates, applies stage colors, separates feedback lanes, wraps labels, and returns geometry validation statistics.

Private by default, link included

Scene results include a signed-in workspace URL, stable public URL, and visibility. The public URL stays unavailable until you explicitly publish with the opt-in excalidraw:share permission.

Publish a read-only viewer

higantic canvas visibility get --page-id PAGE_ID --scene-id SCENE_ID
higantic canvas visibility set --page-id PAGE_ID --scene-id SCENE_ID --expected-version 4 --visibility public --confirm-public-sharing

The returned stable public URL opens a fitted, read-only Canvas viewer. Make it private with the same command and --visibility private; anonymous access stops immediately.

Conflict-safe updates

python3 scripts/higantic_excalidraw.py scenes get --page-id PAGE_ID --scene-id SCENE_ID
python3 scripts/higantic_excalidraw.py scenes replace --page-id PAGE_ID --scene-id SCENE_ID --expected-version 4 --flowchart-file ./workflow.json

Always replace from the version returned by the latest read. A stale version returns a conflict; read and reconcile instead of overwriting another writer. Deletion separately requires the current version and --confirm-delete.

Direct API

Routes begin at /v1/agents/{agentId}/excalidraw-pages. Bearer-only scoped authentication, no-store JSON responses, cross-agent non-enumeration, request/write rate limits, and optimistic scene versions match the Agent Access contract.