AI diagram generator

AI Azure architecture diagram generator.

From Bicep, ARM or Terraform, without granting a reader role on the subscription.

Download for macOS
v0.1.33 · .dmg · Apple Silicon & Intel
Signed & notarized by Apple · opens without a Gatekeeper warning
sha256 698955a0187bc039f4c74f5d05a9f10fbb27376a45788a0a241d1326b73873c7
Download for Windows instead
$curl -fsSL https://lucidtrain.com/install.sh | sh

Sources it reads

Bicep files, ARM templates, Terraform using the azurerm provider, and Kubernetes manifests for AKS workloads. Bicep in particular reads well, because its module structure and symbolic references map cleanly onto components and edges without much inference.

How Lucid Train draws one

Describe what you want, or point it at a repository. The agent emits a semantic graph of nodes and edges with no coordinates, and the ELK layout engine computes positions and orthogonal routing. That separation is the reason the output cannot come back with boxes overlapping or arrows crossing through cards, which is the characteristic failure when a language model is asked to place things on a canvas itself. It also means editing is editing the graph: change a component and the layout re-solves rather than drifting out of alignment.

Resource groups are organisation, not architecture

Azure diagrams often use resource group boundaries as the primary grouping, which reflects how resources are administered rather than how the system works. Tiers describe the system; resource group membership becomes a note. If governance is the subject, draw that separately rather than letting it dominate the architecture picture.

Managed identity edges are worth drawing

Azure systems lean heavily on managed identities for service-to-service authentication, and those relationships are real edges that rarely appear in hand-drawn diagrams. Showing which identity a component uses to reach which resource makes an access model visible that is otherwise spread across role assignments.

Local, offline, your models

It runs as a desktop application. Against a local Ollama model the whole thing works offline with no API key and no telemetry, which is the practical difference from every browser-based diagram tool: your architecture never leaves the machine.

Azure services by tier

ServiceTier
Front Door, CDN, Application GatewayEdge
API ManagementEdge
App Service, Container Apps, AKSApplication
Functions, Logic AppsApplication
SQL Database, Cosmos DBData
Blob Storage, FilesData
Cache for RedisData
Service Bus, Event Grid, Event HubsDrawn as edges
Entra ID, Key VaultAuthentication boundary
Monitor, Application InsightsInfrastructure

Try it

shell
$ Read the Bicep in this directory and draw the Azure architecture. Group by tier and show which managed identities reach which resources.
FAQ

Questions

Does it need an Azure subscription?

No. It reads files, so no subscription, no reader role and no authentication.

Bicep or ARM?

Both. Bicep produces the better diagram because it is more readable and its references are explicit; ARM templates work but are noisier.

Does it use official Azure icons?

Bundled service icons that render offline. Some services fall back to a generic glyph rather than the exact mark.

Can it diagram AKS workloads too?

Yes, from the manifests, and that is usually a separate diagram: the infrastructure that provisions the cluster and the workloads running on it are different levels of zoom.

Related