diff --git a/docs/pages/access-controls/access-request-plugins/ssh-approval-discord.mdx b/docs/pages/access-controls/access-request-plugins/ssh-approval-discord.mdx
index c75b0e30e8166..e2a0e609366c8 100644
--- a/docs/pages/access-controls/access-request-plugins/ssh-approval-discord.mdx
+++ b/docs/pages/access-controls/access-request-plugins/ssh-approval-discord.mdx
@@ -9,6 +9,8 @@ Access Requests. Users can then approve and deny Access Requests from within
 Discord, making it easier to implement security best practices without
 compromising productivity.
 
+(!docs/pages/includes/plugins/diagram.mdx api="Discord" action="Listen for Access Requests" messages="Discord messages" !)
+
 ## Prerequisites
 
 (!docs/pages/includes/commercial-prereqs-tabs.mdx!)
diff --git a/docs/pages/access-controls/access-request-plugins/ssh-approval-email.mdx b/docs/pages/access-controls/access-request-plugins/ssh-approval-email.mdx
index 8735c2a63f09a..5cbb721020198 100644
--- a/docs/pages/access-controls/access-request-plugins/ssh-approval-email.mdx
+++ b/docs/pages/access-controls/access-request-plugins/ssh-approval-email.mdx
@@ -9,6 +9,8 @@ at least some of their communications, Teleport's email plugin makes it
 straightforward to integrate Access Requests into your existing workflows,
 letting you implement security best practices without compromising productivity.
 
+(!docs/pages/includes/plugins/diagram.mdx api="SMTP service" action="Listen for Access Requests" messages="Email messages" !)
+
 ## Prerequisites
 
 (!docs/pages/includes/commercial-prereqs-tabs.mdx!)
diff --git a/docs/pages/access-controls/access-request-plugins/ssh-approval-mattermost.mdx b/docs/pages/access-controls/access-request-plugins/ssh-approval-mattermost.mdx
index 5de060f64a17f..6314aa672899b 100644
--- a/docs/pages/access-controls/access-request-plugins/ssh-approval-mattermost.mdx
+++ b/docs/pages/access-controls/access-request-plugins/ssh-approval-mattermost.mdx
@@ -9,6 +9,8 @@ Access Requests. Users can then approve and deny Access Requests by following th
 message link, making it easier to implement security best practices without
 compromising productivity.
 
+(!docs/pages/includes/plugins/diagram.mdx api="Mattermost" action="Listen for Access Requests" messages="Mattermost messages" !)
+
 ## Prerequisites
 
 (!docs/pages/includes/commercial-prereqs-tabs.mdx!)
diff --git a/docs/pages/access-controls/access-request-plugins/ssh-approval-msteams.mdx b/docs/pages/access-controls/access-request-plugins/ssh-approval-msteams.mdx
index 8f4be8308eb0b..a13ac9c3f2b9a 100644
--- a/docs/pages/access-controls/access-request-plugins/ssh-approval-msteams.mdx
+++ b/docs/pages/access-controls/access-request-plugins/ssh-approval-msteams.mdx
@@ -9,6 +9,8 @@ Access Requests. Users can then approve and deny Access Requests by following th
 message link, making it easier to implement security best practices without
 compromising productivity.
 
+(!docs/pages/includes/plugins/diagram.mdx api="Microsoft Teams" action="Listen for Access Requests" messages="Microsoft Teams messages" !)
+
 ## Prerequisites
 
 (!docs/pages/includes/commercial-prereqs-tabs.mdx!)
diff --git a/docs/pages/access-controls/access-request-plugins/ssh-approval-pagerduty.mdx b/docs/pages/access-controls/access-request-plugins/ssh-approval-pagerduty.mdx
index 87e7a3f45a020..abdb990085d02 100644
--- a/docs/pages/access-controls/access-request-plugins/ssh-approval-pagerduty.mdx
+++ b/docs/pages/access-controls/access-request-plugins/ssh-approval-pagerduty.mdx
@@ -16,6 +16,8 @@ the on-call team for a service affected by an incident.
 This guide will explain how to set up Teleport's Access Request plugin for
 PagerDuty.
 
+(!docs/pages/includes/plugins/diagram.mdx api="PagerDuty" action="Listen for Access Requests\nModify Access Requests" messages="Send notifications\nGet incident status" !)
+
 ## Prerequisites
 
 (!docs/pages/includes/commercial-prereqs-tabs.mdx!)
diff --git a/docs/pages/access-controls/access-request-plugins/ssh-approval-slack.mdx b/docs/pages/access-controls/access-request-plugins/ssh-approval-slack.mdx
index d21b116113536..8bc1c324f0cbb 100644
--- a/docs/pages/access-controls/access-request-plugins/ssh-approval-slack.mdx
+++ b/docs/pages/access-controls/access-request-plugins/ssh-approval-slack.mdx
@@ -9,6 +9,8 @@ Access Requests. Users can then approve and deny Access Requests from within
 Slack, making it easier to implement security best practices without
 compromising productivity.
 
+(!docs/pages/includes/plugins/diagram.mdx api="Slack" action="Listen for Access Requests" messages="Slack messages" !)
+
 Here is an example of sending an Access Request via Teleport's Slack plugin:
 
 <video controls>
diff --git a/docs/pages/includes/plugins/diagram.mdx b/docs/pages/includes/plugins/diagram.mdx
new file mode 100644
index 0000000000000..2d4b2cdccd411
--- /dev/null
+++ b/docs/pages/includes/plugins/diagram.mdx
@@ -0,0 +1,19 @@
+```mermaid
+flowchart LR
+subgraph teleport["Teleport cluster"]
+  direction LR
+  auth["Auth Service"]
+  proxy["Proxy Service"]
+end
+api[{{ api }} API]
+
+subgraph private["Private network"]
+  subgraph plugin[{{ api }} plugin]
+    id["Teleport identity file"]
+  end 
+  plugin<-- "{{ action }}\n(via reverse tunnel)"-->proxy
+end 
+proxy<-- Forward gRPC traffic -->auth
+plugin-- "{{ messages }}" -->api
+```
+