Back to Browse

Canvas Api MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server exposing the Canvas LMS REST API (1,116 endpoints) for AI assistants

About

MCP server exposing the Canvas LMS REST API (1,116 endpoints) for AI assistants

Security Report

4.2
Use Caution4.2High Risk

The server implements proper authentication via Canvas API tokens stored in environment variables and demonstrates reasonable access controls. However, there are moderate security concerns around sensitive token handling in error messages, broad API gateway access without additional validation, and some input validation gaps that could be exploited. The codebase is well-structured with appropriate permission scoping for its student-focused use case. Supply chain analysis found 9 known vulnerabilities in dependencies (1 critical, 3 high severity). Package verification found 1 issue.

6 files analyzed · 18 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

What You'll Need

Set these up before or after installing:

Base URL of your Canvas LMS instance, e.g. https://yourschool.instructure.comOptional

Environment variable: CANVAS_BASE_URL

Canvas API access token (Canvas: Account > Settings > New Access Token)Required

Environment variable: CANVAS_TOKEN

Optional cap on the number of pages fetched per paginated Canvas API callOptional

Environment variable: CANVAS_MAX_PAGES

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-johannsenlum-canvas-api-mcp": {
      "env": {
        "CANVAS_TOKEN": "your-canvas-token-here",
        "CANVAS_BASE_URL": "your-canvas-base-url-here",
        "CANVAS_MAX_PAGES": "your-canvas-max-pages-here"
      },
      "args": [
        "canvas-api-mcp"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!

Canvas Api MCP Server - MCP server exposing the Canvas LMS REST API (1,116 | MCP Marketplace