Back to Home
jonasneves icon

canvas-mcp-server

Verified Safe

by jonasneves

Overview

This server acts as a local bridge, enabling Claude Desktop to access a user's Canvas LMS data (courses, assignments, grades, events) through a Chrome extension via the Model Context Protocol (MCP) for AI assistance.

Installation

Run Command
node native-host/host.js

Environment Variables

  • CANVAS_MCP_PORT
  • CANVAS_MCP_LOG
  • CANVAS_MCP_VERBOSE
  • CANVAS_MCP_CORS_ORIGINS

Security Notes

The server operates locally, binding only to `localhost` for HTTP communication with the Chrome extension, and uses `stdio` for communication with Claude Desktop. It does not store Canvas credentials, relying on the browser's active Canvas session. CORS is broadly enabled (`Access-Control-Allow-Origin: *`) for the local HTTP server, which is acceptable given its `localhost` binding but could be tightened if the extension's origin were known and fixed. `JSON.parse` is used on `stdin` input; while this is standard for native messaging, robust error handling is present. No hardcoded secrets, obfuscation, or obvious malicious patterns were detected.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassMedium
Avg Tokens1500
Stars0
Forks0
Last Update2026-01-18

Tags

MCPCanvas LMSClaude DesktopNative MessagingEducation