Canvas MCP Server
About
An MCP server for Canvas LMS, providing full functionality for both students and instructors.
Details
- Author
- dmontgomery40
- Repository
- DMontgomery40/mcp-canvas-lms
- GitHub stars
- 30
- Downloads
- 494
- Categories
- Productivity, Design, Developer Tools, AI, Frontend, Infrastructure, Automation, Other
- Tags
- #mobile
Jump to
- Student features: course management, assignment submission, grade tracking.
-
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Canvas MCP ServerCommand (node, npx, python, etc.)npxArguments-
Argument 1
-y -
Argument 2
canvas-mcp-server
Environment-
CANVAS_DOMAIN
your_school.instructure.com -
CANVAS_API_TOKEN
your_token_here
Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
-
Argument 1
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Option 1 Claude Desktop Integration Recommended Mcp Setup
{ "mcpServers": { "canvas-mcp-server": { "command": "npx", "args": ](https://imgur.com/a/BnhgXme)["-y", "canvas-mcp-server"], "env": { "CANVAS_API_TOKEN": "your_token_here", "CANVAS_DOMAIN": "your_school.instructure.com" } } } }
# Install globally npm install -g canvas-mcp-server # Configure export CANVAS_API_TOKEN="your_token_here" export CANVAS_DOMAIN="your_school.instructure.com" # Run canvas-mcp-server
docker run -d \ --name canvas-mcp \ -p 3000:3000 \ -e CANVAS_API_TOKEN="your_token" \ -e CANVAS_DOMAIN="school.instructure.com" \ -e MCP_TRANSPORT="streamable-http" \ -e MCP_HTTP_HOST="0.0.0.0" \ -e MCP_HTTP_PORT="3000" \ -e MCP_HTTP_PATH="/mcp" \ ghcr.io/dmontgomery40/mcp-canvas-lms:latest
The server supports two explicit transport modes:
- stdio(default): best for Claude Desktop/Codex/Cursor local MCP wiring.
- streamable-http: best for local HTTP integrations and containerized workflows.
# Required Canvas auth CANVAS_API_TOKEN=your_token CANVAS_DOMAIN=your_school.instructure.com # Transport selection MCP_TRANSPORT=stdio # or streamable-http # Streamable HTTP settings MCP_HTTP_HOST=127.0.0.1 MCP_HTTP_PORT=3000 MCP_HTTP_PATH=/mcp MCP_HTTP_STATEFUL=true MCP_HTTP_JSON_RESPONSE=true MCP_HTTP_ALLOWED_ORIGINS=
"Create a new course called 'Advanced Biology' in account 123"
Now properly creates courses with required account_id parameter
"Create a new student user John Doe with email john.doe@school.edu in our main account"
Creates user accounts with proper pseudonym and enrollment setup
"Generate an enrollment report for account 456 for the current term"
Initiates Canvas reporting system for institutional analytics
"Show me all published Computer Science courses in our Engineering account"
Advanced filtering and searching across account course catalogs
"What assignments do I have due this week?"
Lists upcoming assignments with due dates, points, and submission status
"Help me submit my essay for English 101 Assignment 3"
Guides through text submission with formatting options
"What's my current grade in Biology?"
Shows current scores, grades, and assignment feedback
"Show me the latest discussion posts in my Philosophy class"
Displays recent discussion topics and enables posting responses
"What modules do I need to complete in Math 200?"
Shows module completion status and next items to complete
- Log into Canvas→ Account → Settings
- Scroll to "Approved Integrations"
- Click "+ New Access Token"
- Enter description: "Claude MCP Integration"
- Copy the generated tokenSave securely!
⚠️Account Admin Note: For account-level operations, ensure your API token has administrative privileges.
git clone https://github.com/DMontgomery40/mcp-canvas-lms.git cd mcp-canvas-lms cp .env.example .env # Edit .env with your Canvas credentials docker-compose up -d
kubectl create secret generic canvas-mcp-secrets \ --from-literal=CANVAS_API_TOKEN="your_token" \ --from-literal=CANVAS_DOMAIN="school.instructure.com" kubectl apply -f k8s/
# Check application health curl http://localhost:3000/health # Or use the built-in health check npm run health-check
# Setup development environment git clone https://github.com/DMontgomery40/mcp-canvas-lms.git cd mcp-canvas-lms npm install # Start development with hot reload npm run dev:watch # Run tests npm run test npm run coverage # Code quality npm run lint npm run type-check
- canvas_health_check- Check API connectivity
- canvas_list_courses- List all your courses
- canvas_get_course- Get detailed course info
- canvas_list_assignments- List course assignments
- canvas_get_assignment- Get assignment details
- canvas_submit_assignment- Submit assignment work
- canvas_get_submission- Check submission status
- canvas_list_modules- List course modules
- canvas_get_module- Get module details
- canvas_list_module_items- List items in a module
- canvas_mark_module_item_complete- Mark items complete
- canvas_list_discussion_topics- List discussion topics
- canvas_get_discussion_topic- Get discussion details
- canvas_post_to_discussion- Post to discussions
- canvas_list_announcements- List course announcements
- canvas_get_user_grades- Get your grades
- canvas_get_course_grades- Get course-specific grades
- canvas_get_dashboard- Get dashboard info
- canvas_get_dashboard_cards- Get course cards
- canvas_get_upcoming_assignments- Get due dates
- canvas_list_calendar_events- List calendar events
- canvas_list_files- List course files
- canvas_get_file- Get file details
- canvas_list_folders- List course folders
- canvas_list_pages- List course pages
- canvas_get_page- Get page content
- canvas_list_conversations- List messages
- canvas_get_conversation- Get conversation details
- canvas_create_conversation- Send messages
- canvas_list_notifications- List notifications
- canvas_get_syllabus- Get course syllabus
- canvas_get_user_profile- Get user profile
- canvas_update_user_profile- Update profile
- canvas_create_course- Create new courses(FIXED: now requires account_id)
- canvas_update_course- Update course settings
- canvas_create_assignment- Create assignments
- canvas_update_assignment- Update assignments
- canvas_list_assignment_groups- List assignment groups
- canvas_submit_grade- Grade submissions
- canvas_enroll_user- Enroll students
- canvas_list_quizzes- List course quizzes
- canvas_get_quiz- Get quiz details
- canvas_create_quiz- Create quizzes
- canvas_start_quiz_attempt- Start quiz attempts
- canvas_list_rubrics- List course rubrics
- canvas_get_rubric- Get rubric details
- canvas_get_account- Get account details
- canvas_list_account_courses- List courses in an account
- canvas_list_account_users- List users in an account
- canvas_create_user- Create new users in accounts
- canvas_list_sub_accounts- List sub-accounts
- canvas_get_account_reports- List available reports
- canvas_create_account_report- Generate account reports
{ "tool": "canvas_create_course", "arguments": { "name": "My Course" // ❌ Missing account_id - caused "page not found" } }
{ "tool": "canvas_create_course", "arguments": { "account_id": 123, // ✅ Required account_id "name": "My Course", "course_code": "CS-101" } }
Student:"I need to check my upcoming assignments and submit my English essay"
Claude:I'll help you check your upcoming assignments and then assist with submitting your English essay. Let me start by getting your upcoming assignments...
[Claude usescanvas_get_upcoming_assignmentsthen helps withcanvas_submit_assignment]
Instructor:"Create a new Advanced Physics course in the Science department and enroll my teaching assistant"
Claude:I'll help you create the Advanced Physics course in your Science department account and then enroll your TA...
[Claude usescanvas_create_coursewith proper account_id, thencanvas_enroll_user]
Administrator:"Generate an enrollment report for all Computer Science courses this semester"
Claude:I'll generate a comprehensive enrollment report for your CS courses...
[Claude usescanvas_list_account_courseswith filters, thencanvas_create_account_report]
- ❌401 Unauthorized: Check your API token and permissions
- ❌404 Not Found: Verify course/assignment IDs and access rights
- ❌"Page not found" on course creation: Update to v2.2.0 for account_id fix
- ❌Timeout: IncreaseCANVAS_TIMEOUTor check network connectivity
We welcome contributions! SeeCONTRIBUTING.mdfor guidelines.
git clone https://github.com/DMontgomery40/mcp-canvas-lms.git cd mcp-canvas-lms npm install npm run dev:watch # Make changes, add tests, submit PR
- v2.3: Enhanced reporting, bulk operations, advanced search
- v2.4: Mobile support, offline capability, analytics dashboard
- v3.0: Multi-tenant, GraphQL API, AI-powered insights
- 🐛Bug Reports:GitHub Issues
- 💬Questions:GitHub Discussions
- 📖Documentation:[Wiki
canvas_health_check
Check API connectivity.
canvas_list_courses
List all your courses.
canvas_get_course
Get detailed course info.
canvas_list_assignments
List course assignments.
canvas_get_assignment
Get assignment details.
canvas_submit_assignment
Submit assignment work.
canvas_get_submission
Check submission status.
canvas_list_modules
List course modules.
canvas_get_module
Get module details.
canvas_list_module_items
List items in a module.
canvas_mark_module_item_complete
Mark items complete.
canvas_list_discussion_topics
List discussion topics.
canvas_get_discussion_topic
Get discussion details.
canvas_post_to_discussion
Post to discussions.
canvas_list_announcements
List course announcements.
canvas_get_user_grades
Get your grades.
canvas_get_course_grades
Get course-specific grades.
canvas_get_dashboard
Get dashboard info.
canvas_get_dashboard_cards
Get course cards.
canvas_get_upcoming_assignments
Get due dates.
canvas_list_calendar_events
List calendar events.
canvas_list_files
List course files.
canvas_get_file
Get file details.
canvas_list_folders
List course folders.
canvas_list_pages
List course pages.
canvas_get_page
Get page content.
canvas_list_conversations
List messages.
canvas_get_conversation
Get conversation details.
canvas_create_conversation
Send messages.
canvas_list_notifications
List notifications.
canvas_get_syllabus
Get course syllabus.
canvas_get_user_profile
Get user profile.
canvas_update_user_profile
Update profile.
canvas_create_course
Create new courses.
canvas_update_course
Update course settings.
canvas_create_assignment
Create assignments.
canvas_update_assignment
Update assignments.
canvas_list_assignment_groups
List assignment groups.
canvas_submit_grade
Grade submissions.
canvas_enroll_user
Enroll students.
canvas_list_quizzes
List course quizzes.
canvas_get_quiz
Get quiz details.
canvas_create_quiz
Create quizzes.
canvas_start_quiz_attempt
Start quiz attempts.
canvas_list_rubrics
List course rubrics.
canvas_get_rubric
Get rubric details.
canvas_get_account
Get account details.
canvas_list_account_courses
List courses in an account.
canvas_list_account_users
List users in an account.
canvas_create_user
Create new users in accounts.
canvas_list_sub_accounts
List sub-accounts.
canvas_get_account_reports
List available reports.
canvas_create_account_report
Generate account reports.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"canvas mcp server": {
"env": {
"CANVAS_DOMAIN": "your_school.instructure.com",
"CANVAS_API_TOKEN": "your_token_here"
},
"args": [
"-y",
"canvas-mcp-server"
],
"command": "npx"
}
}
}
Linux
{
"env": {
"CANVAS_DOMAIN": "your_school.instructure.com",
"CANVAS_API_TOKEN": "your_token_here"
},
"args": [
"-y",
"canvas-mcp-server"
],
"command": "npx"
}
Macos
{
"env": {
"CANVAS_DOMAIN": "your_school.instructure.com",
"CANVAS_API_TOKEN": "your_token_here"
},
"args": [
"-y",
"canvas-mcp-server"
],
"command": "npx"
}
Windows
{
"env": {
"CANVAS_DOMAIN": "your_school.instructure.com",
"CANVAS_API_TOKEN": "your_token_here"
},
"args": [
"/c",
"npx",
"-y",
"canvas-mcp-server"
],
"command": "cmd"
}
Canvas MCP Server v2.3.0
Security and disclosure history
This project is an independent MCP server for Canvas LMS APIs. It is not affiliated with, endorsed by, or maintained by Instructure or Canvas.
In June 2025, during development of this MCP, I identified a Broken Access Control issue in the Canvas environment at bootcampspot.instructure.com. The issue exposed personally identifiable information for other students enrolled in my course.
I reported the issue through Bugcrowd on June 5, 2025, and also contacted Instructure / Canvas security channels directly. The Bugcrowd report was later closed as "Not Applicable." In subsequent correspondence, Instructure stated that the bootcampspot.instructure.com environment was outside its control.
Public references:
- Disclosure thread: https://www.reddit.com/r/cybersecurity/comments/1t6wmkw/reported_a_broken_access_control_bug_to/
- Bugcrowd activity timeline: https://imgur.com/gallery/canvas-vuln-declared-n-11-months-ago-zYfHnBs
- Later Instructure / BootcampSpot correspondence: https://imgur.com/a/BnhgXme
This repository does not publish exploit steps, affected tenant details beyond what is already public, live URLs, screenshots containing student data, or proof-of-concept abuse flows.
Separately, Instructure publicly disclosed a Canvas security incident in May 2026, and public reporting has linked the incident to ShinyHunters claims. This repository makes no claim that the June 2025 report caused, enabled, predicted, or is technically connected to the May 2026 incident.
This disclosure is documented here for project history and transparency only.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.





