
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
canva-mcp
Advanced tools
mcp-name: io.github.wmarceau/canva-mcp
MCP (Model Context Protocol) server for the Canva Connect API. Create designs, manage assets, use brand templates with autofill, and export graphics - all through Claude.
pip install canva-mcp
| Variable | Required | Description |
|---|---|---|
CANVA_CLIENT_ID | Yes | Canva Connect API Client ID |
CANVA_CLIENT_SECRET | Yes | Canva Connect API Client Secret |
CANVA_TOKEN_FILE | No | Path to token storage (default: ~/.canva_tokens.json) |
Get your credentials at developers.canva.com
Add to your Claude Desktop config (~/.claude.json):
{
"mcpServers": {
"canva": {
"command": "python",
"args": ["-m", "canva_mcp.server"],
"env": {
"CANVA_CLIENT_ID": "your-client-id",
"CANVA_CLIENT_SECRET": "your-client-secret"
}
}
}
}
canva_get_profile - Get current user's Canva profile informationcanva_list_designs - List user's designs with optional searchcanva_get_design - Get details of a specific designcanva_create_design - Create a new design (presentation, social post, poster, etc.)canva_delete_design - Delete a designcanva_upload_asset - Upload image/video/audio from URL or local filecanva_list_assets - List assets in media librarycanva_get_asset - Get asset detailscanva_delete_asset - Delete an assetcanva_list_folders - List folderscanva_create_folder - Create a new foldercanva_delete_folder - Delete a foldercanva_list_brand_templates - List available brand templatescanva_get_brand_template - Get template detailscanva_get_template_dataset - Get autofill schema for a templatecanva_autofill_template - Generate personalized designs from brand templatescanva_export_design - Export design to PDF, PNG, JPG, GIF, MP4, or PPTXcanva_download_export - Download exported file to local diskcanva_list_comments - List comments on a designcanva_add_comment - Add a comment to a designcanva_authenticate - Re-authenticate with Canva (opens browser)Generate personalized mockup websites or graphics for prospects:
1. Create a brand template with placeholder fields
2. Use canva_autofill_template with prospect data
3. Export and send with outreach
Create multiple social posts from a template:
1. Get template schema with canva_get_template_dataset
2. Loop through data, calling canva_autofill_template
3. Export each design
Organize and manage your media library:
1. Create folders for different projects
2. Upload assets from URLs or local files
3. Use assets in new designs
Supported design types for canva_create_design:
presentation, doc, whiteboardinstagram_post, instagram_storyfacebook_postyoutube_thumbnailposter, flyer, business_card, logoa4_document, us_letterSupported formats for canva_export_design:
pdf (default)png, jpg, gifmp4 (for animated designs)pptx (PowerPoint)Quality options: regular, high
On first use, the MCP will open a browser window for Canva OAuth authentication. Tokens are saved to ~/.canva_tokens.json and automatically refreshed.
MIT
MCP Documentation: See modelcontextprotocol.io
FAQs
MCP server for Canva Connect API - design creation, templates, assets, exports
The pypi package canva-mcp receives a total of 24 weekly downloads. As such, canva-mcp popularity was classified as not popular.
We found that canva-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.