
Security News
CVE Volume Surges Past 48,000 in 2025 as WordPress Plugin Ecosystem Drives Growth
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.
canvas-chat
Advanced tools
A visual, non-linear chat interface where conversations are nodes on an infinite canvas
A visual, non-linear chat interface where conversations are nodes on an infinite canvas. Explore topics by branching, merging, and navigating your discussions as a directed acyclic graph (DAG).
No installation required! Try Canvas Chat at ericmjl--canvas-chat-fastapi-app.modal.run.
Bring your own API keys (configured in Settings).
Run Canvas Chat instantly with no installation:
uvx canvas-chat
Your browser will open automatically to the local server.
/matrix <context> to create cross-product evaluation tables/committee <question> to consult multiple LLMs and synthesize answers/research <topic> to generate research reports via Exa/search <query> to search the web via Exa\(...\) and display \[...\] math.canvaschat filesClick the ⚙️ Settings button to add your API keys:
Keys are stored locally in your browser's localStorage.
For enterprise deployments where administrators control API keys server-side:
uvx canvas-chat launch --admin-mode --config config.yaml
This reads model configuration from config.yaml and API keys from environment variables. Users don't need to configure anything - models are pre-configured, credentials are injected server-side, and the settings UI is hidden.
For development or teams that want pre-populated models but allow individual API keys:
uvx canvas-chat launch --config config.yaml
This loads models and plugins from config but users provide their own API keys via the UI.
See Admin Mode Setup for details.
Canvas Chat supports custom node types via a plugin system. Plugins are JavaScript modules that register new node types with custom rendering and behavior.
# config.yaml
plugins:
- path: ./plugins/my-custom-node.js
# Plugins work with or without admin mode
uvx canvas-chat launch --config config.yaml
# OR
uvx canvas-chat launch --admin-mode --config config.yaml
Plugins can define:
See Plugin Development Guide for details.
/search <query> to search via Exa/research <topic> to generate a research report/committee <question> to get opinions from multiple LLMs/matrix <context> to create an evaluation table.canvaschat fileFor contributors or local development:
git clone https://github.com/ericmjl/canvas-chat.git
cd canvas-chat
pixi install
pixi run dev
Open your browser to the URL shown (usually http://127.0.0.1:7865).
To test the plugin system with the example poll node:
# 1. Set an API key (for testing LLM features)
export ANTHROPIC_API_KEY=sk-ant-...
# 2. Start dev server with example config (plugins work without admin mode)
pixi run python -m canvas_chat launch --config config.example.yaml --port 7865
# 3. Open browser to http://127.0.0.1:7865
# 4. In browser console, create a poll node:
app.createAndAddNode('poll', '', {
data: {
question: 'What is your favorite color?',
options: ['Red', 'Blue', 'Green', 'Yellow']
}
})
# 5. The poll node should render with interactive voting buttons
This validates that:
/api/plugins/* endpointSee Plugin Development Guide for creating your own plugins.
Canvas Chat works best on Chromium-based browsers (Chrome, Edge, Arc, Brave, etc.). Firefox and Safari have rendering issues with the SVG canvas that prevent full functionality.
MIT
FAQs
A visual, non-linear chat interface where conversations are nodes on an infinite canvas
We found that canvas-chat demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
CVE disclosures hit a record 48,185 in 2025, driven largely by vulnerabilities in third-party WordPress plugins.

Security News
Socket CEO Feross Aboukhadijeh joins Insecure Agents to discuss CVE remediation and why supply chain attacks require a different security approach.

Security News
Tailwind Labs laid off 75% of its engineering team after revenue dropped 80%, as LLMs redirect traffic away from documentation where developers discover paid products.