← Back to search

io.github.admin978/canvas-mcp

admin978 Scanned 14d ago

Local-first MCP server for Canvas LMS. Stdio transport, no third-party broker.

MCP Registry ↗
C
73.6 / 100

Versions

0.1.1latest
first seen May 19, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 10

list_courses
annotations: none low

List enrolled courses. Returns id, name, course_code.

active_only bool
list_assignments
annotations: none low

List assignments in a course. Includes due_at, points, submission status.

course_id int include_submissions bool
upcoming_events
annotations: none low

Upcoming planner items (assignments, calendar events) across all courses. Canvas returns roughly the next two weeks.

planner_items
annotations: none low

Planner items for the user. ISO dates (YYYY-MM-DD).

end_date string start_date string
list_announcements
annotations: none low

Course announcements.

course_id int
list_modules
annotations: none low

Course modules with items.

course_id int with_items bool
get_file_info
annotations: none low

Get file metadata including download url.

file_id int course_id int
get_grades
annotations: none low

Current grades. Per-course if course_id provided, otherwise all enrollments.

course_id string
get_page
annotations: none low

Fetch a course wiki page by its url slug.

page_url str course_id int
todo
annotations: none low

User's TODO list (ungraded assignments to look at).

Permissions 3

network medium
Server uses network capabilities via: httpx, urllib
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 41

medium
Vulnerable dependency: httpx@0.27,<1.0 (PYSEC-2022-183) dependency_analyzer · 95%
low
Tool 'list_courses' has no annotations annotation_checker · 100%
low
Tool 'list_assignments' has no annotations annotation_checker · 100%
low
Tool 'upcoming_events' has no annotations annotation_checker · 100%
low
Tool 'planner_items' has no annotations annotation_checker · 100%
low
Tool 'list_announcements' has no annotations annotation_checker · 100%
low
Tool 'list_modules' has no annotations annotation_checker · 100%
low
Tool 'get_file_info' has no annotations annotation_checker · 100%
low
Tool 'get_grades' has no annotations annotation_checker · 100%
low
Tool 'get_page' has no annotations annotation_checker · 100%
low
Tool 'todo' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: httpx@0.27,<1.0 (GHSA-h8pj-cxx2-jfg2) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0,<2.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0,<2.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0,<2.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0,<2.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0,<2.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0,<2.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0,<2.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0,<2.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0,<2.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0,<2.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: list_courses manifest_parser · 90%
info
Tool: list_assignments manifest_parser · 90%
info
Tool: upcoming_events manifest_parser · 90%
info
Tool: planner_items manifest_parser · 90%
info
Tool: list_announcements manifest_parser · 90%
info
Tool: list_modules manifest_parser · 90%
info
Tool: get_file_info manifest_parser · 90%
info
Tool: get_grades manifest_parser · 90%
info
Tool: get_page manifest_parser · 90%
info
Tool: todo manifest_parser · 90%
info
Required env vars (3) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 80%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%