MCP server
Canva
Create and edit Canva designs through an assistant using a public-asset workshop folder and per-user OAuth.
Published by the company that makes the product.
What it can access
Per-user OAuth grants access to the Canva content that user authorises. Available tools can create or modify shared content.
Security note
Use a workshop folder with public assets and require review before export or sharing. Disconnecting the AI client may not be enough; revoke the Canva authorisation too.
Do you need it?
Connect if the team repeatedly turns approved text into Canva assets. For one graphic, use Canva directly so every action stays visible.
Capability and permissions
Canva’s official MCP can search content and create, edit, comment on, or export designs. Per-user OAuth grants access to content that user can reach.
Least-privilege setup
As of 2026-09-01, use Canva’s official MCP documentation and OAuth flow. Create a workshop folder with public, consented assets and a non-admin user. Do not authorise organisation-wide content if the client offers a narrower choice.
Harmless success test
Ask for one draft social card using an invented event and a public-domain image. Do not publish or share it. Inspect the resulting design and activity history.
Disable, revoke, remove
Disconnect in the AI client, revoke the application in Canva account settings, remove the workshop user from the folder, and delete the test design.
When not to connect
Do not connect an account containing unconsented photos, IDs, private brand plans, unreleased campaigns, or designs with protected locations.