43
grade D
14 days ago
glama
Canvas MCP Server
Connects Canvas LMS to AI assistants, enabling users to list courses and retrieve assignment details through natural language. It features secure multi-institution support with encrypted token storage and a simplified setup process for students.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: ENCRYPTION_KEY, SMTP_PASS
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
API_KEY_CACHE_TTLconfig
BASE_URLconfig
DATABASE_PATHconfig
DKIM_DOMAINconfig
DKIM_PRIVATE_KEY_FILEconfig
DKIM_SELECTOR🔐 secret
ENCRYPTION_KEYconfig
HOSTconfig
PORTconfig
SMTP_FROMconfig
SMTP_HOST🔐 secret
SMTP_PASSconfig
SMTP_PORTconfig
SMTP_USER// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/taciturnaxolotl-canvas-mcp-voyrrx)commit: 2fa8d94f61a00635fa5fc2cc3b0fb39941ae5b8a
code hash: 3df5e9089d2cadea768d8e39a786c9da175c579d636e29d9fe1837545c1fcb3d
verified: 4/11/2026, 3:04:37 PM