by DMontgomery40 · MCP Server · ★ 103
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
git clone https://github.com/DMontgomery40/mcp-canvas-lms.gitTaken from the project's README on GitHub.
None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours.
The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.
| Stars | 103 |
| Forks | 39 |
| Language | JavaScript |
| Category | MCP Server |
| Quality Score | 73/100 |
| Open Issues | 4 |
| Last Updated | 2026-05-31 |
| Created | 2024-12-05 |
| Platforms | mcp, node |
| Est. Tokens | ~360k |
Canvas MCP Server v2.3.0 Security and disclosure history This project is an independent MCP server for Canvas LMS APIs. It is not affiliated with, endorsed by, or maintained by Instructure or Canvas. In June 2025, during development of this MCP, I identified a Broken Access Control issue in the Canvas environment at bootcampspot.instructure.com.
These tools work well together with mcp-canvas-lms for enhanced workflows:
Looking for a mcp-canvas-lms alternative? If you're comparing mcp-canvas-lms with other mcp server tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.
Read-only MCP server that connects Claude, ChatGPT and other AI assistants to Canvas LMS.
Vibe Check is a tool that provides mentor-like feedback to AI Agents, preventing tunnel-vision, over-engineeri
MCP server SDK/example implemented entirely in bash — build a Model Context Protocol server with no runtime de
🗂️🤖 Airtable Model Context Protocol Server, for allowing AI systems to interact with your Airtable bases
Giving Claude ability to run code with E2B via MCP (Model Context Protocol)
Local-first Canvas LMS AI agent that learns each course's recurring assignment workflow and reuses it through
Explore other popular mcp server tools:
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: