Canva

Canva

This connector works with a Canva account through the Canva REST API (formerly Connect API, https://api.canva.com/rest/v1), as the user who authorizes it: designs (list, search, read, create), exports to PDF, PNG, JPG, PPTX, MP4 and more with download links, folders, uploaded assets (read, rename, upload from a URL), brand templates and comments.

Setup (one-time, about 10 minutes)

1. Turn on multi-factor authentication for your Canva account (Canva requires it for developers): Settings → Login & security.
2. Open the Canva Developer Portal at https://www.canva.com/developers/apps, click Create an app and pick who it is for. A private app (only possible on a Canva Enterprise team) is approved by your own team admins; a public app works for its developer and needs Canva's review before other Canva users can authorize it. Then open Outside Canva → Start integrating.
3. Under Configuration → Scopes tick: profile:read, design:meta:read, design:content:read, design:content:write, folder:read, folder:write, asset:read, asset:write, brandtemplate:meta:read, brandtemplate:content:read, comment:read, comment:write. The connector asks for all of them; Canva refuses an authorization that asks for a scope not ticked here.
4. Under Authentication add the redirect URL https://cloud.anythingmcp.com/api/mcp-oauth/callback on AnythingMCP Cloud, or <your AnythingMCP URL>/api/mcp-oauth/callback when you host AnythingMCP yourself. For a local test Canva accepts http://127.0.0.1:<port>/..., not localhost.
5. Copy the Client ID and generate a Client secret (shown only once) into CANVA_CLIENT_ID and CANVA_CLIENT_SECRET, install the connector, click Authorize with Provider and allow access in Canva. Access tokens last about four hours and are renewed automatically; each refresh token works once and is replaced on every renewal.

Smaller scope set: to keep the connector read-only, untick the :write scopes in the portal and in the connector's OAuth settings, authorize again and switch off the tools that create, change or move things.

Exports run as jobs: canva_create_export returns a job id, then call canva_get_export every few seconds until status is success; urls holds one link per file, valid 24 hours. Check the possible formats first with canva_get_design_export_formats. Designs with premium elements the user has not licensed fail with license_required. Limits: 75 exports per user per 5 minutes and 500 per day.

Uploads from a URL run as jobs too: canva_upload_asset_from_url, then canva_get_asset_upload until success.

Folders: root stands for the top level of the user's Projects and uploads for the Uploads folder (canva_list_folder_items, canva_create_folder, canva_move_folder_item).

Plans: designs, folders, assets, exports and comments work on every plan, including free. Brand templates need a plan with brand templates (Pro, Teams or Enterprise); canva_get_capabilities shows brand_template when it is available.

Preview APIs: comments and uploads from a URL are Canva preview APIs; they can change without notice, and a public app using them cannot pass Canva's review. For a public app, switch off canva_upload_asset_from_url, canva_get_asset_upload and the comment tools.

Confirm first: canva_create_comment and canva_reply_to_comment are seen by collaborators. canva_delete_folder and canva_delete_asset (move to Trash) are installed switched off.

Ids: a design id is the part after /design/ in a Canva link (https://www.canva.com/design/DAFVztcvd9z/...). Thumbnail URLs expire after 15 minutes, edit_url and view_url after 30 days. Times are Unix seconds.

Common errors (code in the answer)

• invalid_access_token, revoked_access_token: authorize again.
• missing_scope: tick the scope in the portal and in the connector's OAuth settings, then authorize again.
• permission_denied, not_found (design_not_found, folder_not_found, asset_not_found): the user cannot see that object or the id is wrong.
• 403 "requires one of capabilities": a paid feature such as brand templates.
• too_many_requests: most calls allow 10 to 100 per minute per user; wait a minute.

Out of scope here: editing design content, autofill, resizing, imports of files, AI generation, design analytics and webhooks.