canvas-mcp: Instructions file for Codex

AGENTS.md

canvas-mcp AGENTS.md is an instructions file for Codex, OpenCode from vishalsachdev/canvas-mcp. It costs 8,828 tokens per session, scanned A, original, MIT.

Instructions for using Canvas MCP, a bridge between AI assistants and Canvas, the online learning management system. It covers authentication, self-hosting, and tools for handling course data.

In plain words
What is it for?
Use it when configuring Canvas access for an AI agent, tracking academic work, managing courses, grading assignments, or communicating with students.
Why use it?
It explains how to connect safely to Canvas and notes that the former public server is retired. It also describes how to process larger operations without loading every item into the assistant’s context.

Instructions file for CodexOpenCode

Written for Codex and OpenCode: the file is AGENTS.md. Also seen: mentions CLAUDE.md; mentions Codex.

This is vishalsachdev/canvas-mcp's own configuration. It tells Codex and OpenCode how to work on canvas-mcp itself, so it is not a mod to install elsewhere. Copy it as a starting point and replace the rules that are about this project. Everything canvas-mcp configures →

Not installable: its command points at a path on the author’s own machine, so it runs nowhere else. The line is /Users/vishal/code,.

Reuse

Borrowing it

Nothing to install: this file belongs to vishalsachdev/canvas-mcp. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file
curl -O https://raw.githubusercontent.com/vishalsachdev/canvas-mcp/main/AGENTS.md
Clone the repo
git clone --depth 1 https://github.com/vishalsachdev/canvas-mcp

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for canvas-mcp AGENTS.md

README.md
[![agentmods](https://agentmods.dev/badge/instructions/vishalsachdev/canvas-mcp/agents-md/github.svg)](https://agentmods.dev/instructions/vishalsachdev/canvas-mcp/agents-md)
Your own site
<a href="https://agentmods.dev/instructions/vishalsachdev/canvas-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/vishalsachdev/canvas-mcp/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for canvas-mcp AGENTS.md

Your own site · 80×15
<a href="https://agentmods.dev/instructions/vishalsachdev/canvas-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/vishalsachdev/canvas-mcp/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 8,828 This file is loaded in full into every session.
When invoked 8,828 The same file — it is already loaded in full.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.08828 $0.08828
Opus 5.5 $0.03531 $0.03531
Sonnet 5.5 $0.01766 $0.01766
Haiku 4.5 $0.00883 $0.00883

Measured 12d ago against content hash 07e58b57383e, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

canvas-mcp AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 642 lines

How it starts

The opening of the file, as written. The whole thing — 642 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Canvas MCP - AI Agent Guide

This guide helps AI agents (Claude, Cursor, Zed, Windsurf, and other MCP clients) effectively use the Canvas MCP server.

Quick Start

Canvas MCP is a Model Context Protocol server that bridges AI assistants with Canvas Learning Management System. It provides tools for students to track their academic work and for educators to manage courses, grade assignments, and communicate with students.

Key capability: The server supports both traditional MCP tool calls and a code execution API. Process bulk operations locally without loading every item into the model’s context.

Authentication

All tools require a valid Canvas API token.

Note: The public hosted server (mcp.illinihunt.org) has been retired — a public MCP endpoint without an access gate would expose the code-execution tool. Use local (self-hosted) mode below. The HTTP/streamable transport remains supported for self-hosting behind your own authentication; for a shared institutional deployment, see deploy/azure/.

Local (Self-Hosted)

Configure credentials in the MCP server's .env file:

CANVAS_API_TOKEN=your_token_here
CANVAS_API_URL=https://your-institution.instructure.com/api/v1

Students and educators use the same server but have access to different tools based on Canvas API permissions.

Tool Profile (Optional)

Reduce tool overhead by setting a role-based profile. Only tools relevant to the selected role are registered:

# In .env:
CANVAS_ROLE=student    # 51 tools by default (student + shared), 62 with every student write tool enabled
CANVAS_ROLE=educator   # 96 tools by default, 98 with every gated tool enabled
CANVAS_ROLE=all        # Default profile; 115 tools by default, 128 with all feature-gated tools enabled

Or via CLI flag: canvas-mcp-server --role student (CLI flag takes precedence over env var).

Tool Categories

Student Tools

Personal academic tracking uses Canvas "self" endpoints. Shared course-content tools still follow the permissions Canvas grants the student's account.

Read the full file on GitHub · 642 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 12d ago Changed · +7 lines · +96 tokens per session 07e58b57383e
  2. 14d ago Changed · +27 lines · +493 tokens per session 4b1063c58ec1
  3. 16d ago Changed · +2 lines · +23 tokens per session 6e84a9f6ebe9
  4. 17d ago Changed · +24 tokens per session f0bcfe2e403b
  5. 28d ago Changed · +9 lines · +183 tokens per session 75e26a5cc67c
  6. 29d ago Changed · +5 lines · +79 tokens per session b6bcc097c794
  7. 1mo ago Changed · +76 lines · +1,537 tokens per session ebf770c028a1
  8. 1mo ago Changed · +1 lines · +61 tokens per session bdfe6929ced1
  9. 1mo ago Changed · +2 lines · +34 tokens per session 7a94c7f52439
  10. 1mo ago First seen · 513 lines · 6,298 tokens per session scan A cc20b972a8a4

Subscribe to this mod's changes

canvas-mcp AGENTS.md is an instructions file published in the GitHub repository vishalsachdev/canvas-mcp (317 stars, last pushed yesterday), licensed MIT. It adds 8,828 tokens to every session, about $0.0353 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.

Related

canvas-mcp AGENTS.md compared with instructions from other repositories

canvas-mcp AGENTS.md next to 6 instructions from other repositories
ModTypeStarsLast pushLicenceScanTokensWorks with
canvas-mcp AGENTS.mdvishalsachdev/canvas-mcpInstructions file317yesterdayMITA8,828Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA9,719GitHub Copilot
next.js AGENTS.mdvercel/next.jsInstructions file143kyesterdayMITA7,461Codex, OpenCode
langchain AGENTS.mdlangchain-ai/langchainInstructions file149kyesterdayMITA4,680Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA5,516GitHub Copilot
vscode copilot-instructions.mdmicrosoft/vscodeInstructions file195kyesterdayMITA3,093GitHub Copilot
deepseek-harness AGENTS.mddeepseek-ai/deepseek-harnessInstructions file274k2d agoMITA4,313Codex, OpenCode