Design · Edit designs

Canva in conversation with your agent.

Canva's own MCP server, passed through per business unit. It reads designs with their text and edits them page by page: text, images, shapes and slides.

  • Vendor MCP · passed through as is
  • Coverage: complete
  • 16 tools (per vendor) · 9 of them make changes
What it does

Read and change.

Your agent works with exactly the permissions of the connected account. Read tools are quick to enable. Tools that change data stay off until you explicitly turn them on.

What your agent can read

  • Search and read designs, with text, pages, thumbnails and speaker notes.
  • Brand kits with colors, fonts and logos, brand templates and their fields.
  • Folders, comments and answers from the Canva Help Center.

What your agent can change

  • Change text, images, shapes, colors and slides. Nothing is saved until you agree.
  • Generate designs, presentations and images with Canva AI, also in your brand look.
  • Export, resize, merge pages, comment and organize folders.

Only once you enable it, per agent and per tool. If you want, a person also approves each action before it runs.

Use cases

How teams use Canva MCP.

Marketing, sales and RevOps run these as recurring routines or on request.

  1. 01

    Bring slides up to date

    Before a presentation
    1. Read the deck
    2. Replace figures and text on the slides
    3. Show a preview and save after your OK

    ResultThe deck is current without anyone clicking through it slide by slide.

Built-in safeguards

  • At the “Read” access level the hub only requests Canva's read permissions.
  • When Canva doesn't mark a tool as read-only, the hub treats it as a change and only enables it explicitly.
  • If you want, changes only run after a person approves them, for example the team lead: in the Data Hub, in Slack or via a link. On top of that, each agent has daily and hourly limits.
  • Guardrails for every agent: deletes and changes to more than 10 records need approval by default, an emergency brake kicks in on a run of deletes, and you can set your own rules per tool.
  • Each connection has an access level: Read, Write or Admin. Where the vendor allows it, the Data Hub only requests the permissions for that level.
  • Credentials are stored encrypted in the Data Hub, and the agent never sees them. Every call is logged.

What it can't do

  • AI features use the signed-in person's Canva AI allowance; some features need Canva Pro, Teams or Enterprise.
  • There is no undo. For fixed workflows the regular Canva connection is the better choice.

Canva decides which tools exist through its own MCP server. The hub passes on everything that server offers and refreshes the list every 24 hours.

Connect Canva MCP to your agents.

In 30 minutes, we'll show you the Data Hub with your own tools.