Canva MCP opens self-serve OAuth access; CIMD clients still face a waitlist

Self‑serve access applies to the Developer Portal OAuth client

Canva’s October 27 developer announcement makes its remote MCP server generally available to developers building AI assistants, platforms and connectors. Developers using a Developer Portal OAuth client no longer need to apply through the Canva MCP waitlist.

The distinction is the connection path. Canva describes creating an app in its Developer Portal, enabling Canva MCP and configuring the application’s OAuth client. This announcement concerns developers adding Canva to their own AI experience; it separately directs people connecting an existing popular assistant to its AI Connector setup guide.

CIMD registration and individual user authentication remain separate

For a client that uses a Client ID Metadata Document (CIMD) instead of a client secret, the announcement still directs developers to apply through the Canva MCP waitlist to register the redirect URI. “Generally available” therefore does not mean the registration process is identical for every client.

Each user must authenticate with their own Canva account. Canva says the tools respect that user’s permissions and do not support organization‑level or service‑account authentication. Registering an application is not a substitute for each user’s access, and the notice says some features require a paid Canva plan.

Tool completion is a separate state from requesting a design

The provider’s implementation guidance describes design and image generation, finding existing work, editing, commenting, managing assets and exporting. It tells developers to discover the available tools when connecting rather than assume a fixed set.

For long‑running generation, Canva says to keep the job ID and poll according to the returned policy. A successful job returns an edit URL that lets the user continue in Canva. The practical boundary is between submitting a task and confirming it completed; the announcement does not give a universal generation‑time guarantee. These are documented workflows, not an OpenTools connection or execution test.

General MCP access does not settle every model’s availability

This server‑access announcement should be kept separate from a particular model or tool’s release status. Canva’s earlier Craft announcement described Dream Lab access while its Craft‑specific MCP section remained labelled “Coming Soon.” General OAuth availability alone does not establish that Craft‑specific MCP generation has launched.

Canva co‑founder and CEO Melanie Perkins at Web Summit in Lisbon on November 5, 2019. Archive company‑leadership context, not the October 27, 2026 MCP announcement or its interface. Photo: David Fitzgerald/Web Summit via Sportsfile, ©SPORTSFILE; original publisher, via Wikimedia Commons; CC BY 2.0 Generic. Resized and cropped for display; no artificial upscaling.

Share this article

Related News

Exeon AgentGuard’s FAQ separates agent monitoring from employee shadow AI

AI SDK 7.0.155 drops runtime checks already covered by TypeScript

GitHub Copilot adds server authentication with a billable read-only permission

Canva MCP opens self-serve OAuth access; CIMD clients still face a waitlist

Self‑serve access applies to the Developer Portal OAuth client

CIMD registration and individual user authentication remain separate

Tool completion is a separate state from requesting a design

General MCP access does not settle every model’s availability

Sources

Tags

Canva MCP opens self-serve OAuth access; CIMD clients still face a waitlist

Self‑serve access applies to the Developer Portal OAuth client

CIMD registration and individual user authentication remain separate

Tool completion is a separate state from requesting a design

General MCP access does not settle every model’s availability

Sources

Tags