Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | Canva Dev MCPMCP100 Selected | Context7 MCPMCP100 Selected |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | First-party MCP Canva · Publisher source ↗ | First-party MCP Upstash · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Not documented Package: Jul 22, 2026 | Repo: Aug 14, 2026 Package: Aug 11, 2026 |
| Popularity evidence | ||
| GitHub stars | Not documented | 60,740 GitHub stars · checked 2026-08-14T18:46:26.000Z |
| 30-day package downloads | No reliable download data | 3,916,841 30-day package downloads · checked 2026-08-14T18:46:26.000Z |
| Shared package downloads | 10,746 Shared package downloads (not MCP-specific) · checked 2026-07-29T17:30:00.000Z | Not documented |
| External adoption evidence |
|
|
| Client coverage | ||
| Client coverage details | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio | Claude Code✓ Streamable HTTP Claude Desktop✓ Streamable HTTP Codex✓ Streamable HTTP VS Code✓ Streamable HTTP Cursor✓ Streamable HTTP OpenCode✓ Streamable HTTP |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | The documented Dev MCP setup itself requires no Canva account login. Separate Canva CLI or Connect API workflows can require their own Canva credentials, which must not be placed in prompts. | Remote MCP accepts CONTEXT7_API_KEY as an HTTP header. The local package accepts --api-key. The CLI can use OAuth to generate an API key; unauthenticated documentation commands may have lower limits. |
| Cost | Canva documents no separate Dev MCP fee. Node/npm are free; Canva developer services, the selected AI client, and model usage may have separate costs. | A free API key and free usage are documented, with higher-rate or team/enterprise offerings potentially requiring a paid plan. Applicable limits should be checked in the current Context7 dashboard. |
| Permissions | The local server can fetch Canva developer documentation and expose development helpers, including app generation and design-review guidance. Its effective local access also depends on the connected coding client's filesystem and command permissions. | The MCP surface resolves library identifiers and queries documentation. It does not require repository or filesystem write access for the documented hosted mode. |
| Data handling | Canva states that the MCP server operates locally, fetches documentation from canva.dev and other sources, and does not transmit code or prompts anywhere other than the selected AI agent or LLM tool. | Context7 states that formulated queries are sent to its API while full prompts, source code, and conversation history are not transmitted; its tool descriptions instruct clients to remove secrets, personal data, and proprietary code. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | Treat generated code as untrusted until reviewed and tested, keep production tokens out of prompts, validate Connect API requests against official schemas, and pin the CLI for controlled environments. This is a documentary review and does not claim MCP100 execution testing. | Primary risks are query disclosure, stale or inaccurate indexed documentation, and accidental API-key exposure. Keep queries free of proprietary details and verify consequential advice against first-party library documentation. |
| Evidence date | ||
| Editorial review | 2026-07-24 | 2026-07-24 |
| Candidate evidence | 2026-07-29T20:58:26.000Z | 2026-08-14T18:46:26.000Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →