Field-by-field comparison
Compare the evidence before choosing an MCP.
Each signal stays separate, missing facts remain visible, and the column order follows your selection.
| Evidence field | Search Console MCPWatchlist candidate | Canva Dev MCPMCP100 Selected |
|---|---|---|
| Task fit | ||
| Best for |
|
|
| Not ideal for |
|
|
| Avoid when |
|
|
| Provenance | ||
| Provenance details | Community implementation io.github.saurabhsharma2u · Publisher source ↗ | First-party MCP Canva · Publisher source ↗ |
| Maintenance | ||
| Maintenance details | Repo: Aug 9, 2026 Package: Aug 9, 2026 | Repo: Not documented Package: Jul 22, 2026 |
| Popularity evidence | ||
| GitHub stars | 270 GitHub stars · checked 2026-08-14T18:46:26.000Z | Not documented |
| 30-day package downloads | 6,474 30-day package downloads · checked 2026-08-14T18:46:26.000Z | No reliable download data |
| Shared package downloads | Not documented | 10,746 Shared package downloads (not MCP-specific) · checked 2026-07-29T17:30:00.000Z |
| External adoption evidence |
|
|
| Client coverage | ||
| Client coverage details | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio | Claude Code✓ Local stdio Claude Desktop✓ Local stdio Codex✓ Local stdio VS Code✓ Local stdio Cursor✓ Local stdio OpenCode✓ Local stdio |
| Client coverage note | Local stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server. | |
| Access and data | ||
| Authentication | Google supports OAuth or service accounts, Bing uses an API key, and GA4 uses a service account. Google authorization opens a browser. | The documented Dev MCP setup itself requires no Canva account login. Separate Canva CLI or Connect API workflows can require their own Canva credentials, which must not be placed in prompts. |
| Cost | The MIT-licensed project lists no MCP fee. Third-party API quotas and provider charges are separate. | Canva documents no separate Dev MCP fee. Node/npm are free; Canva developer services, the selected AI client, and model usage may have separate costs. |
| Permissions | Reads Google Search Console, Bing Webmaster Tools, and GA4 data and can add or delete sites, submit or delete sitemaps, and submit or remove URLs from indexing. | The local server can fetch Canva developer documentation and expose development helpers, including app generation and design-review guidance. Its effective local access also depends on the connected coding client's filesystem and command permissions. |
| Data handling | Processes search queries, rankings, traffic, URLs, sites, sitemap state, and analytics. The publisher says only refresh_token and expiry_date persist, using OS credential storage or AES-256-GCM fallback. | Canva states that the MCP server operates locally, fetches documentation from canva.dev and other sources, and does not transmit code or prompts anywhere other than the selected AI agent or LLM tool. |
| Limitations | ||
| Tradeoffs |
|
|
| Risk context | Credentials expose sensitive search and analytics data, while write tools alter sites, sitemaps, and indexing. Use least-privilege accounts, protect credentials, and approve mutations explicitly. | Treat generated code as untrusted until reviewed and tested, keep production tokens out of prompts, validate Connect API requests against official schemas, and pin the CLI for controlled environments. This is a documentary review and does not claim MCP100 execution testing. |
| Evidence date | ||
| Editorial review | 2026-08-11 | 2026-07-24 |
| Candidate evidence | 2026-08-14T18:46:26.000Z | 2026-07-29T20:58:26.000Z |
Popularity, maintenance, fit, permissions, and client support are independent evidence fields.
Read the evidence method →