Canva Connector

Organization-scoped Xpert middleware connector for Canva. It follows the WorkBuddy-style connection flow: an organization administrator configures a Canva China MCP OAuth application in System Integration, and an end user clicks Connect to open Canva's official authorization page. The end user never selects an integration or enters a client ID or client secret in the connector UI.

The plugin stores a separate OAuth credential for each workspace user and exposes bounded design search, read, generation, editing-transaction, import, and export tools through the Canva China MCP service. Generated designs include trusted Canva URLs so the user can select a result and continue editing it in Canva.

The first release includes:

• Platform-managed OAuth authorization-code flow with PKCE and refresh-token rotation
• Workspace-scoped runtime credentials resolved through ConnectorRuntime:canva
• Bounded design search, metadata, page, and content reads
• Design generation with trusted Canva edit URLs
• Guarded editing transactions, imports, and exports with explicit confirmation
• Export delivery through Xpert Workspace Files
• Stable capability, quota, timeout, and upstream error handling
• Allowlisted Agent DTOs that omit tokens, temporary download URLs, raw provider payloads, and workspace host paths

Direct DCR login and global Canva Connect REST OAuth are not offered for new connections. Compatibility code remains available only for previously stored credentials. The connector never accepts an arbitrary MCP URL.

See docs/ for setup, tool contracts, operations, and verification.

Development

pnpm exec nx run @xpert-ai/plugin-canva-connector:build
pnpm exec nx run @xpert-ai/plugin-canva-connector:typecheck
pnpm exec nx exec -- jest --config middlewares/canva-connector/jest.config.ts --runInBand