# Configure the Canva MCP Server

Connect Canva's hosted MCP server to a Dtwo gateway via OAuth.

## Overview

Canva operates a hosted MCP server at `mcp.canva.com` for creating designs with Canva AI, autofilling Brand Templates, searching existing designs and folders, and exporting files as PDFs or images. Access is authorized through OAuth 2.0, and the server supports dynamic client registration. Canva does, however, only accept callback URLs it has approved in advance, so your gateway's callback URL has to be registered with Canva first.

## 1. Ask Canva to approve your gateway's callback URL

1. Open <a href="https://www.canva.dev/solutions/mcp/" target="_blank" rel="noopener noreferrer">Canva's MCP server page</a> and select **Join the waitlist**.
2. Fill out the form, adding your gateway's OAuth callback URL as an approved callback URL. The URL can be found in the Overview tab for your gateway in the Dtwo UI.

Wait for Canva to confirm the URL is approved before moving on to step 2.

## 2. Add the MCP server to your gateway config

Go to your gateway in the Dtwo UI and open **Configuration → Advanced**. In the `mcp_servers` section add the following entry:

```yaml
  - name: canva
    description: "Canva official hosted MCP server."
    url: https://mcp.canva.com/mcp
    transport_type: streamablehttp
    authentication:
      type: oauth
      grant_type: authorization_code
      issuer: "https://mcp.canva.com"
      scopes:
        - design:meta:read
        - design:content:read
        - design:content:write
      dcr_enabled: true
      redirect_uri: "<CALLBACK_URL>"
```

Replace the placeholder value:

- `<CALLBACK_URL>` — your Dtwo gateway's OAuth callback URL, found in the Overview tab for your gateway in the Dtwo UI. It must be the same URL Canva approved in step 1.

## 3. Deploy and verify

Save the configuration and deploy the gateway.

Then, in your AI client, ask it to authorize Canva via the gateway. This opens the Canva sign-in and consent screen — sign in as the user whose designs and folders the agent should access, and approve the consent prompt. Once authorized, confirm the `canva-*` tools appear and run a read-only call, such as finding an existing design, to make sure the connection works before enabling design creation or export.

If the tools don't appear after you authorize, refresh the tool list in your AI client — some clients don't pick it up automatically.

---

Having trouble? Email [support@dtwo.ai](mailto:support@dtwo.ai).