
Jsoncanvas
io.mcpcentralPublished by mcpcentral.ioOfficial publisherv0.1.0Updated Oct 27, 2026
Create, validate, edit, export (markdown/svg/png/mermaid), and search JSON Canvas files.
Overview
Remote MCP server for creating, validating, editing, exporting and searching JSON Canvas (.canvas) files, with an inline interactive viewer.
- What you can do
- Create canvases from nodes and optional edges, stored under a date-prefixed .canvas name
- Validate canvas data against the JSON Canvas 1.0 spec
- Read, list and search your stored canvases by field
- Edit canvases with atomic batch add, update and remove of nodes and edges
- Export canvases to markdown, svg, mermaid or png
- Render results inline in an interactive pan/zoom viewer in supporting hosts
- When to use it
- Useful when you work with Obsidian-style JSON Canvas files and want an assistant to build, check, modify, search or export them without handling the file format by hand. Suits note-taking, diagramming and visual planning workflows that live in .canvas files.
- Requirements
- A remote Streamable HTTP endpoint; no local package needed. Microsoft Entra OAuth sign-in through the MCPCentral gateway, with a bearer token sent in the Authorization header. The client must support remote HTTP servers with OAuth, or use mcp-remote via npx.
Installation
In SourceWeft
- Open Jsoncanvas in the dashboard and add it to a workspace.
- Connect the required credentials. They are stored privately and never shown on public pages.
- Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Use with an agent
Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.
Read https://sourceweft.com/mcp/io.mcpcentral%2Fjsoncanvas/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.Other MCP clients
Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.
{
"mcpServers": {
"jsoncanvas": {
"type": "http",
"url": "https://jsoncanvas.mcpcentral.io/mcp"
}
}
}README
JSON Canvas MCP Server
A remote Model Context Protocol server for working with
JSON Canvas files — the open infinite-canvas format used by
Obsidian. Create, validate, read, edit, export, and
search .canvas files, with an inline interactive canvas viewer.
Hosted by MCPCentral at https://jsoncanvas.mcpcentral.io/mcp
(Streamable HTTP). This repository is the public listing for the
MCP Registry; the server itself is closed-source.
mcp-name: io.mcpcentral/jsoncanvas
Authentication
The endpoint requires Microsoft Entra OAuth via the MCPCentral gateway
(login.mcpcentral.io). MCP clients perform the standard OAuth flow automatically: an
unauthenticated request returns 401 with a WWW-Authenticate pointing at the
RFC 9728 metadata at
/.well-known/oauth-protected-resource, and the client takes you through sign-in. Canvases are
stored privately per authenticated user.
Client configuration
Claude Code
Claude Desktop / other clients via mcp-remote
Any MCP client that supports remote Streamable HTTP servers with OAuth (Claude, Goose, OpenAI connectors, MCP Inspector) can connect.
Tools
create_canvas, read_canvas, and edit_canvas carry MCP Apps UI metadata so supporting hosts
render the result inline in an interactive pan/zoom viewer.
Resources
canvas://schema— JSON Schema for canvas files.canvas://examples/basic— a simple two-node example canvas.ui://canvas/viewer.html— the interactive read-only viewer (MCP Apps UI).
Security
- Per-user isolation — every canvas is scoped to the authenticated user; no cross-user reads.
- Auth required — all tool calls require a valid Entra-issued bearer token.
- Hardened — strict input/size caps, bounded search, accurate tool annotations, and an SSRF-blocked PNG renderer (the headless browser cannot be coerced into outbound requests).
- Report vulnerabilities per SECURITY.md. Please do not open public issues for security reports.
License
MIT.
Source: README.md at commit b76ba4d
Tools
0Version history
1- v0.1.0LatestSep 16, 2026
Score
85% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 daysRequired25 pts
- Auth declaredRequired10 pts
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts