Jsoncanvas

io.mcpcentralPublished by mcpcentral.ioOfficial publisherv0.1.0Updated Oct 27, 2026

Create, validate, edit, export (markdown/svg/png/mermaid), and search JSON Canvas files.

VerifiedStreamable HTTPWeb executableProductivity & WorkflowFiles & StorageMedia & Design

Overview

AI-generated overview

Remote MCP server for creating, validating, editing, exporting and searching JSON Canvas (.canvas) files, with an inline interactive viewer.

What you can do
  • Create canvases from nodes and optional edges, stored under a date-prefixed .canvas name
  • Validate canvas data against the JSON Canvas 1.0 spec
  • Read, list and search your stored canvases by field
  • Edit canvases with atomic batch add, update and remove of nodes and edges
  • Export canvases to markdown, svg, mermaid or png
  • Render results inline in an interactive pan/zoom viewer in supporting hosts
When to use it
Useful when you work with Obsidian-style JSON Canvas files and want an assistant to build, check, modify, search or export them without handling the file format by hand. Suits note-taking, diagramming and visual planning workflows that live in .canvas files.
Requirements
A remote Streamable HTTP endpoint; no local package needed. Microsoft Entra OAuth sign-in through the MCPCentral gateway, with a bearer token sent in the Authorization header. The client must support remote HTTP servers with OAuth, or use mcp-remote via npx.
Before you install
All tool calls require a valid Entra-issued bearer token, and canvases are stored on the provider's servers per authenticated user rather than locally. Create and edit tools write and remove nodes and edges, and removing a node also removes its edges. The server is closed-source and hosted by a third party.

Installation

In SourceWeft

  1. Open Jsoncanvas in the dashboard and add it to a workspace.
  2. Connect the required credentials. They are stored privately and never shown on public pages.
  3. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.mcpcentral%2Fjsoncanvas/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config. The client completes OAuth sign-in on first connect.

{
  "mcpServers": {
    "jsoncanvas": {
      "type": "http",
      "url": "https://jsoncanvas.mcpcentral.io/mcp"
    }
  }
}

README

JSON Canvas MCP Server

A remote Model Context Protocol server for working with JSON Canvas files — the open infinite-canvas format used by Obsidian. Create, validate, read, edit, export, and search .canvas files, with an inline interactive canvas viewer.

Hosted by MCPCentral at https://jsoncanvas.mcpcentral.io/mcp (Streamable HTTP). This repository is the public listing for the MCP Registry; the server itself is closed-source.

mcp-name: io.mcpcentral/jsoncanvas

Authentication

The endpoint requires Microsoft Entra OAuth via the MCPCentral gateway (login.mcpcentral.io). MCP clients perform the standard OAuth flow automatically: an unauthenticated request returns 401 with a WWW-Authenticate pointing at the RFC 9728 metadata at /.well-known/oauth-protected-resource, and the client takes you through sign-in. Canvases are stored privately per authenticated user.

Client configuration

Claude Code

bash
claude mcp add jsoncanvas --transport http https://jsoncanvas.mcpcentral.io/mcp

Claude Desktop / other clients via mcp-remote

json
{  "mcpServers": {    "jsoncanvas": {      "command": "npx",      "args": ["-y", "mcp-remote", "https://jsoncanvas.mcpcentral.io/mcp"]    }  }}

Any MCP client that supports remote Streamable HTTP servers with OAuth (Claude, Goose, OpenAI connectors, MCP Inspector) can connect.

Tools

ToolDescription
create_canvasCreate a canvas from nodes (+ optional edges); stored under a date-prefixed .canvas name.
validate_canvasValidate canvas data against the JSON Canvas 1.0 spec.
read_canvasRead a stored canvas and return its nodes and edges.
list_canvasesList your stored canvases.
edit_canvasAtomic batch add/update/remove of nodes and edges (removing a node cascades its edges).
export_canvasExport to markdown, svg, mermaid, or png (full-fidelity raster via Browser Rendering).
search_canvasesCase-insensitive field-level search across your canvases.

create_canvas, read_canvas, and edit_canvas carry MCP Apps UI metadata so supporting hosts render the result inline in an interactive pan/zoom viewer.

Resources

  • canvas://schema — JSON Schema for canvas files.
  • canvas://examples/basic — a simple two-node example canvas.
  • ui://canvas/viewer.html — the interactive read-only viewer (MCP Apps UI).

Security

  • Per-user isolation — every canvas is scoped to the authenticated user; no cross-user reads.
  • Auth required — all tool calls require a valid Entra-issued bearer token.
  • Hardened — strict input/size caps, bounded search, accurate tool annotations, and an SSRF-blocked PNG renderer (the headless browser cannot be coerced into outbound requests).
  • Report vulnerabilities per SECURITY.md. Please do not open public issues for security reports.

License

MIT.

Source: README.md at commit b76ba4d

Tools

0
This server asks you to sign in, so SourceWeft could not read its tools without an account and has not indexed them. What a connected account sees can depend on that account and its permissions.

Version history

1
  1. v0.1.0LatestSep 16, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

Other Mcpcentral integrations