How to integrate Canva MCP with Kimi Code

How to integrate Canva MCP with Kimi Code Kimi Code is Moonshot AI's open-source coding agent, powered by Kimi K2.6. It runs in your terminal, reads and edits code, executes shell commands, and plans multi-step tasks, with native MCP support for extending it to outside tools. In this guide, I will explain the easiest and most secure way to connect your Canva account to Kimi Code via Composio Connect, so it can create a new Instagram post design, list your brand templates for social use, start a folder for this project’s assets, and more without ever putting your account credentials at risk.

Canva logoCanva
Oauth2

Canva is a drag-and-drop design suite for creating professional graphics, presentations, and marketing materials. It makes it easy for anyone to design with beautiful templates and a vast library of elements.

46 Tools

How to integrate Canva MCP with Kimi Code

Kimi Code is Moonshot AI's open-source coding agent, powered by Kimi K2.6. It runs in your terminal, reads and edits code, executes shell commands, and plans multi-step tasks, with native MCP support for extending it to outside tools.

In this guide, I will explain the easiest and most secure way to connect your Canva account to Kimi Code via Composio Connect, so it can create a new Instagram post design, list your brand templates for social use, start a folder for this project’s assets, and more without ever putting your account credentials at risk.

Also integrate Canva with

Why use Composio?

Composio provides:

  • Access to 1,000+ managed apps from a single MCP endpoint. This makes it convenient for agents to run cross-app workflows.
  • Managed OAuth. You do not have to worry about authentication and authorization flows for every app.
  • Programmatic tool calling. Allows LLMs to write code in a remote workbench to handle complex tool chaining. This reduces back-and-forth for frequent tool calls.
  • Large tool response handling outside the LLM context. This minimizes context bloat from large tool responses.
  • Dynamic just-in-time access to thousands of tools across hundreds of apps. Composio loads the tools your agent needs, so LLMs are not overwhelmed by tools they do not need.

Connect Canva to Kimi Code

Kimi Code is a TypeScript agent distributed through npm. It acts as an MCP client and reads server definitions from an mcp.json file, and it can also add and authenticate servers conversationally through /mcp-config. Composio is a remote HTTP server that authenticates with OAuth, so no API key is stored anywhere.

1. Install Kimi Code

The quickest way is the official install script, which requires no pre-installed Node.js and places the kimi executable on your PATH.

bash
# macOS or Linux
curl -fsSL https://code.kimi.com/kimi-code/install.sh | bash

# Windows PowerShell
irm https://code.kimi.com/kimi-code/install.ps1 | iex

# Confirm the installation
kimi --version

2. Log in

Start Kimi Code in your project directory, then sign in from the interactive UI:

bash
kimi

Run /login and choose Kimi Code OAuth using the device-code flow, or use a Moonshot API key.

3. Add Composio with /mcp-config

In current versions of Kimi Code, MCP servers are managed inside the app, not with a shell subcommand. From the interactive UI, run:

bash
/mcp-config
Kimi Code MCP config flow for adding the Composio MCP server

Tell it the server name and URL in plain language. For example:

Server name is Composio, and here is the server URL: https://connect.composio.dev/mcp

Kimi Code asks whether to add it globally, at ~/.kimi-code/mcp.json, or project-local for the current checkout, then writes the entry for you:

bash
{
  "mcpServers": {
    "Composio": {
      "url": "https://connect.composio.dev/mcp"
    }
  }
}

There is no transport field to set. Kimi Code infers HTTP from the url.

4. Restart the session

The new server is picked up on a fresh session, not the current one. Start a new session:

bash
/new

On the new session, Kimi Code detects that the server needs authorization and prompts you to run:

bash
/mcp-config login Composio

5. Authorize with OAuth

Run the command Kimi suggests:

bash
/mcp-config login composio

Kimi Code opens Composio's authorization page or surfaces a URL. Approve access, then return to the session. You should see confirmation that the Composio MCP server is connected.

Composio authorization page for Kimi Code MCP setup

Check the connection status any time with /mcp. Composio should appear as connected with its tools listed.

Kimi Code showing Composio connected after OAuth authorization

Connect your Canva account

Back in a Kimi Code session, ask the agent to connect to Canva or give it any Canva-related task.

For example, ask it to:

  • "Create a new Instagram post design"
  • "List your brand templates for social use"
  • "Start a folder for this project’s assets"

It will prompt you to authenticate and authorize access to Canva.

That is it. Composio tools are now available in Kimi Code, and your Canva account is ready to use.

Conclusion

You have successfully connected Canva to Kimi Code using Composio Connect. Your agent can now manage Canva from the terminal with natural language, without exposing credentials in prompts or local scripts.

Since the same Composio endpoint exposes 1,000+ apps, you can add Slack, Calendar, Linear, and more to the same server and chain them into cross-app workflows.

TOOLS

Supported Tools

Every Canva action and event your agent gets out of the box.

Access user specific brand templates list

Lists brand templates available to the user (Canva Enterprise only).

Create Asset Upload Job

Uploads an asset file to the user's Canva content library.

Create comment reply in design

This preview API allows replying to comments within a design on Canva, with a limit of 100 replies per comment.

Create design comment in preview api

Creates a new comment thread on a Canva design.

Create Design Import Job

Imports an external file as a new Canva design.

Create Design Resize Job

Creates a resized copy of an existing design (Canva Pro/Enterprise only).

Create URL Asset Upload Job

Tool to create an asynchronous Canva asset import job from a public URL.

Delete asset by id

You can delete an asset by specifying its `assetId`.

Exchange oauth 2 0 access or refresh token

The OAuth 2.

Fetch asset upload job status

Polls for asset upload job completion status.

Fetch canva connect signing public keys

The API for verifying Canva webhooks, 'connect/keys,' is in preview, meaning unstable, not for public integrations, and provides a rotating JWK for signature verification to prevent replay attacks.

Fetch current user details

Returns the User ID, Team ID, and display name of the user account associated with the provided access token.

Fetch design metadata and access information

Gets the metadata for a design.

Get design comment thread replies

Retrieves a list of replies for a comment or suggestion thread on a design.

Get specific design comment reply

Retrieves a specific reply to a comment or suggestion thread on a design.

Get design export job result

Polls for design export job completion status.

Get designs designid comments threadid

Retrieves metadata for a comment or suggestion thread on a design.

Get design export formats

Lists available file formats for exporting a design.

Get URL asset upload job status

Tool to retrieve the status and result of a URL-based asset upload job.

Get URL import job status

Polls for URL import job completion status.

Get user capabilities

Lists the API capabilities for the user account associated with the provided access token.

Initiate canva design autofill job

Upcoming brand template ID updates require migration within 6 months.

List design pages with pagination

Preview API for Canva: subject to unannounced changes and not for public integrations.

List folder items by type with sorting

Lists the items in a folder, including each item's `type`.

List User Designs

Provides a summary of Canva user designs, includes search filtering, and allows showing both self-created and shared designs with sorting options.

Move item to specified folder

Transfers an item to a different folder by specifying both the destination folder's ID and the item's ID.

Create new Canva design

Creates a new Canva design with preset type or custom dimensions.

Post designs designid comments

Creates a comment thread on a Canva design.

Create reply to comment thread

Tool to create a reply to a comment or suggestion thread on a Canva design.

Start design export job

Starts a new asynchronous job to export a Canva design file.

Create folder

Tool to create a folder in Canva.

Create URL Import Job

Tool to start an asynchronous job to import an external file from a URL as a new design in Canva.

Remove folder and move contents to trash

Deletes a folder by moving the user's content to Trash and reassigning other users' content to their top-level projects.

Retrieve app public key set

Returns the Json Web Key Set (public keys) of an app.

Retrieve asset metadata by id

You can retrieve the metadata of an asset by specifying its `assetId`.

Retrieve brand template dataset definition

Canva's brand template IDs will change later this year, including a 6-month integration migration.

Retrieve canva enterprise brand template metadata

Upcoming update will change brand template IDs; integrations must migrate within 6 months.

Retrieve design autofill job status

API users with Canva Enterprise membership can retrieve design autofill job results, potentially requiring multiple requests until a `success` or `failed` status is received.

Retrieve design import job status

Polls for design import job completion status.

Retrieve Design Resize Job Status

Retrieves the status and results of a design resize job.

Retrieve folder details by id

Gets the name and other details of a folder using a folder's `folderID`.

Retrieveuserprofiledata

Currently, this returns the display name of the user account associated with the provided access token.

Revoke oauth tokens

Revoke a refresh token to end its lineage and user consent, requiring re-authentication.

Update asset s name and tags by id

You can update the name and tags of an asset by specifying its `assetId`.

Update folder details by id

Updates a folder's details using its `folderID`.

Validate oauth token properties

Check an access token's validity and properties via introspection, requiring authentication.

FAQ

Frequently asked questions

With a standalone Canva MCP server, the agents and LLMs can only access a fixed set of Canva tools tied to that server. However, with the Composio Tool Router, agents can dynamically load tools from Canva and many other apps based on the task at hand, all through a single MCP endpoint.

Yes, you can. Kimi Code fully supports MCP integration. You get structured tool calling, message history handling, and model orchestration while Tool Router takes care of discovering and serving the right Canva tools.

Yes, absolutely. You can configure which Canva scopes and actions are allowed when connecting your account to Composio. You can also bring your own OAuth credentials or API configuration so you keep full control over what the agent can do.

All sensitive data such as tokens, keys, and configuration is fully encrypted at rest and in transit. Composio is SOC 2 Type 2 compliant and follows strict security practices so your Canva data and credentials are handled as safely as possible.

Start with Canva.It takes 30 seconds.

Managed auth, hosted MCP servers, and every Canva tool your agent needs.Free to start.

Start building