canvas-lms-mcp 1.17.0 → 1.19.0

package/README.md

@@ -13,6 +13,16 @@ MCP server for [Canvas LMS](https://www.instructure.com/canvas). Read courses, a
 
 116 tools across Canvas courses, assignments, submissions, gradebook history, rubrics, quizzes, New Quizzes (LTI), files, users, groups, enrollments, discussions, modules, pages, calendar, conversations, peer reviews, accounts, analytics, outcomes, student workflows, dashboard, and health checks. Three deployment modes: stdio, HTTP, and library import.
 
+## One-click install (Claude Desktop)
+
+1. **[Download `canvas-lms-mcp.mcpb`](https://github.com/bruchris/canvas-lms-mcp/releases/latest/download/canvas-lms-mcp.mcpb)** from the latest release.
+2. Double-click the file (or drag it into Claude Desktop's Extensions settings).
+3. When prompted, paste your Canvas API token and Canvas API base URL (e.g. `https://school.instructure.com/api/v1`).
+
+No terminal, no Node.js install, no config-file editing — Claude Desktop bundles the runtime and handles config for you. The same `.mcpb` works in Claude Code and MCP for Windows.
+
+Prefer the terminal? Use the [Quick Start](#quick-start) below.
+
 ## Comparison
 
 | | canvas-lms-mcp | [vishalsachdev/canvas-mcp](https://github.com/vishalsachdev/canvas-mcp) | [DMontgomery40/mcp-canvas-lms](https://github.com/DMontgomery40/mcp-canvas-lms) |

package/dist/canvas/index.cjs

@@ -1,17 +1,17 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
-var _chunkGS52LL5Ucjs = require('../chunk-GS52LL5U.cjs');
+var _chunkLTBTS6YAcjs = require('../chunk-LTBTS6YA.cjs');
 
 
 
 
 
-var _chunkEPBWT2FMcjs = require('../chunk-EPBWT2FM.cjs');
+var _chunkEXAIZYJYcjs = require('../chunk-EXAIZYJY.cjs');
 
 
 
 
 
 
-exports.CanvasApiError = _chunkEPBWT2FMcjs.CanvasApiError; exports.CanvasClient = _chunkGS52LL5Ucjs.CanvasClient; exports.CanvasHttpClient = _chunkEPBWT2FMcjs.CanvasHttpClient; exports.appendCanvasQuery = _chunkEPBWT2FMcjs.appendCanvasQuery; exports.toCanvasQuery = _chunkEPBWT2FMcjs.toCanvasQuery;
+exports.CanvasApiError = _chunkEXAIZYJYcjs.CanvasApiError; exports.CanvasClient = _chunkLTBTS6YAcjs.CanvasClient; exports.CanvasHttpClient = _chunkEXAIZYJYcjs.CanvasHttpClient; exports.appendCanvasQuery = _chunkEXAIZYJYcjs.appendCanvasQuery; exports.toCanvasQuery = _chunkEXAIZYJYcjs.toCanvasQuery;
 //# sourceMappingURL=index.cjs.map

package/dist/canvas/index.js

@@ -1,12 +1,12 @@
 import {
   CanvasClient
-} from "../chunk-Z3YUWFEE.js";
+} from "../chunk-5P4FUG7Q.js";
 import {
   CanvasApiError,
   CanvasHttpClient,
   appendCanvasQuery,
   toCanvasQuery
-} from "../chunk-FUNEDFU6.js";
+} from "../chunk-Z5EZRC5F.js";
 export {
   CanvasApiError,
   CanvasClient,

package/dist/{chunk-Z3YUWFEE.js → chunk-5P4FUG7Q.js}

@@ -1,6 +1,6 @@
 import {
   CanvasHttpClient
-} from "./chunk-FUNEDFU6.js";
+} from "./chunk-Z5EZRC5F.js";
 
 // src/canvas/courses.ts
 var DEFAULT_LIST_INCLUDE = ["term"];
@@ -1395,4 +1395,4 @@ export {
   OUTCOME_EXCLUDE_OPTIONS,
   CanvasClient
 };
-//# sourceMappingURL=chunk-Z3YUWFEE.js.map
+//# sourceMappingURL=chunk-5P4FUG7Q.js.map

package/dist/{chunk-C55DPF4U.cjs → chunk-CDWLOZQ2.cjs}

@@ -7,11 +7,11 @@
 
 
 
-var _chunkGS52LL5Ucjs = require('./chunk-GS52LL5U.cjs');
+var _chunkLTBTS6YAcjs = require('./chunk-LTBTS6YA.cjs');
 
 
 
-var _chunkEPBWT2FMcjs = require('./chunk-EPBWT2FM.cjs');
+var _chunkEXAIZYJYcjs = require('./chunk-EXAIZYJY.cjs');
 
 // src/server.ts
 var _mcpjs = require('@modelcontextprotocol/sdk/server/mcp.js');
@@ -446,7 +446,7 @@ async function appendAuditFile(filePath, line) {
 
 // src/tools/accounts.ts
 var _zod = require('zod');
-function accountTools(canvas) {
+function accountTools(canvas, pseudonymizer) {
   return [
     {
       name: "get_account",
@@ -517,9 +517,12 @@ function accountTools(canvas) {
         openWorldHint: true
       },
       handler: async (params) => {
-        return canvas.accounts.listUsers(params.account_id, {
+        const account_id = params.account_id;
+        const users = await canvas.accounts.listUsers(account_id, {
           search_term: params.search_term
         });
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _6 => _6.isEnabled, 'call', _7 => _7()])) return users;
+        return pseudonymizer.anonymizeUsers(String(account_id), users);
       }
     },
     {
@@ -544,7 +547,7 @@ function accountTools(canvas) {
 
 // src/tools/errors.ts
 function formatError(error) {
-  if (error instanceof _chunkEPBWT2FMcjs.CanvasApiError) {
+  if (error instanceof _chunkEXAIZYJYcjs.CanvasApiError) {
     const status = error.status;
     const message = error.message;
     const ltiMarkers = ["Tool not configured", "tool is not configured"];
@@ -596,7 +599,7 @@ function analyticsTools(canvas) {
       inputSchema: {
         course_id: _zod.z.number().describe("The Canvas course ID"),
         search_term: _zod.z.string().describe("The keyword or phrase to search for"),
-        content_types: _zod.z.array(_zod.z.enum(_chunkGS52LL5Ucjs.SEARCH_CONTENT_TYPES)).optional().describe(
+        content_types: _zod.z.array(_zod.z.enum(_chunkLTBTS6YAcjs.SEARCH_CONTENT_TYPES)).optional().describe(
           "Content types to search. Defaults to all types: pages, discussions, assignments, announcements."
         )
       },
@@ -608,7 +611,7 @@ function analyticsTools(canvas) {
         const courseId = params.course_id;
         const searchTerm = params.search_term;
         const types = _nullishCoalesce(params.content_types, () => ( [
-          ..._chunkGS52LL5Ucjs.SEARCH_CONTENT_TYPES
+          ..._chunkLTBTS6YAcjs.SEARCH_CONTENT_TYPES
         ]));
         if (types.length === 0) return { results: [] };
         const settled = await Promise.allSettled(
@@ -970,7 +973,7 @@ function calendarTools(canvas) {
 
 // src/tools/conversations.ts
 
-function conversationTools(canvas) {
+function conversationTools(canvas, pseudonymizer) {
   return [
     {
       name: "list_conversations",
@@ -981,7 +984,9 @@ function conversationTools(canvas) {
         openWorldHint: true
       },
       handler: async () => {
-        return canvas.conversations.list();
+        const conversations = await canvas.conversations.list();
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _8 => _8.isEnabled, 'call', _9 => _9()])) return conversations;
+        return Promise.all(conversations.map((c) => pseudonymizer.anonymizeConversation(c)));
       }
     },
     {
@@ -995,7 +1000,9 @@ function conversationTools(canvas) {
         openWorldHint: true
       },
       handler: async (params) => {
-        return canvas.conversations.get(params.conversation_id);
+        const conversation = await canvas.conversations.get(params.conversation_id);
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _10 => _10.isEnabled, 'call', _11 => _11()])) return conversation;
+        return pseudonymizer.anonymizeConversation(conversation);
       }
     },
     {
@@ -1401,7 +1408,7 @@ var ENROLLMENT_INCLUDE = [
   "current_points",
   "grades"
 ];
-function enrollmentTools(canvas) {
+function enrollmentTools(canvas, pseudonymizer) {
   return [
     {
       name: "list_enrollments",
@@ -1429,7 +1436,11 @@ function enrollmentTools(canvas) {
           opts.grading_period_id = params.grading_period_id;
         if (params.enrollment_term_id !== void 0)
           opts.enrollment_term_id = params.enrollment_term_id;
-        return canvas.enrollments.list(opts);
+        const enrollments = await canvas.enrollments.list(opts);
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _12 => _12.isEnabled, 'call', _13 => _13()])) return enrollments;
+        return Promise.all(
+          enrollments.map((e) => pseudonymizer.anonymizeEnrollment(e.course_id, e))
+        );
       }
     },
     {
@@ -1450,6 +1461,7 @@ function enrollmentTools(canvas) {
         openWorldHint: true
       },
       handler: async (params) => {
+        const course_id = params.course_id;
         const opts = {};
         if (params.type !== void 0) opts.type = params.type;
         if (params.state !== void 0) opts.state = params.state;
@@ -1461,7 +1473,9 @@ function enrollmentTools(canvas) {
           opts.grading_period_id = params.grading_period_id;
         if (params.enrollment_term_id !== void 0)
           opts.enrollment_term_id = params.enrollment_term_id;
-        return canvas.enrollments.listForCourse(params.course_id, opts);
+        const enrollments = await canvas.enrollments.listForCourse(course_id, opts);
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _14 => _14.isEnabled, 'call', _15 => _15()])) return enrollments;
+        return Promise.all(enrollments.map((e) => pseudonymizer.anonymizeEnrollment(course_id, e)));
       }
     },
     {
@@ -1626,7 +1640,18 @@ function fileTools(canvas) {
 
 // src/tools/gradebook-history.ts
 
-function gradebookHistoryTools(canvas) {
+async function anonymizeHistoryVersion(courseId, version2, pseudonymizer) {
+  if (!version2.user_name || !version2.user_id) return version2;
+  const minimalUser = {
+    id: version2.user_id,
+    name: version2.user_name,
+    sortable_name: version2.user_name,
+    short_name: version2.user_name
+  };
+  const pseudo = await pseudonymizer.anonymizeUser(courseId, minimalUser);
+  return { ...version2, user_name: pseudo.name };
+}
+function gradebookHistoryTools(canvas, pseudonymizer) {
   return [
     {
       name: "list_gradebook_history_days",
@@ -1678,7 +1703,21 @@ function gradebookHistoryTools(canvas) {
         const date = params.date;
         const grader_id = params.grader_id;
         const assignment_id = params.assignment_id;
-        return canvas.gradebookHistory.listSubmissions(course_id, date, grader_id, assignment_id);
+        const submissions = await canvas.gradebookHistory.listSubmissions(
+          course_id,
+          date,
+          grader_id,
+          assignment_id
+        );
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _16 => _16.isEnabled, 'call', _17 => _17()])) return submissions;
+        return Promise.all(
+          submissions.map(async (s) => ({
+            ...s,
+            versions: s.versions ? await Promise.all(
+              s.versions.map((v) => anonymizeHistoryVersion(course_id, v, pseudonymizer))
+            ) : s.versions
+          }))
+        );
       }
     },
     {
@@ -1699,7 +1738,15 @@ function gradebookHistoryTools(canvas) {
         const assignment_id = params.assignment_id;
         const user_id = params.user_id;
         const ascending = params.ascending;
-        return canvas.gradebookHistory.getFeed(course_id, { assignment_id, user_id, ascending });
+        const versions = await canvas.gradebookHistory.getFeed(course_id, {
+          assignment_id,
+          user_id,
+          ascending
+        });
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _18 => _18.isEnabled, 'call', _19 => _19()])) return versions;
+        return Promise.all(
+          versions.map((v) => anonymizeHistoryVersion(course_id, v, pseudonymizer))
+        );
       }
     }
   ];
@@ -1707,7 +1754,7 @@ function gradebookHistoryTools(canvas) {
 
 // src/tools/groups.ts
 
-function groupTools(canvas) {
+function groupTools(canvas, pseudonymizer) {
   return [
     {
       name: "list_groups",
@@ -1736,7 +1783,9 @@ function groupTools(canvas) {
       },
       handler: async (params) => {
         const group_id = params.group_id;
-        return canvas.groups.listMembers(group_id);
+        const users = await canvas.groups.listMembers(group_id);
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _20 => _20.isEnabled, 'call', _21 => _21()])) return users;
+        return pseudonymizer.anonymizeUsers(`_group_${group_id}`, users);
       }
     }
   ];
@@ -1928,13 +1977,13 @@ function moduleTools(canvas) {
 
 // src/tools/outcomes.ts
 
-function outcomeTools(canvas) {
+function outcomeTools(canvas, pseudonymizer) {
   return [
     {
       name: "get_root_outcome_group",
       description: "Get the root outcome group for an account or course context.",
       inputSchema: {
-        context_type: _zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_CONTEXT_TYPES).describe("Whether to read outcomes from an account or course context."),
+        context_type: _zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_CONTEXT_TYPES).describe("Whether to read outcomes from an account or course context."),
         context_id: _zod.z.number().describe("The Canvas account ID or course ID for the context.")
       },
       annotations: { readOnlyHint: true, openWorldHint: true },
@@ -1947,7 +1996,7 @@ function outcomeTools(canvas) {
       name: "list_outcome_groups",
       description: "List all outcome groups for an account or course context.",
       inputSchema: {
-        context_type: _zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_CONTEXT_TYPES).describe("Whether to read outcome groups from an account or course context."),
+        context_type: _zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_CONTEXT_TYPES).describe("Whether to read outcome groups from an account or course context."),
         context_id: _zod.z.number().describe("The Canvas account ID or course ID for the context.")
       },
       annotations: { readOnlyHint: true, openWorldHint: true },
@@ -1960,10 +2009,10 @@ function outcomeTools(canvas) {
       name: "list_outcome_group_links",
       description: "List all outcome links in an account or course context.",
       inputSchema: {
-        context_type: _zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_CONTEXT_TYPES).describe("Whether to read outcome links from an account or course context."),
+        context_type: _zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_CONTEXT_TYPES).describe("Whether to read outcome links from an account or course context."),
         context_id: _zod.z.number().describe("The Canvas account ID or course ID for the context."),
-        outcome_style: _zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_DETAIL_LEVELS).optional().describe('Outcome detail level. Use "full" to include expanded outcome fields.'),
-        outcome_group_style: _zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_DETAIL_LEVELS).optional().describe(
+        outcome_style: _zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_DETAIL_LEVELS).optional().describe('Outcome detail level. Use "full" to include expanded outcome fields.'),
+        outcome_group_style: _zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_DETAIL_LEVELS).optional().describe(
           'Outcome group detail level. Use "full" to include expanded outcome group fields.'
         )
       },
@@ -1981,7 +2030,7 @@ function outcomeTools(canvas) {
       name: "get_outcome_group",
       description: "Get details for a specific outcome group in an account or course context.",
       inputSchema: {
-        context_type: _zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_CONTEXT_TYPES).describe("The outcome group context type."),
+        context_type: _zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_CONTEXT_TYPES).describe("The outcome group context type."),
         context_id: _zod.z.number().describe("The Canvas account ID or course ID for the context."),
         outcome_group_id: _zod.z.number().describe("The Canvas outcome group ID.")
       },
@@ -1996,10 +2045,10 @@ function outcomeTools(canvas) {
       name: "list_outcome_group_outcomes",
       description: "List the linked outcomes directly under a specific outcome group.",
       inputSchema: {
-        context_type: _zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_CONTEXT_TYPES).describe("The outcome group context type."),
+        context_type: _zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_CONTEXT_TYPES).describe("The outcome group context type."),
         context_id: _zod.z.number().describe("The Canvas account ID or course ID for the context."),
         outcome_group_id: _zod.z.number().describe("The Canvas outcome group ID."),
-        outcome_style: _zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_DETAIL_LEVELS).optional().describe('Outcome detail level. Use "full" to include expanded outcome fields.')
+        outcome_style: _zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_DETAIL_LEVELS).optional().describe('Outcome detail level. Use "full" to include expanded outcome fields.')
       },
       annotations: { readOnlyHint: true, openWorldHint: true },
       handler: async (params) => canvas.outcomes.listGroupOutcomes(
@@ -2015,7 +2064,7 @@ function outcomeTools(canvas) {
       name: "list_outcome_group_subgroups",
       description: "List the immediate child outcome groups under a specific outcome group.",
       inputSchema: {
-        context_type: _zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_CONTEXT_TYPES).describe("The outcome group context type."),
+        context_type: _zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_CONTEXT_TYPES).describe("The outcome group context type."),
         context_id: _zod.z.number().describe("The Canvas account ID or course ID for the context."),
         outcome_group_id: _zod.z.number().describe("The Canvas outcome group ID.")
       },
@@ -2063,12 +2112,17 @@ function outcomeTools(canvas) {
         include_hidden: _zod.z.boolean().optional().describe("Include hidden outcomes when Canvas supports it.")
       },
       annotations: { readOnlyHint: true, openWorldHint: true },
-      handler: async (params) => canvas.outcomes.getOutcomeResults(params.course_id, {
-        user_ids: params.user_ids,
-        outcome_ids: params.outcome_ids,
-        include_alignments: params.include_alignments,
-        include_hidden: params.include_hidden
-      })
+      handler: async (params) => {
+        const course_id = params.course_id;
+        const response = await canvas.outcomes.getOutcomeResults(course_id, {
+          user_ids: params.user_ids,
+          outcome_ids: params.outcome_ids,
+          include_alignments: params.include_alignments,
+          include_hidden: params.include_hidden
+        });
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _22 => _22.isEnabled, 'call', _23 => _23()])) return response;
+        return pseudonymizer.anonymizeOutcomeResults(course_id, response);
+      }
     },
     {
       name: "get_outcome_rollups",
@@ -2076,29 +2130,34 @@ function outcomeTools(canvas) {
       inputSchema: {
         course_id: _zod.z.number().describe("The Canvas course ID."),
         aggregate: _zod.z.enum(["course"]).optional().describe("Aggregate all student rollups into a single course-level rollup."),
-        aggregate_stat: _zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_ROLLUP_AGGREGATE_STATS).optional().describe('Statistic to use when aggregate="course".'),
+        aggregate_stat: _zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_ROLLUP_AGGREGATE_STATS).optional().describe('Statistic to use when aggregate="course".'),
         user_ids: _zod.z.array(_zod.z.union([_zod.z.number(), _zod.z.string()])).optional().describe('Optional Canvas user IDs or SIS user IDs prefixed with "sis_user_id:".'),
         outcome_ids: _zod.z.array(_zod.z.number()).optional().describe("Optional outcome IDs to restrict the rollups."),
         include_courses: _zod.z.boolean().optional().describe("Include linked course details in the response payload."),
-        exclude: _zod.z.array(_zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_EXCLUDE_OPTIONS)).optional().describe("Optional rollup exclusions for missing users or missing outcome results."),
-        sort_by: _zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_ROLLUP_SORT_BY).optional().describe("Sort rollups by student name or by a specific outcome score."),
+        exclude: _zod.z.array(_zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_EXCLUDE_OPTIONS)).optional().describe("Optional rollup exclusions for missing users or missing outcome results."),
+        sort_by: _zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_ROLLUP_SORT_BY).optional().describe("Sort rollups by student name or by a specific outcome score."),
         sort_outcome_id: _zod.z.number().optional().describe('Outcome ID to sort by when sort_by="outcome".'),
-        sort_order: _zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_SORT_ORDER).optional().describe("Sort order to apply when sorting rollups."),
+        sort_order: _zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_SORT_ORDER).optional().describe("Sort order to apply when sorting rollups."),
         add_defaults: _zod.z.boolean().optional().describe("Include default mastery colors and levels when Canvas supports it.")
       },
       annotations: { readOnlyHint: true, openWorldHint: true },
-      handler: async (params) => canvas.outcomes.getOutcomeRollups(params.course_id, {
-        aggregate: params.aggregate,
-        aggregate_stat: params.aggregate_stat,
-        user_ids: params.user_ids,
-        outcome_ids: params.outcome_ids,
-        include_courses: params.include_courses,
-        exclude: params.exclude,
-        sort_by: params.sort_by,
-        sort_outcome_id: params.sort_outcome_id,
-        sort_order: params.sort_order,
-        add_defaults: params.add_defaults
-      })
+      handler: async (params) => {
+        const course_id = params.course_id;
+        const response = await canvas.outcomes.getOutcomeRollups(course_id, {
+          aggregate: params.aggregate,
+          aggregate_stat: params.aggregate_stat,
+          user_ids: params.user_ids,
+          outcome_ids: params.outcome_ids,
+          include_courses: params.include_courses,
+          exclude: params.exclude,
+          sort_by: params.sort_by,
+          sort_outcome_id: params.sort_outcome_id,
+          sort_order: params.sort_order,
+          add_defaults: params.add_defaults
+        });
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _24 => _24.isEnabled, 'call', _25 => _25()])) return response;
+        return pseudonymizer.anonymizeOutcomeResults(course_id, response);
+      }
     },
     {
       name: "get_outcome_contributing_scores",
@@ -2126,7 +2185,7 @@ function outcomeTools(canvas) {
       description: "Get mastery distribution analytics for outcomes in a course, optionally filtered by students or outcomes.",
       inputSchema: {
         course_id: _zod.z.number().describe("The Canvas course ID."),
-        exclude: _zod.z.array(_zod.z.enum(_chunkGS52LL5Ucjs.OUTCOME_EXCLUDE_OPTIONS)).optional().describe("Optional exclusions for missing users or missing outcome results."),
+        exclude: _zod.z.array(_zod.z.enum(_chunkLTBTS6YAcjs.OUTCOME_EXCLUDE_OPTIONS)).optional().describe("Optional exclusions for missing users or missing outcome results."),
         outcome_ids: _zod.z.array(_zod.z.number()).optional().describe("Optional outcome IDs to restrict the distribution results."),
         student_ids: _zod.z.array(_zod.z.union([_zod.z.number(), _zod.z.string()])).optional().describe('Optional Canvas student IDs or SIS user IDs prefixed with "sis_user_id:".'),
         include_alignment_distributions: _zod.z.boolean().optional().describe("Include contributing score distributions for alignments."),
@@ -2898,7 +2957,7 @@ var SUBMISSION_GET_INCLUDE = [
   "read_status"
 ];
 var SUBMISSION_WORKFLOW_STATE = ["submitted", "unsubmitted", "graded", "pending_review"];
-function submissionTools(canvas) {
+function submissionTools(canvas, pseudonymizer) {
   return [
     {
       name: "list_submissions",
@@ -2922,6 +2981,7 @@ function submissionTools(canvas) {
         openWorldHint: true
       },
       handler: async (params) => {
+        const course_id = params.course_id;
         const opts = {};
         if (params.include !== void 0)
           opts.include = params.include;
@@ -2934,11 +2994,13 @@ function submissionTools(canvas) {
           opts.workflow_state = params.workflow_state;
         if (params.grading_period_id !== void 0)
           opts.grading_period_id = params.grading_period_id;
-        return canvas.submissions.list(
-          params.course_id,
+        const submissions = await canvas.submissions.list(
+          course_id,
           params.assignment_id,
           opts
         );
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _26 => _26.isEnabled, 'call', _27 => _27()])) return submissions;
+        return Promise.all(submissions.map((s) => pseudonymizer.anonymizeSubmission(course_id, s)));
       }
     },
     {
@@ -2957,15 +3019,18 @@ function submissionTools(canvas) {
         openWorldHint: true
       },
       handler: async (params) => {
+        const course_id = params.course_id;
         const opts = {};
         if (params.include !== void 0)
           opts.include = params.include;
-        return canvas.submissions.get(
-          params.course_id,
+        const submission = await canvas.submissions.get(
+          course_id,
           params.assignment_id,
           params.user_id,
           opts
         );
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _28 => _28.isEnabled, 'call', _29 => _29()])) return submission;
+        return pseudonymizer.anonymizeSubmission(course_id, submission);
       }
     },
     {
@@ -3037,7 +3102,7 @@ var COURSE_USER_INCLUDE = [
 ];
 var USER_SORT = ["username", "email", "sis_id", "integration_id", "last_login"];
 var SEARCH_USER_INCLUDE = ["email", "last_login", "avatar_url", "time_zone", "uuid"];
-function userTools(canvas) {
+function userTools(canvas, pseudonymizer) {
   return [
     {
       name: "list_students",
@@ -3051,7 +3116,9 @@ function userTools(canvas) {
       },
       handler: async (params) => {
         const course_id = params.course_id;
-        return canvas.users.listStudents(course_id);
+        const users = await canvas.users.listStudents(course_id);
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _30 => _30.isEnabled, 'call', _31 => _31()])) return users;
+        return pseudonymizer.anonymizeUsers(course_id, users);
       }
     },
     {
@@ -3065,8 +3132,9 @@ function userTools(canvas) {
         openWorldHint: true
       },
       handler: async (params) => {
-        const user_id = params.user_id;
-        return canvas.users.get(user_id);
+        const user = await canvas.users.get(params.user_id);
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _32 => _32.isEnabled, 'call', _33 => _33()])) return user;
+        return pseudonymizer.anonymizeUser("_global", user);
       }
     },
     {
@@ -3096,16 +3164,15 @@ function userTools(canvas) {
         openWorldHint: true
       },
       handler: async (params) => {
+        const account_id = params.account_id;
         const opts = {};
         if (params.sort !== void 0) opts.sort = params.sort;
         if (params.order !== void 0) opts.order = params.order;
         if (params.include !== void 0)
           opts.include = params.include;
-        return canvas.users.searchUsers(
-          params.account_id,
-          params.search_term,
-          opts
-        );
+        const users = await canvas.users.searchUsers(account_id, params.search_term, opts);
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _34 => _34.isEnabled, 'call', _35 => _35()])) return users;
+        return pseudonymizer.anonymizeUsers(String(account_id), users);
       }
     },
     {
@@ -3126,6 +3193,7 @@ function userTools(canvas) {
         openWorldHint: true
       },
       handler: async (params) => {
+        const course_id = params.course_id;
         const opts = {};
         if (params.enrollment_type !== void 0)
           opts.enrollment_type = params.enrollment_type;
@@ -3138,7 +3206,9 @@ function userTools(canvas) {
         if (params.search_term !== void 0) opts.search_term = params.search_term;
         if (params.sort !== void 0) opts.sort = params.sort;
         if (params.order !== void 0) opts.order = params.order;
-        return canvas.users.listCourseUsers(params.course_id, opts);
+        const users = await canvas.users.listCourseUsers(course_id, opts);
+        if (!_optionalChain([pseudonymizer, 'optionalAccess', _36 => _36.isEnabled, 'call', _37 => _37()])) return users;
+        return pseudonymizer.anonymizeUsers(course_id, users);
       }
     }
   ];
@@ -3304,7 +3374,9 @@ function pseudonymTools(pseudonymizer) {
 // src/tools/index.ts
 var PSEUDONYM_META_NOTE = "Student names and contact info in this response have been replaced with stable pseudonyms (CANVAS_PSEUDONYMIZE_STUDENTS=true). Real names are not available to this tool.";
 function getAllTools(canvas, pseudonymizer) {
-  const domainTools = toolDomainCatalog.flatMap((registration) => registration.getTools(canvas));
+  const domainTools = toolDomainCatalog.flatMap(
+    (registration) => registration.getTools(canvas, pseudonymizer)
+  );
   const conditional = pseudonymizer ? pseudonymTools(pseudonymizer) : [];
   return [...domainTools, ...conditional];
 }
@@ -3318,12 +3390,12 @@ function registerAllTools(server, canvas, pseudonymizer) {
         const response = {
           content: [{ type: "text", text }]
         };
-        if (_optionalChain([pseudonymizer, 'optionalAccess', _6 => _6.isEnabled, 'call', _7 => _7()])) {
+        if (_optionalChain([pseudonymizer, 'optionalAccess', _38 => _38.isEnabled, 'call', _39 => _39()])) {
           response._meta = { pseudonymized: true, note: PSEUDONYM_META_NOTE };
         }
         return response;
       } catch (error) {
-        if (error instanceof _chunkEPBWT2FMcjs.CanvasApiError) {
+        if (error instanceof _chunkEXAIZYJYcjs.CanvasApiError) {
         } else {
           console.error(`Unexpected error in tool "${tool.name}":`, error);
         }
@@ -3371,7 +3443,7 @@ function registerSyllabusResource(server, canvas) {
           ]
         };
       } catch (error) {
-        if (!(error instanceof _chunkEPBWT2FMcjs.CanvasApiError)) {
+        if (!(error instanceof _chunkEXAIZYJYcjs.CanvasApiError)) {
           console.error("Unexpected error in syllabus resource:", error);
         }
         return {
@@ -3420,7 +3492,7 @@ function registerAssignmentDescriptionResource(server, canvas) {
           ]
         };
       } catch (error) {
-        if (!(error instanceof _chunkEPBWT2FMcjs.CanvasApiError)) {
+        if (!(error instanceof _chunkEXAIZYJYcjs.CanvasApiError)) {
           console.error("Unexpected error in assignment-description resource:", error);
         }
         return {
@@ -3439,14 +3511,14 @@ function registerAllResources(server, canvas) {
 
 // src/server.ts
 function createCanvasMCPServer(config) {
-  const canvas = new (0, _chunkGS52LL5Ucjs.CanvasClient)({
+  const canvas = new (0, _chunkLTBTS6YAcjs.CanvasClient)({
     token: config.token,
     baseUrl: config.baseUrl
   });
   const pseudonymizer = _nullishCoalesce(config.pseudonymizer, () => ( new Pseudonymizer({ baseUrl: config.baseUrl })));
   const server = new (0, _mcpjs.McpServer)({
     name: "canvas-lms-mcp",
-    version: _chunkEPBWT2FMcjs.version
+    version: _chunkEXAIZYJYcjs.version
   });
   registerAllTools(server, canvas, pseudonymizer);
   registerAllResources(server, canvas);
@@ -3457,4 +3529,4 @@ function createCanvasMCPServer(config) {
 
 
 exports.Pseudonymizer = Pseudonymizer; exports.createCanvasMCPServer = createCanvasMCPServer;
-//# sourceMappingURL=chunk-C55DPF4U.cjs.map
+//# sourceMappingURL=chunk-CDWLOZQ2.cjs.map