canvas-parent-mcp 1.3.0 → 1.3.1

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Canvas LMS (Instructure) — courses, grades, assignments, announcements, planner, conversations, files",
-    "version": "1.3.0"
+    "version": "1.3.1"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Canvas LMS",
       "source": "./",
       "description": "Canvas LMS (Instructure) MCP server for Claude — student/observer access via natural language",
-      "version": "1.3.0",
+      "version": "1.3.1",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "canvas-parent-mcp",
   "displayName": "Canvas LMS",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "description": "Canvas LMS (Instructure) MCP server for Claude — courses, grades, assignments, announcements, planner, conversations, files",
   "author": {
     "name": "Chris Hall",

package/dist/bundle.js

@@ -39226,7 +39226,7 @@ function loadAccount(env = process.env) {
 // package.json
 var package_default = {
   name: "canvas-parent-mcp",
-  version: "1.3.0",
+  version: "1.3.1",
   mcpName: "io.github.chrischall/canvas-parent-mcp",
   description: "Canvas LMS (Instructure) MCP server \u2014 student/observer read access with optional file download",
   author: "Claude Code (AI) <https://www.anthropic.com/claude>",
@@ -40491,7 +40491,7 @@ try {
 }
 await runMcp({
   name: "canvas",
-  version: "1.3.0",
+  version: "1.3.1",
   // x-release-please-version
   tools: [
     (server) => {

package/dist/index.js

@@ -46,7 +46,7 @@ catch (e) {
 // host's install-time `tools/list` succeeds.
 await runMcp({
     name: 'canvas',
-    version: '1.3.0', // x-release-please-version
+    version: '1.3.1', // x-release-please-version
     tools: [
         (server) => {
             if (resolved) {

package/mint.yaml

@@ -63,16 +63,31 @@ env:
       $MCP_DATA_DIR/.canvas-parent-mcp/session.json.
 egress:
   allow:
-    # Canvas is multi-tenant per district: the base URL is a *.instructure.com
-    # host (cms.instructure.com is the CMS district). Narrow this to YOUR
-    # district's host if you prefer.
+    # Only hosts the SERVER process actually fetches; hosts that appear solely
+    # in a URL this server builds and returns are excluded. Matching is EXACT:
+    # an apex entry covers no subdomain, and `*.` covers labels beneath it but
+    # not the apex — which is why the wildcard below is a wildcard.
+    #
+    # Canvas is multi-tenant per district: CANVAS_BASE_URL is a
+    # <district>.instructure.com host (cms.instructure.com is the CMS district)
+    # and every API call, the form login and the OAuth refresh go to it.
+    # Narrow the wildcard to YOUR district's host if you prefer. A self-hosted
+    # Canvas (a CANVAS_BASE_URL outside instructure.com) is env-selected and
+    # must be added here by hand.
+    #
+    # canvas_download_file follows the file URL Canvas returns, and a hosted
+    # district's download 302s to Instructure's file store, whose host carries
+    # the region (inst-fs-iad-prod.inscloudgate.net, -dub-, -syd-, …). The
+    # exact host is discovered at runtime, hence the wildcard.
     #
     # sso.canvaslms.com is deliberately NOT here: the hosted server never
     # contacts it. session-login.ts only INSPECTS a redirect's Location for
     # that host, and qr-login.ts is the separate canvas-parent-mcp-qr-login
-    # bin, not the child this manifest configures.
-    - instructure.com
+    # bin, not the child this manifest configures. The fetchproxy fallback
+    # lifts cookies through the browser bridge, which is not a dial either.
+    - "*.instructure.com"
     - cms.instructure.com
+    - "*.inscloudgate.net"
 
 state:
   dataDir: true

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "canvas-parent-mcp",
-  "version": "1.3.0",
+  "version": "1.3.1",
   "mcpName": "io.github.chrischall/canvas-parent-mcp",
   "description": "Canvas LMS (Instructure) MCP server — student/observer read access with optional file download",
   "author": "Claude Code (AI) <https://www.anthropic.com/claude>",

package/server.json

@@ -6,12 +6,12 @@
     "url": "https://github.com/chrischall/canvas-parent-mcp",
     "source": "github"
   },
-  "version": "1.3.0",
+  "version": "1.3.1",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "canvas-parent-mcp",
-      "version": "1.3.0",
+      "version": "1.3.1",
       "transport": {
         "type": "stdio"
       },