canvas-parent-mcp 2.1.4 → 2.1.5

package/.claude-plugin/marketplace.json

@@ -7,7 +7,7 @@
   },
   "metadata": {
     "description": "MCP server for Canvas LMS (Instructure) — courses, grades, assignments, announcements, planner, conversations, files",
-    "version": "2.1.4"
+    "version": "2.1.5"
   },
   "plugins": [
     {
@@ -15,7 +15,7 @@
       "displayName": "Canvas LMS",
       "source": "./",
       "description": "Canvas LMS (Instructure) MCP server for Claude — student/observer access via natural language",
-      "version": "2.1.4",
+      "version": "2.1.5",
       "author": {
         "name": "Chris Hall"
       },

package/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "canvas-parent-mcp",
   "displayName": "Canvas LMS",
-  "version": "2.1.4",
+  "version": "2.1.5",
   "description": "Canvas LMS (Instructure) MCP server for Claude — courses, grades, assignments, announcements, planner, conversations, files",
   "author": {
     "name": "Chris Hall",

package/README.md

@@ -38,7 +38,7 @@ Set `CANVAS_BASE_URL` plus one of four auth modes. `canvas-parent-mcp` tries the
 1. **`CANVAS_TOKEN`** → personal access token
 2. **`CANVAS_CLIENT_ID` + `CANVAS_CLIENT_SECRET` + `CANVAS_REFRESH_TOKEN`** → OAuth
 3. **`CANVAS_USERNAME` + `CANVAS_PASSWORD`** → session-scrape (direct Canvas accounts only)
-4. **fetchproxy fallback** → no env vars needed; reads `canvas_session` + `pseudonym_credentials` cookies from your signed-in Canvas tab via the [fetchproxy](https://github.com/chrischall/fetchproxy) browser extension
+4. **fetchproxy fallback** → no env vars needed; reads `canvas_session` + `pseudonym_credentials` cookies from your signed-in Canvas tab via the [ContextMint Bridge](https://github.com/nullnet-app/contextmint-bridge/releases) browser extension
 
 If none succeed, you get an error that names every escape hatch.
 
@@ -48,7 +48,13 @@ If none succeed, you get an error that names every escape hatch.
 CANVAS_BASE_URL=https://cms.instructure.com
 ```
 
-Install the fetchproxy 0.3.0 Chrome / Safari extension (Chrome Web Store / Safari `.dmg`), sign into your Canvas instance once, and the MCP reads your session cookies at startup. After that, all Canvas API calls go directly from Node — the extension is **not** in the request hot path. Works with any auth flow (SSO/SAML/2FA included) because Canvas itself handled the sign-in.
+Install the ContextMint Bridge browser extension from its [releases page](https://github.com/nullnet-app/contextmint-bridge/releases) (Chrome: download the chrome zip, unzip it, and load it unpacked at `chrome://extensions` with Developer mode on — there is no Chrome Web Store listing yet; Safari: not available yet — it will ship inside the ContextMint app, which has no public download yet, so use Chrome for now), sign into your Canvas instance once, and the MCP reads your session cookies at startup. After that, all Canvas API calls go directly from Node — the extension is **not** in the request hot path. Works with any auth flow (SSO/SAML/2FA included) because Canvas itself handled the sign-in.
+
+> **Where the extension comes from.** ContextMint Bridge is the fetchproxy browser extension under its new name, from the same maintainer — fetchproxy's own README ([Extension](https://github.com/chrischall/fetchproxy#extension)) points to it. Its source is public at [nullnet-app/contextmint-bridge](https://github.com/nullnet-app/contextmint-bridge): build it yourself (`npm run build`, per its README), or check a release zip against the `.sha256` file published beside it:
+>
+> ```bash
+> shasum -a 256 -c contextmint-bridge-chrome-<version>.zip.sha256
+> ```
 
 Multiple districts? Declared domain `instructure.com` matches every `*.instructure.com` host, so you only pair the extension once. The MCP uses whichever district you set in `CANVAS_BASE_URL`.
 

package/dist/auth.js

@@ -140,7 +140,7 @@ export async function resolveAuth() {
     throw new Error('Missing Canvas auth config. Set one of: CANVAS_TOKEN (personal access token), ' +
         'CANVAS_USERNAME+CANVAS_PASSWORD (auto-login), ' +
         'all three of CANVAS_CLIENT_ID, CANVAS_CLIENT_SECRET, CANVAS_REFRESH_TOKEN (OAuth), ' +
-        'or install the fetchproxy extension and sign into your Canvas instance ' +
+        'or install the ContextMint Bridge browser extension and sign into your Canvas instance ' +
         '(unset CANVAS_DISABLE_FETCHPROXY if it is set).');
 }
 /**
@@ -218,7 +218,7 @@ async function liftBrowserCookie(declaredDomain, baseHost) {
         if (!canvasSession || !pseudoCreds) {
             throw new Error(`required cookies not found on ${baseHost}. ` +
                 'Sign into your Canvas instance in the browser ' +
-                '(with the fetchproxy extension installed) and retry.');
+                '(with the ContextMint Bridge extension installed) and retry.');
         }
         return `canvas_session=${canvasSession}; pseudonym_credentials=${pseudoCreds}`;
     }
@@ -229,7 +229,7 @@ async function liftBrowserCookie(declaredDomain, baseHost) {
         // the user needs to wake it. `.hint` is the actionable copy.
         if (classifyBridgeError(e) === 'bridge_down') {
             const downErr = e;
-            throw new Error(`Canvas auth: fetchproxy bridge is down (extension service worker unreachable after retry). ${downErr.hint}`);
+            throw new Error(`Canvas auth: ContextMint Bridge is down (extension service worker unreachable after retry). ${downErr.hint}`);
         }
         const msg = e instanceof Error ? e.message : String(e);
         throw new Error(`Canvas auth: no CANVAS_TOKEN, CANVAS_CLIENT_*/CANVAS_REFRESH_TOKEN, or CANVAS_USERNAME/CANVAS_PASSWORD set, ` +