Canva

Use the installed canva CLI. Start with canva status. If it reports not_connected, run canva authorize-url and share only the returned connect_url. If the CLI reports outdated OAuth settings, have the user disconnect Canva in Settings and reconnect. Never request tokens in chat.

Run canva list-tools for live schemas and use only tools returned there. Follow their input schemas exactly and include a concise user_intent. hatch_permission_overrides identifies argument-dependent permissions; opening an editing transaction is a write and deleting pages is a delete. Some tools require Canva Pro, Enterprise, or available AI credits.

Save each raw response before parsing. Check result.isError, then read result.structuredContent when present or parse the JSON text block in result.content. Both response forms are valid. A local parsing failure does not mean a mutation failed: recover its response or inspect saved state before continuing. Never repeat a copy, creation, or commit just to obtain its output.