← Back to directory
COMPARE UP TO 4 SERVERS

Compare MCP servers

Compare scores, permissions, risks, and fit in one decision-focused table.

DimensionCanvas MCP ServerA comprehensive MCP server for Canvas LMS with student, instructor, and account administration functionality.Hevy MCPManage your Hevy workout data from AI assistants via MCP.
FMRS40 / 100 · D77 / 100 · B
Reliability6 / 2012 / 20
Security and permissions6 / 2016 / 20
Maintenance10 / 2016 / 20
Documentation8 / 2018 / 20
Setup experience10 / 2015 / 20
Best for
  • Students who want to interact with Canvas through an AI assistant
  • Instructors looking to automate course management and grading
  • Administrators needing account-level oversight and reporting
  • Hevy PRO users who want AI assistants to directly access their workout data
  • People who prefer using MCP clients like Claude, Cursor, Codex for fitness tracking
  • Anyone needing summaries and insights from their training data
Not for
  • Users seeking official support from Instructure
  • Use cases requiring instant mobile access or offline functionality (not yet implemented)
  • Environments with extremely high token security requirements and where administrative privileges cannot be granted
  • Users without a Hevy PRO subscription (API key required)
  • Users who want to use the server without an API key
  • Those needing delete workflows (Hevy API does not expose delete endpoints)
Required permissions
  • Requires CANVAS_API_TOKEN with appropriate permissions: student, instructor, or admin
  • Account-level operations require administrative privileges
  • The server may read and modify courses, assignments, grades, users, and account data
  • Requires HEVY_API_KEY environment variable for Hevy API authentication
  • Can create, update, and replace workouts, routines, folders, templates, and body measurements via tools
  • Read operations can fetch workouts, routines, folders, templates, history, and user info
Risks and side effects
  • API token leakage could lead to unauthorized access
  • Large number of tools may overload context windows, reducing efficiency
  • Prompt injection risk: tool outputs may contain malicious instructions; enforce least privilege
  • Unofficial server, not supported, may not meet institutional security policies
  • API key can be misused if leaked; do not expose in URLs, logs, or screenshots
  • Create operations may produce duplicates on retry; update operations replace existing records
  • The server sends data to the Hevy API and may send telemetry to external services unless disabled
Supported clientsClaude Desktop, Codex, CursorClaude Desktop, Cursor, Codex, Antigravity
Tools5326