This section is the lookup material for the Canva Developers SDK: the APIs, tools, and configuration that each surface exposes, along with the security guidance and policies that apply across all of them. Start here when you already know what you want to do and need the exact method, field, scope, or tool.

The reference is grouped as follows:

Apps inside Canva: The API reference for each @canva/* package, including the intents that an app implements, the permissions those intents require, and the error codes they can return. It also covers the App UI Kit's components, patterns, and design tokens.
Canva for your platform: The Canva REST API reference, the scopes an app can request, the error responses the APIs return, and the webhook notifications you can subscribe to.
Canva for AI assistants: Every tool that the Canva MCP server exposes, grouped by what it does, along with the rate limits, usage policy, and prohibited uses.
Security: Security guidance for each surface, and the shared responsibility model that sets out which parts of an app's security are Canva's and which are yours.
Canva CLI: The commands that the Canva CLI provides, including how to make REST API requests with it, and the canva-app.json configuration file that it uses for an app.
Policies: The deprecation policy, which covers how long a feature stays available after it's deprecated, and how Canva communicates the change.