MCP for Education: Canvas, Lecture Video and Research Connectors Under FERPA

MCP lets an AI assistant read course content, lecture transcripts and licensed research, and in some setups act inside a learning management system. As of November 2026, Panopto and Wiley connect to Claude through MCP servers, Instructure is testing MCP support for Canvas with a first group of institutions, and community Canvas servers exist. Student records are protected by FERPA, whichever tool touches them.

MCP (Model Context Protocol) is an open standard for connecting AI apps to other software through MCP servers. New to it? Start with What Is MCP?.

This guide covers what MCP can do for schools, colleges and universities, which servers are documented, where FERPA draws the line and a starter stack. Facts were checked on 2 November 2026. It is not legal advice: your institution's privacy officer, registrar or counsel decides how FERPA and state student privacy laws apply.

What MCP can do in education

Early uses fall into three groups:

• Students. Ask questions about lecture transcripts, check upcoming due dates and find peer-reviewed sources in licensed databases.
• Instructors. Draft quiz questions from course materials, summarize discussion posts and check a course for broken links or missing due dates.
• Staff. Answer policy questions from handbooks, prepare enrollment reports from approved datasets and draft communications.

For all three, the AI does the look-up and the draft. People decide grades, accommodations and outcomes.

Which education MCP servers exist

Panopto and Wiley

Anthropic's Advancing Claude for Education post, dated 9 July 2025, says students and educators can connect Panopto and Wiley to Claude through prebuilt MCP servers. Panopto supplies lecture transcripts. Wiley supplies peer-reviewed content the institution licenses.

The same post says Claude supports Canvas LTI, so students can use Claude inside Canvas courses. LTI is a different integration standard from MCP: it embeds a tool in the LMS rather than letting an AI call LMS tools.

Anthropic's post also says conversations are private and excluded from AI training by default. Check your own institution's agreement, since defaults can be changed by contract or settings.

Canvas: Instructure's MCP work

Instructure's October 2026 New and Next recap, dated 20 October 2026, says "Bi-directional MCP support will allow institutions' preferred agents and LLM solutions to interact securely with Canvas." It adds, "Experimentation is underway with an initial group of institutions and partners." The post gives no general availability date.

If your institution wants Canvas over MCP, ask Instructure about joining that group rather than wiring up a third-party server.

Canvas: community servers

The most visible community option is canvas-mcp on GitHub, an MIT-licensed server that its README says offers "up to 128 tools" for students and educators, including grades, submissions and peer reviews. Setup asks for your Canvas URL and a personal access token.

That design matters. A personal token carries the full access of the person who created it. An instructor's token can reach every student's submissions and grades in their courses. Sending that data to a third-party AI service raises FERPA questions your institution must answer first. Ask your Canvas admin whether personal tokens are allowed at all.

Other tools staff already use

Many campus teams already use general productivity tools. See our profiles for the Google Workspace MCP server and the Microsoft Graph MCP server. The same FERPA rules apply if those tools hold education records.

FERPA and AI connectors

FERPA restricts disclosure of personally identifiable information from education records without consent, with exceptions. The exception most AI vendors rely on is the school official exception.

The Department of Education's FAQ on who is a school official says an outside party, such as a contractor, can qualify if it:

1. "Performs an institutional service or function for which the agency or institution would otherwise use employees;"
2. "Is under the direct control of the agency or institution with respect to the use and maintenance of education records;"
3. Is subject to the rules in 34 CFR 99.33(a) that limit use and redisclosure of the information; and
4. Meets the criteria in the institution's annual FERPA notification, including a legitimate educational interest.

What this means for MCP:

• Every link counts. The AI client and each MCP server that receives education records is an outside party. Each needs to meet these conditions, usually through a contract.
• Personal tokens are a weak point. An instructor connecting a community server with a personal token is not the institution exercising direct control.
• Terms of service matter. Direct control is hard to show if a vendor can change its data use terms on its own.

States add their own student privacy laws, and K-12 schools face extra rules. Ask your privacy office before connecting any system that holds student records. For the general security risks, read MCP Security Risks and How to Reduce Them.

Example prompts

• "Using this week's lecture transcript, list the three concepts the instructor spent the most time on." (student, transcript connector)
• "Find peer-reviewed articles from our licensed databases on formative assessment in large classes." (instructor, research connector)
• "Draft ten multiple-choice questions from the module 4 readings, with an answer key, for me to review." (instructor, course content)
• "What does our handbook say about the deadline for withdrawing from a course?" (staff, policy server)

None of these prompts needs grades or student records. That is the point of a phase-one rollout.

Questions to ask a vendor

Before an AI tool or MCP server touches anything from your student information system or LMS, ask:

1. Will you sign our standard data privacy agreement?
2. Do you use our data to train models, and can we turn that off by contract?
3. Can we direct you to delete our data, and how fast?
4. Which of your subprocessors receive our data?
5. Can your terms change without our approval?

The answers help your privacy office decide whether the vendor can meet FERPA's direct control condition.

A starter stack

Our tool permission planner helps decide which tools need approval.

What to keep with educators and staff

• Grading and feedback that affects a grade.
• Academic integrity findings.
• Admissions, financial aid and accommodation decisions.
• Any change to a student record.
• Messages to students or families about their standing.
• Decisions to share education records with a new vendor.

The MCP specification says applications "SHOULD" show confirmation prompts so a human stays in the loop, per the 2026-07-28 tools specification.

Next step

Our MCP readiness audit maps your systems, agreements and data flows before you connect an AI. If your campus needs a custom server, for example read-only access to course catalogs or policies, see MCP development. For a comparison list, read Best MCP Servers for Education.

Frequently asked questions