context-canvas-check
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@context-canvas-checkcheck my Claude Code configuration for silently ignored errors"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
context-canvas-check
Does your Claude Code configuration actually apply?
Claude Code silently skips an agent file whose frontmatter is broken. It ignores a misspelled field, and it never loads project settings from a parent folder. context-canvas-check finds these, tells you what won't apply and why, and gives your coding agent the fixes: as a prompt, through a Claude Code plugin, or as an MCP server any agent can call.
npx context-canvas-checkFrom a real repository:
context-canvas-check · ~/code/my-project
76 errors, 28 notes
ERROR Agent file Claude Code skips: 67 files
Why: YAML error: the frontmatter block is not closed with ---.
Fix: Add a closing --- line after the last frontmatter field.
Docs: https://code.claude.com/docs/en/sub-agents
Files:
.claude/agents/analysis/code-analyzer.md
...
28 notes not shown (28 × Agent frontmatter field Claude Code ignores). Add --notes to list them.What it checks
Check | What won't apply |
| Agent files Claude Code skips: frontmatter that doesn't parse or isn't closed, |
| Agent fields Claude Code ignores, such as |
| A skill's |
|
|
| An MCP server listed as both enabled and disabled; disabled wins |
| Allow rules for protected paths ( |
|
|
| Ask rules that still prompt when a PreToolUse hook allows the call |
| Subfolder CLAUDE.md files, which load only after Claude reads a file in that folder |
| Hooks, permission rules, MCP servers and agents added, removed or changed since your last baseline |
Every check traces to evidence. Each one maps to a public report of someone hit by the problem, and to Claude Code's documentation, linked in every finding. We tested whether this was worth building before building it: see the two pre-registered studies.
Related MCP server: mcp-permaudit
Fix it with your coding agent
npx context-canvas-check --prompt | pbcopy--prompt turns the findings into instructions for Claude Code, Cursor or any other coding agent. Each problem comes with why, the fix and the docs link. Where the fix is mechanical, the exact edit (on line 4, replace allowed-tools: Read, Grep with tools: Read, Grep); where it's a choice, an instruction to ask first. No model writes the prompt: it's built from the findings by fixed rules, so the same findings always give the same text.
In Claude Code
/plugin marketplace add ianmacdowell13-byte/context-canvas-check
/plugin install context-canvas-check@context-canvasThe plugin:
checks at session start, and tells Claude about errors and drift;
checks each config file Claude edits. When the edit won't apply, Claude sees why and fixes it;
adds the MCP server below, so Claude can check the project and get the fixes when asked.
For any agent: the MCP server
npx -y context-canvas-check mcpThree read-only tools over stdio: check_config (findings as JSON, with exact edits), get_fix_instructions (the fix prompt, ending with "call check_config again to confirm") and explain_check. Without a path, they check the client's workspace root. They change nothing, not even the drift baseline, and send nothing.
Client | Setup |
Claude Code |
|
Cursor |
|
VS Code |
|
Codex |
|
In CI
npx context-canvas-check --no-user --strictExit codes: 0 with no errors, 1 with errors (or with warnings under --strict), 2 for usage errors. Add --json for machine-readable output.
Privacy
Local only. The CLI, the plugin and the MCP server read files on your machine and send nothing anywhere.
The drift baseline lives in
~/.context-canvas/. It holds rule names, hook commands and hashes, never secret values.
Limits
Claude Code only.
No managed settings or runtime state. Use
/status,/hooksand/contextin a session for what actually loaded.Behavior can change. Rules reflect Claude Code's documentation as of v2.1.283.
Repository
Path | What |
| The CLI, the MCP server and the Claude Code plugin |
| The checks, as pure functions |
| The evidence behind every check |
Licensed under Apache-2.0. See CONTRIBUTING.md and SECURITY.md.
This server cannot be deployed
Maintenance
Related MCP Connectors
Statically audits MCP tool surfaces for token cost, schema quality, and design issues.
MCP Spec Compliance MCP — audits any MCP server.json against the official Model Context Protocol
Monitor MCP servers, API contracts and AI outputs for schema drift. Alerts on breaking changes.
Research-backed linting + generation for agent context files (CLAUDE.md, AGENTS.md, Cursor rules).
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceDiagnose MCP servers — health checks, tool testing, token cost audits, conflict detection, and security scanning with 50+ prompt injection patterns. Works as CLI or MCP server inside Claude Desktop.1MIT
- FlicenseNot gradedqualityCmaintenanceAudits Claude Code permission settings (.claude/settings.json) via an MCP tool, detecting conflicts and misconfigurations.-
- AlicenseNot gradedqualityAmaintenanceAudits MCP server configurations for security risks including capability inventory, SSRF, prompt injection, and drift detection. Works in read-only mode and can also be used as an MCP server to let AI agents audit their own attack surface.52 PyPI4MIT
- AlicenseNot gradedqualityCmaintenanceProvides read-only repository health scanning tools for drift detection, module reachability, prompt bloat, evidence calibration, and registration completeness, enabling agents to diagnose repositories via MCP.1MIT