Canvas API tokens allow programs and other tools to access Canvas on a user's behalf. Depending on a user's role and permissions, that access can include information about other members of a course, not just the user's own information.

Allowing individuals to create personal API tokens introduces security and privacy risks. Tokens can be accidentally shared, included in code, stored in an insecure location, or entered into a third-party application. If a token is exposed, someone else could potentially use the access associated with that token.

Canvas also contains student education records and other sensitive information. Protecting that information is important because of the university's responsibilities under FERPA and other privacy and security requirements.

Tufts supports a large portfolio of technological tools for teaching and learning, many of which are integrated into Canvas. 

If you are a student seeking ways to organize assignments and tasks in Canvas, please reach out to [email protected] to learn more about native Canvas tools like the Calendar, the Learner Dashboard, and the To-Do list.

If you are a teacher looking for a specific tool or functionality, please reach out to [email protected] for a consultation.