# Instructure Canvas vs Quizgecko (slim)

> Instructure Canvas scores 59.5 (C) to Quizgecko's 33 (F) for learning quiz. Prices, MCP, x402, uptime and agent notes side by side.

- Full: https://www.anchorterminal.com/compare/canvas-lms-vs-quizgecko.md (~4,100 tokens) · this version ~2,580 tokens · JSON https://www.anchorterminal.com/compare/canvas-lms-vs-quizgecko.json · canonical https://www.anchorterminal.com/compare/canvas-lms-vs-quizgecko
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-04
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

Instructure Canvas scores 59.5 (C) on agent readiness against Quizgecko's 33 (F), and leads in 6 of 7 scored categories. Quizgecko leads on payments & pricing. Both do learning quiz.

- Instructure Canvas: C 59.5, rank #628 of 1349 · https://www.anchorterminal.com/tools/canvas-lms.min.md
- Quizgecko: F 33, rank #1261 of 1349 · https://www.anchorterminal.com/tools/quizgecko.min.md
- Instructure Canvas, good for An agent acting for a teacher, student or administrator inside an institution that has issued a key, reading assignments and grades or creating course content. Ahead on Reliability, 63 against 20; Schema & documentation, 77 against 68; Agent ergonomics, 63 against 45; Security & auth, 61 against 5; Maintenance & community, 72 against 55; Transparency & trust, 82 against 35. Also Open source.
- Quizgecko, good for An agent that has to turn a person's own material into a quiz, flashcards and notes in one call and can wait for generation. Ahead on Payments & pricing, 15 against 0.

| Category | Instructure Canvas | Quizgecko |
| --- | --- | --- |
| Reliability (16%) | 63 | 20 |
| Performance (10%) | pending | pending |
| Schema & documentation (13%) | 77 | 68 |
| Agent ergonomics (13%) | 63 | 45 |
| Security & auth (14%) | 61 | 5 |
| Payments & pricing (10%) | 0 | 15 |
| Task success (10%) | pending | pending |
| Maintenance & community (7%) | 72 | 55 |
| Transparency & trust (7%) | 82 | 35 |

| Fact (where they differ) | Instructure Canvas | Quizgecko |
| --- | --- | --- |
| Vendor | Instructure | Version Zero Limited |
| Hosted endpoint | `https://<institution>.instructure.com/api/v1` | `https://api.quizgecko.com/v2` |
| Auth | OAuth | API key |
| Pricing | Paid | Freemium |
| Licence | AGPL-3.0 (Canvas LMS source); hosted service proprietary | none |
| Terms last updated | no date given | 2026-09-12 |
| Privacy policy last updated | no date given | 2026-10-21 |
| Customer content may train models | not found in the text | yes |
| Terms or service can change without notice | not found in the text | yes |

Why the edge:
- Security & auth, Instructure Canvas +56: Instructure Canvas 61 (OAuth2 with developer keys scoped to `url:<verb>|<path>` endpoints, 1-hour tokens, refresh tokens, revocation on logout and replace_tokens, but `access_token` as a query parameter is a documented if discouraged option, so 30 less 10 (20 of 30). Scoped keys can be limited to GET endpoints and administrators grant and revoke scopes; masquerading needs a separate permission; no confirmation step for destructive calls (14 of 20). The API returns student submissions, discussion posts and messages with no guidance on treating them as untrusted (5 of 15). Administrators control keys and tokens, and Canvas keeps authentication and course audit logs, but per-call API visibility for a key was not confirmed (6 of 15). security.txt valid to 1 January 2027, a Bugcrowd disclosure form, a bounty programme joined on request, SOC and other reports behind the customer trust portal (16 of 20). 20 + 14 + 5 + 6 + 16 = 61.); Quizgecko 5 (One bearer token per account with no scopes, expiry or rotation described, and `?api_key=` is documented as a query-string option, so 10 less 10 (0 of 30). No read-only mode or confirmation for edits (0 of 20). The API fetches URLs and uploads the owner supplies and returns generated text; no guidance on treating fetched content as untrusted (3 of 15). GET /usage shows counts only, no per-call log (2 of 15). /.well-known/security.txt returned 404, the security page answered a Cloudflare challenge and no disclosure policy, bounty or certification was found elsewhere (0 of 20, with the security page unchecked). 0 + 0 + 3 + 2 + 0 = 5.)
- Transparency & trust, Instructure Canvas +47: Instructure Canvas 82 (Canvas LMS source under AGPL-3.0 with clear terms of use and an API policy for the hosted service (28 of 30). Privacy notice effective 10 July 2026 with a 30-day deletion commitment, an AI privacy notice (27 October 2025) saying student data does not train Instructure's models and naming Anthropic, Meta and Cohere models, but no retention periods and no subprocessor list (15 of 30). A written 90-day deprecation notice in the API policy, applied in a dated change log (20). Hosting in the United States stated for Canvas Lite and offices named, model providers named for the AI tools, no subprocessor list or regions for the main service (8 of 20). 28 + 15 + 20 + 8 = 71.); Quizgecko 35 (Closed service. The terms page answered a Cloudflare challenge, so the entity and terms were read only from Companies House and the App Store (8 of 30). The privacy policy is disallowed by robots.txt and the security page is behind the challenge, so retention and data-handling statements are unread (0 of 30). V1 is called legacy and still served, with no date or policy (5 of 20). No subprocessors or data locations found on the readable pages (0 of 20). 8 + 0 + 5 + 0 = 13.)
- Reliability, Instructure Canvas +43: Instructure Canvas 63 (Read with the hosted lines on the hosted Canvas API. Statuspage at status.instructure.com with components and history (20). From 24 August to 30 October 2026 the feed lists 25 entries, most of them slow pages or errors for some users lasting under an hour, and four of an hour or more, MFA SMS delivery (2 hours 12 minutes, 24 August), a Portland-region heavy-load outage (5 hours 17 minutes, 31 August), a login failure for some users (1 hour 46 minutes, 15 October) and Canvas Data 2 errors (1 hour 48 minutes, 21 October). Each affected a region or a subset rather than the API for everyone, read as one major outage with many minor ones (10). Throttling is documented as a cost-based quota with headers but no bucket size or refill rate (8 of 15). A 429 is documented with "retry later", no Retry-After or backoff numbers and no idempotency keys for writes (7 of 15). The trust centre states 99.9 per cent annual uptime; contract SLAs sit behind the customer portal (8 of 10). The REST API is generally available (10). 20 + 10 + 8 + 7 + 8 + 10 = 63.); Quizgecko 20 (Read with the hosted lines. No status page found, and status.quizgecko.com has no DNS record; the API catalogue links only a health endpoint that answered {"status":"ok"} (0). No readable incident history (5). No rate limit with numbers; the OpenAPI document lists a 429 and GET /usage reports a monthly course-creation limit, which is a quota, not a rate (5 of 15). No Retry-After, backoff guidance or idempotency keys, and generation is a write that creates a course each time (0). No SLA (0). V2 is the current API and is not marked beta (10). 0 + 5 + 5 + 0 + 0 + 10 = 20.)
- Agent ergonomics, Instructure Canvas +18: Instructure Canvas 63 (include[] parameters and per_page size REST responses, and GraphQL selects fields (22 of 25). Link-header paging on every list, with filters such as enrollment_type and state on courses (20). Error bodies are a JSON errors array, documented per endpoint rather than centrally, and 401 with WWW-Authenticate for expired tokens is explained (10 of 20). No idempotency keys; reads are safe to repeat and writes are not addressed (5 of 20). Few required parameters per call, but no official REST SDK (community libraries only) and the official client is the DAP CLI for data exports (6 of 15). 22 + 20 + 10 + 5 + 6 = 63.); Quizgecko 45 (Six operations with compact responses, a generation-status call that returns progress without the course body, and no field selection (15 of 25). No list endpoints, so no pagination or filtering to speak of (5 of 20). Validation errors are keyed by field and the monthly-limit error carries the limit and usage, but HTTP codes are documented only in the spec (12 of 20). No idempotency key; a retried POST /generate creates another course, and regeneration through quiz_id is the only guard (5 of 20). One source field is enough to generate, options have defaults, but there are no SDKs (8 of 15). 15 + 5 + 12 + 5 + 8 = 45.)
- Maintenance & community, Instructure Canvas +17: Instructure Canvas 72 (Read for a closed hosted service. Change log entries announced 27 October 2026 and scheduled through 9 November (30). Entries on 2, 23 and 28 September and 9 and 27 October 2026, with deploys every two weeks (20). A dated community change log, community forums and Instructure support; replies on the public repository could not be read (12 of 15). No official REST SDK; the DAP client library for data exports is current on PyPI per the change log (6 of 15). The public canvas-lms mirror's master feed ends 30 April 2026 and its last release tag is release/2026-05-20, so package health and CI can't be read, though the hosted service keeps shipping (4 of 10). 30 + 20 + 12 + 6 + 4 = 72.); Quizgecko 55 (Read for a closed service. The iOS app reached 8.0.1 on 27 October 2026 and llms.txt gives prices as of November 2026 (30). App versions on 27 August, 14 October, 24 October and 27 October 2026 (20). No API changelog; support@quizgecko.com in the docs metadata, untested (5 of 15). No SDKs (0). No package to judge (0). 30 + 20 + 5 + 0 + 0 = 55.)
- Payments & pricing, Quizgecko +15: Instructure Canvas 0 (Read with the hosted rubric. No x402, MPP or L402 (0). No price published; Canvas is sold by contract, and the tiers page compares access levels without prices (0). The only free account, Canvas Lite, excludes API token access per its terms of 30 September 2026, so there is no free tier for the API (0). A developer key or OAuth grant needs an institution's administrator (0). 0 + 0 + 0 + 0 = 0.); Quizgecko 15 (No x402, MPP or L402 (0). App plan prices are public in llms.txt, but API access is "contact us" with no API price (5 of 20). A free app plan exists, but API access needs a request to the company and whether a card is needed could not be read (10 of 20). A person has to log in and ask for access (0). 0 + 5 + 10 + 0 = 15.)