Back to MCP Trust Indexm8ven
69
/ 100
18 days ago
glama

plane-ce-mcp

Unofficial MCP server for self-hosted Plane Community Edition, enabling project management tasks like managing work items, cycles, modules, and initiatives via natural language.

→ Bl4nk44/plane-ce-mcp· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 5 credentials: PLANE_API_KEY, PLANE_INTERNAL_API_PASSWORD, PLANE_OAUTH_PROVIDER_CLIENT_SECRET, REDIS_PASSWORD, REDIS_AUTH_TOKEN_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configLOG_USER_INFO— optional (default: false) When true, include user display name (PII) in logs alongside the opaque user id
configPLANE_WORKSPACE_SLUG— your-workspace-slug> \
configPLANE_OAUTH_PROVIDER_CLIENT_ID
🔐 secretPLANE_API_KEY— your-api-key> \
configMCP_PATH_PREFIX
configPLANE_INTERNAL_BASE_URL— http/sse (optional) Internal URL for server-to-server calls (e.g. http://plane-api:8000 inside Docker)
configPLANE_BASE_URL— "": "https://plane.your-domain.tld"
configAWS_SECRET_CACHE_TTL
configPLANE_INTERNAL_API_EMAIL— / PLANE_INTERNAL_API_PASSWORD pages tools Plane account used by the internal-API adapter (CE has no public pages API); the account needs membership in the relevant projects
🔐 secretPLANE_INTERNAL_API_PASSWORD— PLANE_INTERNAL_API_EMAIL / pages tools Plane account used by the internal-API adapter (CE has no public pages API); the account needs membership in the relevant projects
configPLANE_MAX_RESPONSE_KB
configLOG_PAYLOADS— optional (default: false) When true, include tool-call payloads (may contain PII / full descriptions) in structured logs. Off by default; enable only for debugging.
configPLANE_OAUTH_ALLOWED_REDIRECT_URIS— http/sse OAuth (optional) Comma-separated redirect URI patterns appended to the built-in allowlist
🔐 secretPLANE_OAUTH_PROVIDER_CLIENT_SECRET
configPLANE_OAUTH_PROVIDER_BASE_URL
configPLANE_OAUTH_PROVIDER_ENABLE_CIMD
configAWS_ROLE_ARN
configAWS_CONTAINER_CREDENTIALS_FULL_URI
configREDIS_SSL
configREDIS_HOST— / REDIS_PORT http/sse (optional) Token storage (falls back to in-memory)
configREDIS_PORT— REDIS_HOST / http/sse (optional) Token storage (falls back to in-memory)
🔐 secretREDIS_PASSWORD
configELASTICACHE_SECRET_ARN
configAWS_REGION
🔐 secretREDIS_AUTH_TOKEN_KEY
configPLANE_TOOLSETS
configPLANE_PAGES_MAX_CONTENT_LENGTH— optional Default truncation for retrieve_page content
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/bl4nk44-plane-ce-mcp-1g6hle)](https://m8ven.ai/mcp/bl4nk44-plane-ce-mcp-1g6hle)
commit: 7d0d3d2d02783f33324accb4274b605411afa8f6
code hash: c026bd71f4cfccc6612d072d64f985dd7f9b3942c727625c1806d44ab438fcc4
verified: 7/13/2026, 9:46:36 AM
view raw JSON →