Trello MCP Server

A comprehensive integration providing 96 tools and 18 interactive React apps for full Trello API coverage, including board management, card operations, and workflow analytics. It enables users to perform complex project management tasks and visualize workspace data through a production-ready interface.

→ BusyBee3333/trello-mcp-2026-complete · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

⚠️

Known vulnerabilities in dependencies: 4 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

🔐

You'll be asked for 2 credentials: TRELLO_API_KEY, TRELLO_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies4 high4 medium10 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

high@modelcontextprotocol/sdk@0.5.0GHSA-8r9q-7v3j-jr4g

Anthropic's MCP TypeScript SDK has a ReDoS vulnerability

high@modelcontextprotocol/sdk@0.5.0GHSA-w48q-cv73-mx4w

Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default

highvite@5.0.0GHSA-c24v-8rfc-w8vw

Vite dev server option `server.fs.deny` can be bypassed when hosted on case-insensitive filesystem

highvite@5.0.0GHSA-c27g-q93r-2cwf

launch-editor vulnerable to command injection via the crafted request on Windows

mediumvite@5.0.0GHSA-356w-63v5-8wf4

Vite has an `server.fs.deny` bypass with an invalid `request-target`

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretTRELLO_API_KEY— Yes Your Trello API key

🔐 secretTRELLO_TOKEN— Yes Your Trello API token

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/busybee3333-trello-mcp-2026-complete-1otox2)](https://m8ven.ai/mcp/busybee3333-trello-mcp-2026-complete-1otox2)

commit: 41e4a7887d7d28328aac1f6949f302c5aa0c8d8b

code hash: be3a975185ebb47982cd01139a44ac539ab4fd85cd07e3bc0ce3f98793487ac4

verified: 6/11/2026, 11:26:45 AM

view raw JSON →