0
/ 100
6 days ago
glama
isteamhq/mcp
MCP server for is.team, enabling AI agents to interact with project boards, tasks, cards, sprints, integrations, and real-time notifications.
Is this your MCP?
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
🚨
Secret credentials may flow to a network call
3 flows detected: IST_API_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
🚨
Hardcoded credentials detected
2 live-looking API keys in source: 2 Google API key
🔐
You'll be asked for 1 credential: IST_API_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
IST_AGENT_NAME— The name is stored in the project's .mcp.json under the env var (and in ~/.isteam/daemon.json when running in daemon mode). If you ever need to change it, re-run setup or edit the file by hand.🔐 secret
IST_API_TOKEN— "": "ist_your_token_here"config
IST_BASE_URL— No API base URL (default: https://is.team)config
IST_MCP_NO_SESSION// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/isteamhq-mcp-cjx95r)commit: 88e10cabeb1b2592923de090171b5ca543ca071d
code hash: fe81debdddc19a034977f26e1bc57f9e216f903060dd991fa76a000b54d9788f
verified: 5/28/2026, 10:28:46 AM