54
/ 100
7 days ago
glama

plane_pages_mcp

MCP server for a Plane CE instance enabling management of pages (via direct database and live converter) and work items through Plane's REST API, with multi-workspace support.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 4 credentials: PLANE_API_KEY, GITHUB_CLIENT_SECRET, JWT_SIGNING_KEY, STORAGE_ENCRYPTION_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configMCP_TRANSPORThttp http (streamable 0.0.0.0:8300/mcp, GitHub OAuth) or stdio (on-box, auth-free)
configDATABASE_URLpages (+ SERVICE_USER_ID to write) direct Postgres + live converter
configSERVICE_USER_IDpages DATABASE_URL (+ to write) direct Postgres + live converter
configPLANE_BASE_URLwork items + PLANE_API_KEY public REST API
🔐 secretPLANE_API_KEYwork items PLANE_BASE_URL + public REST API
configPUBLIC_BASE_URLhttp auth; public origin, e.g. https://planemcp.<domain> (no /mcp)
configALLOWED_GITHUB_LOGINShttp auth; comma-separated GitHub logins allowed (case-insensitive); empty is rejected
configPLANE_WEB_URL${PAGES_MCP_WEB_URL:-http://localhost}
configGITHUB_CLIENT_ID/ GITHUB_CLIENT_SECRET — http auth; per-environment GitHub OAuth app
🔐 secretGITHUB_CLIENT_SECRETGITHUB_CLIENT_ID / — http auth; per-environment GitHub OAuth app
🔐 secretJWT_SIGNING_KEYhttp auth; long secret, stable across restarts (≥12 chars)
🔐 secretSTORAGE_ENCRYPTION_KEYhttp auth; encrypts OAuth state at rest (Fernet)
configREDIS_URLhttp auth; OAuth state store, e.g. redis://plane-redis:6379/0
configTOKEN_EXPIRY_SECONDS604800 http auth; FastMCP access-token lifetime (7 days)
configWORKSPACE_SLUGis a default, not a fixture. Every tool takes an optional
configMCP_HOST/ MCP_PORT / MCP_PATH 0.0.0.0 / 8300 / /mcp http bind
configMCP_PORTMCP_HOST / / MCP_PATH 0.0.0.0 / 8300 / /mcp http bind
configMCP_PATHMCP_HOST / MCP_PORT / 0.0.0.0 / 8300 / /mcp http bind
configLOG_LEVELINFO page content never logged above DEBUG; DEBUG also prints the OAuth claim keys once
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/jbresolin-plane-pages-mcp-nnix57)](https://m8ven.ai/mcp/jbresolin-plane-pages-mcp-nnix57)
commit: 938f8076c89ac47d4616784c7a28f065e7dd2607
code hash: bbf5519298a8755b6b782fe793a4ddfac5b7b57dd33221c2c2d7f9a3de08b2d2
verified: 7/25/2026, 8:49:23 AM
view raw JSON →