Trello MCP Server (rdeprey/trello-mcp-server) is an MCP server listed on the M8ven Trust Index. It scores 54 out of 100, grade D. It declares 17 tools. No publisher has claimed this listing.
An MCP server that connects Claude to Trello, enabling comprehensive management of boards, lists, and cards through natural language conversation. It supports a wide range of actions including searching cards, adding comments, managing checklists, and tracking board activity.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
rdeprey
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
trello_list_boardsList all boards accessible to the authenticated Trello user. Returns boards the user is a member of. Archived boards are included when filter is set to 'all'. Args: - filter ('all' | 'open' | 'closed'): Filter boards by status (default: 'open') - response_format ('markdown' | 'json'): Output f…
trello_get_boardGet detailed information about a specific Trello board, including its lists and labels. Args: - board_id (string): The Trello board ID - include_lists (boolean): Whether to include the board's lists (default: true) - include_labels (boolean): Whether to include the board's labels (default: tr…
trello_list_listsList all lists on a specific Trello board. Args: - board_id (string): The Trello board ID - filter ('all' | 'open' | 'closed'): Filter lists by status (default: 'open') - response_format ('markdown' | 'json'): Output format (default: 'markdown') Returns: List of lists with id, name, and stat…
trello_create_listCreate a new list on a Trello board. Args: - board_id (string): The board to create the list on - name (string): Name for the new list - pos ('top' | 'bottom' | number): Position of the list (default: 'bottom') Returns: The newly created list object.
trello_archive_listArchive or unarchive a Trello list. Args: - list_id (string): The list ID to archive/unarchive - archive (boolean): true to archive, false to unarchive (default: true) Returns: Confirmation of the action.
trello_list_cardsList cards on a Trello board or within a specific list. You can filter by board or by list. At least one of board_id or list_id must be provided. Args: - board_id (string, optional): Board ID to get all cards from - list_id (string, optional): List ID to get cards from a specific list - filt…
trello_get_cardGet detailed information about a specific Trello card. Args: - card_id (string): The card ID - response_format ('markdown' | 'json'): Output format (default: 'markdown') Returns: Full card details including name, description, due date, labels, members, checklists, and URL.
trello_create_cardCreate a new card on a Trello list. Args: - list_id (string): The list to create the card in (required) - name (string): Card title (required) - desc (string, optional): Card description (supports Markdown) - pos ('top' | 'bottom' | number): Position in the list (default: 'bottom') - due …
trello_update_cardUpdate an existing Trello card. Only provided fields will be changed. This tool can also move a card by setting idList and/or idBoard. Args: - card_id (string): The card to update (required) - name (string, optional): New card title - desc (string, optional): New description - closed (bool…
trello_delete_cardPermanently delete a Trello card. This cannot be undone. Consider using trello_update_card with closed=true to archive instead. Args: - card_id (string): The card to delete (required) Returns: Confirmation that the card was deleted.
trello_search_cardsSearch for cards across all boards using Trello's search API. Supports Trello search operators like @member, #label, board:name, list:name, is:open, is:archived, has:attachments, due:week, etc. Args: - query (string): Search query (supports Trello search operators) - board_id (string, optional…
trello_list_membersList all members of a Trello board. Args: - board_id (string): The board ID - response_format ('markdown' | 'json'): Output format (default: 'markdown') Returns: Members with full name, username, and ID.
trello_get_activityGet recent activity (actions) on a Trello board, including comments, card moves, and updates. Args: - board_id (string): The board ID - filter (string, optional): Comma-separated action types (e.g. 'commentCard,updateCard,createCard') - limit (number): Max actions to return (1-100, default: 2…
trello_add_commentAdd a comment to a Trello card. Args: - card_id (string): The card to comment on - text (string): Comment text (supports Markdown) Returns: The created comment action.
trello_get_commentsGet all comments on a Trello card. Args: - card_id (string): The card to get comments from - limit (number): Max comments to return (1-100, default: 20) - response_format ('markdown' | 'json'): Output format (default: 'markdown') Returns: Comments with author, timestamp, and text.
trello_add_checklistCreate a new checklist on a Trello card, optionally with items. Args: - card_id (string): The card to add the checklist to - name (string): Checklist name - items (string[], optional): List of checklist item names to pre-populate Returns: The created checklist.
trello_create_labelCreate a new label on a Trello board. Args: - board_id (string): The board to create the label on - name (string): Label name - color (string): Label color — one of: green, yellow, orange, red, purple, blue, sky, lime, pink, black, null (no color) Returns: The created label.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
TRELLO_API_KEY"": "your-api-key",TRELLO_TOKEN"": "your-token"Tool inputs are validated
14/17 tool handlers declare input schemas (82%)
Declare an inputSchema with zod/joi/yup on every tool definition.
License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
Tests exist
No test files found
Add tests that exercise each declared tool.
Production dependencies are patched
0 critical, 17 high severity in production deps — @modelcontextprotocol/sdk@1.12.1 (high), @modelcontextprotocol/sdk@1.12.1 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/rdeprey/trello-mcp-server)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check