Trello-MCP-Server
A Model Context Protocol (MCP) server that provides integration with Trello boards, lists, and cards.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
snehalsaurabh
Source: github_code
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
health_checkReport basic server health and configuration status
whoamiReturn the Trello account associated with the configured credentials
list_boardsList all boards accessible to the authenticated user
get_boardGet detailed information about a specific board
create_boardCreate a new Trello board
update_boardUpdate an existing board's properties
close_boardClose a board (archive it)
reopen_boardReopen a closed board
delete_boardPermanently delete a board (cannot be undone)
list_listsList all lists on a board
get_listGet detailed information about a specific list
create_listCreate a new list on a board
update_listUpdate an existing list's properties
archive_listArchive a list (close it)
unarchive_listUnarchive a list (reopen it)
move_listMove a list to a different position on the board
get_list_cardsGet all cards in a specific list
get_cardGet detailed information about a specific card
create_cardCreate a new card in a list
update_cardUpdate an existing card's properties
move_cardMove a card to a different list
archive_cardArchive a card (close it)
unarchive_cardUnarchive a card (reopen it)
delete_cardPermanently delete a card (cannot be undone)
add_commentAdd a comment to a card
edit_commentEdit an existing comment on a card
delete_commentDelete a comment from a card
add_label_to_cardAdd a label to a card
remove_label_from_cardRemove a label from a card
assign_member_to_cardAssign a member to a card
remove_member_from_cardRemove a member from a card
add_attachment_urlAdd a URL attachment to a card
remove_attachmentRemove an attachment from a card
get_card_actionsGet actions/activity history for a card
get_checklistGet detailed information about a specific checklist
add_checklistAdd a new checklist to a card
update_checklistUpdate an existing checklist's properties
delete_checklistDelete a checklist from a card
get_checklists_on_cardGet all checklists on a specific card
add_checkitemAdd a new item to a checklist
update_checkitemUpdate an existing checklist item
delete_checkitemDelete an item from a checklist
get_checkitemsGet all items in a checklist with optional filtering
get_checkitemGet detailed information about a specific checklist item
get_labelGet detailed information about a specific label
get_labels_on_boardGet all labels on a specific board
create_labelCreate a new label on a board
update_labelUpdate an existing label's properties
delete_labelDelete a label from a board
update_label_fieldUpdate a specific field of a label
get_label_usageGet usage statistics and information for a label
bulk_update_labelsUpdate multiple labels at once
get_cards_with_labelFind all cards that use a specific label
search_trelloPerform comprehensive search across Trello boards, cards, members, and organizations
search_boardsSearch for boards by name and description
search_cardsSearch for cards with advanced filtering options
search_membersSearch for members by name, username, or email
get_advanced_searchPerform advanced search with complex filters and sorting
get_saved_searchesGet saved search queries for a member
create_saved_searchCreate a new saved search query
get_board_analyticsGet comprehensive analytics for a board including member activity and workflow metrics
get_user_activityGet user activity analytics and productivity metrics
get_team_analyticsGet team performance analytics and collaboration metrics
get_workflow_analyticsGet workflow analytics including bottlenecks and cycle time
get_label_analyticsGet label usage analytics and effectiveness metrics
get_productivity_metricsGet productivity metrics including velocity, quality, and efficiency
get_organizationsGet all organizations for a member with filtering options
get_organizationGet detailed information about a specific organization
create_organizationCreate a new organization workspace
update_organizationUpdate organization settings and preferences
delete_organizationDelete an organization workspace
get_organization_membersGet all members of an organization with filtering options
get_organization_boardsGet all boards in an organization with filtering options
invite_member_to_organizationInvite a new member to an organization
update_organization_memberUpdate a member's role and permissions in an organization
remove_organization_memberRemove a member from an organization
deactivate_organization_memberDeactivate or reactivate a member in an organization
get_organization_membershipsGet detailed membership information for an organization
get_organization_membershipGet details of a specific membership in an organization
get_organization_analyticsGet comprehensive analytics for an organization including boards, members, and activity
batch_get_requestsExecute multiple GET requests in a single batch API call (up to 10 requests)
batch_create_cardsCreate multiple cards efficiently in a single operation (up to 20 cards)
batch_update_cardsUpdate multiple cards with different properties (up to 20 cards)
batch_move_cardsMove multiple cards between lists or boards efficiently (up to 50 cards)
batch_assign_membersAssign or remove members from multiple cards (up to 30 operations)
batch_apply_labelsApply or remove labels from multiple cards (up to 30 operations)
archive_all_cards_in_listArchive all cards in a specific list at once
move_all_cards_in_listMove all cards from one list to another, optionally to a different board
bulk_archive_cardsArchive multiple cards by ID (up to 100 cards)
bulk_unarchive_cardsUnarchive multiple cards by ID (up to 100 cards)
bulk_delete_cardsDelete multiple cards by ID with confirmation (up to 50 cards)
create_automation_ruleCreate a new automation rule with triggers and actions
update_automation_ruleUpdate an existing automation rule
delete_automation_ruleDelete an automation rule
list_automation_rulesList automation rules with optional filtering
get_automation_ruleGet details of a specific automation rule
test_automation_ruleTest an automation rule against a specific card
create_scheduled_actionCreate a scheduled action to run at specific times
update_scheduled_actionUpdate an existing scheduled action
delete_scheduled_actionDelete a scheduled action
37 further tools are not listed here. The complete surface is in the source.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Tool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
137/137 tools missing one or more hints — health_check (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); whoami (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); list_boards (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +134 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
License file
No license file
Add a LICENSE file (MIT, Apache-2.0, etc.).
Tests exist
No test files found
Add tests that exercise each declared tool.
Production dependencies are patched
0 critical, 15 high severity in production deps — @modelcontextprotocol/sdk@1.17.2 (high), @modelcontextprotocol/sdk@1.17.2 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Dependency freshness
1/10 production deps stale: bottleneck@2023-02-22 (3.5y)
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/snehalsaurabh/trello-mcp-server)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check