C

Trello MCP Server

MCP server for Trello boards with card, list, board, checklist, label, and comment management

Overall Score61/100

Score Breakdown

Server Info

Package
@delorenj/mcp-server-trello
Registry
npm
Maintainer
Community
Category
Project Management
Tags
kanbanboardstasks
Last Scanned
7 Apr 2026

Findings

7 issues

Authentication & Identity

HIGHNo per-request auth - requires instance-per-user

Stdio-only transport. Requires TRELLO_API_KEY and TRELLO_TOKEN env vars. TRELLO_BOARD_ID is optional default board. Uses Trello API key + token (Power-Up or personal) authentication. For multi-tenant deployment, the platform must spawn a separate server instance per user.

Remediation

Add HTTP/SSE transport to accept per-request Authorization headers, or implement the MCP OAuth spec.

Tool Schema Quality

HIGHRequired fields missing on 1 write operations

Write tools without required field declarations: perform_system_repair.

Remediation

Add required arrays to all write/delete tool schemas.

MEDIUMOnly 2 of 45 schemas have parameter constraints

Most schemas lack maxLength, enum, or pattern constraints on string parameters.

Remediation

Add constraints to string parameters, especially on write operations.

Data Exposure

MEDIUM5 list operations lack pagination

get_recent_activity and get_card_comments have limit parameters for pagination. list_boards, list_workspaces, get_lists, get_my_cards, get_board_members return all results without pagination. get_card_history has optional limit. No field selection - returns full JSON records.

Remediation

Add limit/offset or cursor-based pagination.

LOWNo field selection on responses

Responses return full records rather than projected fields.

Remediation

Implement field selection to return only relevant fields.

Maintenance & Trust

LOWCommunity-maintained by Jarad DeLorenzo (delorenj)

No official vendor backing.

Remediation

Seek vendor verification.

MEDIUM21 dependency vulnerabilities (14 high)

npm audit found 14 high severity CVEs.

Remediation

Update vulnerable dependencies.

Tools

45 total
NameDescriptionRisk
get_cards_by_list_idFetch cards from a specific Trello list on a specific boardread
get_listsRetrieve all lists from the specified boardread
get_recent_activityFetch recent activity on the Trello boardread
add_card_to_listAdd a new card to a specified list on a specific boardwrite
update_card_detailsUpdate an existing card's details on a specific boardwrite
archive_cardSend a card to the archive on a specific boardwrite
move_cardMove a card to a different list, potentially on a different boardwrite
add_list_to_boardAdd a new list to the specified boardwrite
archive_listSend a list to the archive on a specific boardwrite
get_my_cardsFetch all cards assigned to the current userread
attach_image_to_cardAttach an image to a card from a URL on a specific boardwrite
attach_file_to_cardAttach any file to a card from a URL on a specific boardwrite
attach_image_data_to_cardAttach an image to a card from base64 data or data URL (for screenshot uploads)write
list_boardsList all boards the user has access toread
set_active_boardSet the active board for future operationswrite
list_workspacesList all workspaces the user has access toread
create_boardCreate a new Trello board optionally within a workspacewrite
set_active_workspaceSet the active workspace for future operationswrite
list_boards_in_workspaceList all boards in a specific workspaceread
get_active_board_infoGet information about the currently active boardread
get_cardGet detailed information about a specific Trello cardread
add_commentAdd the given text as a new comment to the given cardwrite
update_commentUpdate the given comment with the new textwrite
delete_commentDelete a comment from a Trello cardadmin
get_card_commentsRetrieve all comments from a specific Trello cardread
create_checklistCreate a new checklistwrite
get_checklist_itemsGet all items from a checklist by nameread
add_checklist_itemAdd a new item to a checklistwrite
find_checklist_items_by_descriptionSearch for checklist items containing specific text in their descriptionread
get_acceptance_criteriaGet all items from the "Acceptance Criteria" checklistread
get_checklist_by_nameGet a complete checklist with all its items and completion percentageread
update_checklist_itemUpdate a checklist item state (mark as complete or incomplete)write
get_board_membersGet all members of a specific boardread
assign_member_to_cardAssign a member to a specific cardwrite
remove_member_from_cardRemove a member from a specific cardwrite
get_board_labelsGet all labels of a specific boardread
create_labelCreate a new label on a boardwrite
update_labelUpdate an existing labelwrite
delete_labelDelete a label from a boardadmin
get_card_historyGet the history/actions of a specific cardread
get_healthQuick health checkread
get_health_detailedDetailed health diagnostic reportread
get_health_metadataMetadata consistency checkread
get_health_performancePerformance metricsread
perform_system_repairAutomated system repairadmin

Deploy Trello MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow