TrelloSAFE
Trello integration for Claude Desktop via Model Context Protocol (MCP) - 19 tools for comprehensive board, card, and list management
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A Model Context Protocol (MCP) server that provides comprehensive Trello integration for any MCP-compatible client — including Claude Desktop, Claude Code, Gemini CLI, and more. This server enables AI assistants to interact with Trello boards, cards, lists, and more through a secure local connection.
Features
🔍 Search & Discovery
- Universal Search: Search across all Trello content (boards, cards, members, organizations)
- User Boards: Get all boards accessible to the current user
- Board Details: Retrieve detailed information about boards including lists and cards
📝 Card Management
- Create Cards: Add new cards to any list with descriptions, due dates, and assignments
- Update Cards: Modify card properties like name, description, due dates, and status
- Move Cards: Transfer cards between lists to update workflow status
- Get Card Details: Fetch comprehensive card information including members, labels, and checklists
💬 Collaboration
- Add Comments: Post comments on cards for team communication
- Member Management: View board members and member details
- Activity History: Track card actions and changes
📋 Organization
- List Management: Create new lists and get cards within specific lists
- Labels: View and manage board labels for categorization
- Checklists: Access card checklists and checklist items
- Attachments: View card attachments and linked files
Installation
Prerequisites
- Node.js 18+ installed
- An MCP-compatible client (Claude Desktop, Claude Code, Gemini CLI, etc.)
- Trello account with API credentials
Setup Steps
- Clone the repository
git clone https://github.com/kocakli/trello-desktop-mcp.git cd trello-desktop-mcp
- Install dependencies
npm install
- Build the project
npm run build
- Get Trello API credentials
- Visit https://trello.com/app-key
- Copy
cb23a4e00f45OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add trello-mcp --env APPINSIGHTS_INSTRUMENTATIONKEY=${APPINSIGHTS_INSTRUMENTATIONKEY} --env TRELLO_API_KEY=${TRELLO_API_KEY} --env TRELLO_TOKEN=${TRELLO_TOKEN} -- npx -y [email protected]{
"mcpServers": {
"trello-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"APPINSIGHTS_INSTRUMENTATIONKEY": "${APPINSIGHTS_INSTRUMENTATIONKEY}",
"TRELLO_API_KEY": "${TRELLO_API_KEY}",
"TRELLO_TOKEN": "${TRELLO_TOKEN}"
}
}
}
}Exposed tools (19)
14 read · 5 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
create_card | write | Create a new card in a Trello list. Use this to add tasks, ideas, or items to your workflow. |
get_board_details | read | Get detailed information about a specific Trello board, including its lists and cards. Useful for understanding board structure and content. |
get_card | read | Get detailed information about a specific Trello card, including its content, status, members, and attachments. |
get_lists | read | Get all lists in a specific Trello board. Use this to see the workflow columns (like |
list_boards | read | List all Trello boards accessible to the user. Use this to see all boards you have access to, or filter by status. |
move_card | write | Move a card to a different list. Use this to change a card\ |
trello_add_comment | write | Add a comment to a Trello card. Use this to add notes, updates, or discussions to cards. |
trello_create_list | write | Create a new list in a Trello board. Use this to add workflow columns like |
trello_get_board_cards | read | Get all cards from a Trello board with optional filtering and detailed information like attachments and members. |
trello_get_board_labels | read | Get all labels available on a specific Trello board for categorizing cards. |
trello_get_board_members | read | Get all members who have access to a specific Trello board. |
trello_get_card_actions | read | Get activity history and comments for a specific Trello card. Useful for tracking changes and discussions. |
trello_get_card_attachments | read | Get all attachments (files, links) for a specific Trello card. |
trello_get_card_checklists | read | Get all checklists and their items for a specific Trello card. |
trello_get_list_cards | read | Get all cards in a specific Trello list. Use this to see all tasks/items in a workflow column. |
trello_get_member | read | Get details about a specific Trello member/user, including their boards and profile information. |
trello_get_user_boards | read | Get all boards accessible to the current user. This is the starting point for exploring your Trello workspace. |
trello_search | read | Universal search across all Trello content (boards, cards, members). Use this to find specific items by keywords or phrases. |
update_card | write | Update properties of an existing Trello card. Use this to change card details like name, description, due date, or status. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (4)
@modelcontextprotocol/sdk, zod, @types/express, @types/node, typescript
> **Security Note**: Your API credentials provide full access to your Trello account. Keep them secure and never share them publicly.
curl -o- https://raw.githubusercontent.com/nvm-sh/nvm/v0.39.0/install.sh | bash
curl -fsSL https://rpm.nodesource.com/setup_18.x | sudo bash -
Gates applied: no_behavioural_pass.
cb23a4e00f45full audit observations/trust-audit/mcp-server/kocakli__trello-7.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | cb23a4e00f45 | SAFE | B | 89 | first audit |
Questions
What is the Trello MCP server?
Trello integration for Claude Desktop via Model Context Protocol (MCP) - 19 tools for comprehensive board, card, and list management
What tools does Trello expose?
19 in total: 14 read-only, 5 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Trello safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Trello need?
It reads APPINSIGHTS_INSTRUMENTATIONKEY, TRELLO_API_KEY and TRELLO_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Trello run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as trello-mcp at 1.0.0.
How current is this page?
The grade is for one exact copy of the source (cb23a4e00f45), read on 2026-10-08. The repository is watched and re-audited when it changes.