Is Trello Mcp safe to install?

SaferSkills independently audited Trello Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md3.0 KB · Markdown

Trello MCP Server

An MCP server for the Trello REST API. Manage boards, lists, cards, labels, checklists, and more from any MCP-compatible client.

Tools

Tool	Description
`list_my_boards`	List all boards for the authenticated user
`get_board`	Get details of a single board
`get_board_lists`	Get all lists on a board
`create_list`	Create a new list on a board
`get_list_cards`	Get all cards in a list
`get_board_cards`	Get all cards on a board
`get_card`	Get details of a single card
`create_card`	Create a new card in a list
`update_card`	Update one or more fields on a card
`move_card`	Move a card to a different list/board
`archive_card`	Archive (close) a card
`get_card_comments`	Get all comments on a card
`add_card_comment`	Add a comment to a card
`get_card_attachments`	Get all attachments on a card
`add_card_attachment`	Upload a file as an attachment to a card
`add_card_url_attachment`	Attach a URL to a card
`delete_card_attachment`	Delete an attachment from a card
`get_board_labels`	Get all labels on a board
`create_label`	Create a label on a board
`get_card_checklists`	Get all checklists on a card
`get_checklist`	Get a checklist and its items
`create_checklist`	Create a checklist on a card
`add_checklist_item`	Add an item to a checklist
`get_me`	Get the authenticated member's profile
`search_trello`	Search for cards and/or boards
`get_card_history`	Get the action history of a card (moves, edits, comments, etc.)

Prerequisites

Go to trello.com/power-ups/admin and create a new Power-Up
Copy your API Key
Generate a Token using the link on the same page

Installation

uvx trello-mcp

Or install from PyPI:

pip install trello-mcp

Usage

Claude Desktop / Claude Code

Add to your .mcp.json:

{
  "mcpServers": {
    "trello": {
      "command": "uvx",
      "args": ["trello-mcp"],
      "env": {
        "TRELLO_API_KEY": "your-api-key",
        "TRELLO_TOKEN": "your-token"
      }
    }
  }
}

Environment Variables

Variable	Required	Description
`TRELLO_API_KEY`	Yes	API key from Trello Power-Up admin
`TRELLO_TOKEN`	Yes	User token generated for your API key

Development

git clone https://github.com/stucchi/trello-mcp.git
cd trello-mcp
python -m venv .venv && source .venv/bin/activate
pip install -e ".[dev]"
pytest

License

MIT

Trello Mcp— agent skill

Is Trello Mcp safe to install?

Trello MCP Server

Tools

Prerequisites

Installation

Usage

Claude Desktop / Claude Code

Environment Variables

Development

License

Audit the pieces. Scan the whole. Decide.