Is io.github.scaratec/trellio-mcp safe to use?

io.github.scaratec/trellio-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.scaratec/trellio-mcp?

io.github.scaratec/trellio-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.

Is io.github.scaratec/trellio-mcp actively maintained?

io.github.scaratec/trellio-mcp is actively maintained — last commit was 1 day ago.

io.github.scaratec/trellio-mcp

MCP server for Trello — manage boards, lists, cards, attachments and more via Claude or Gemini

ActiveNot tested

AI / ML Productivity

GitHub

27DNo CVEsactive

Quick Install

{
  "mcpServers": {
    "io-github-scaratec-trellio-mcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Setup guide

No install config available. Check the server's README for setup instructions.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-scaratec-trellio-mcp)](https://mcppedia.org/s/io-github-scaratec-trellio-mcp)

Should you use this server?

MCP server for Trello — manage boards, lists, cards, attachments and more via Claude or Gemini

✓

Is it safe?

No package registry to scan.

No authentication — any process on your machine can connect.

License not specified.

✓

Is it maintained?

Last commit 1 days ago.

Will it work with my client?

Transport: stdio. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.

Loading README…

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Score Breakdown

MCPpedia Score

Click each category to see evidence

27D

Last scored 15h ago

How we score →

Security

2/30

No known vulnerabilities.

○

Known CVEs — No package registry to scan

○

Tool safety — No tools to analyze

○

Tool poisoning — No tools to analyze

○

Injection vectors — No tools to analyze

○

Tool stability — First scan — baseline recorded

○

Dependency health — No package to analyze

✗

License — No license specified

○

Authentication — No authentication required

○

Repository — active repo

CVEs checked daily via OSV.dev. Score algorithm is open source.

Reviews

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.scaratec/trellio-mcp safe to use?: io.github.scaratec/trellio-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.scaratec/trellio-mcp?: io.github.scaratec/trellio-mcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.scaratec/trellio-mcp?: io.github.scaratec/trellio-mcp is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.
Is io.github.scaratec/trellio-mcp actively maintained?: io.github.scaratec/trellio-mcp is actively maintained — last commit was 1 day ago.

Similar servers

View all →

Sequential Thinking MCP Server

OfficialNo CVEs98A

Dynamic problem-solving through sequential thought chains

1 toolsstdio84.0k112.2k/wk3d ago

XcodeBuildMCP

OfficialNo CVEs97A

A Model Context Protocol (MCP) server and CLI that provides tools for agent use when working on iOS and macOS projects.

2 toolsremote5.2k46.6k/wk1d ago

Scrumboy

No CVEs95A

a self-hosted project management & Kanban solution + Instant shareable boards

1 toolsremote168586.4k/wk1d ago

Python Sdk

OfficialNo CVEs95A

The official Python SDK for Model Context Protocol servers and clients

1 toolsremote22.7k166.4k/wk1d ago

MCP Security Weekly

Get CVE alerts and security updates for io.github.scaratec/trellio-mcp and similar servers.

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

trellio-mcp — MCP Server for Trello

An MCP server that gives Claude Desktop, Claude Code, and Gemini CLI full access to the Trello API. Built on the trellio async client library and the official Python MCP SDK. Developed following the BDD Guidelines v1.8.0.

Features

46 MCP tools — 1:1 mapping to trellio methods, plus one composite get_board_overview tool
2 resource templates — trello://board/{id} and trello://card/{id} for rich context loading
3 prompts — summarize_board, create_sprint, daily_standup as workflow shortcuts
Built-in auth flow — python -m trello_mcp auth opens the browser, user clicks "Allow", token stored securely
Structured error handling — Trello API errors are translated into clear, actionable MCP error messages
stdio transport — runs as a local subprocess, no network surface

Tools

Category	Tools	Count
Discovery	`list_boards`, `search`	2
Boards	`get_board_overview`, `create_board`, `get_board`, `update_board`, `delete_board`	5
Lists	`list_lists`, `create_list`, `update_list`, `archive_list`	4
Cards	`list_cards`, `create_card`, `get_card`, `update_card`, `delete_card`, `add_label_to_card`, `remove_label_from_card`	7
Labels	`list_board_labels`, `create_label`, `update_label`, `delete_label`	4
Checklists	`list_card_checklists`, `create_checklist`, `delete_checklist`, `create_check_item`, `update_check_item`, `delete_check_item`	6
Comments	`list_comments`, `add_comment`, `update_comment`, `delete_comment`	4
Members	`get_me`, `list_board_members`, `get_member`	3
Attachments	`list_attachments`, `create_attachment`, `get_attachment`, `upload_attachment`, `download_attachment`, `delete_attachment`	6
Webhooks	`list_webhooks`, `create_webhook`, `get_webhook`, `update_webhook`, `delete_webhook`	5

Card tools support pos (top/bottom), idLabels (comma-separated), due (ISO 8601), and dueComplete (true/false) on create and update.

Prerequisites

Python 3.10+
A Trello API Key (add http://localhost:8095 to Allowed Origins)

Installation

Smithery

npx @smithery/cli install gupta/trellio-mcp --client claude

Using pipx (recommended)

To install globally so the trellio-mcp command is available in your PATH:

pipx install trellio-mcp

Alternatively, you can run it on-the-fly without installing:

pipx run trellio-mcp

(Note: If you use pipx run, your MCP client configuration must also use pipx as the command and run trellio-mcp as arguments.)

Using pip

pip install trellio-mcp

From source

git clone https://github.com/scaratec/trellio-mcp.git
cd trellio-mcp
python3 -m venv .venv
.venv/bin/pip install -e ".[dev]"

Authentication

Interactive (recommended)

Run the auth command on each machine to connect your Trello account:

If you installed globally (pipx install or pip install):

TRELLO_API_KEY=your_api_key trellio-mcp auth

If using on-the-fly execution (pipx run):

TRELLO_API_KEY=your_api_key pipx run trellio-mcp auth

This opens a browser where you authorize the app. The token is captured automatically and stored in ~/.config/trellio-mcp/credentials.json (permissions 0

... View full README on GitHub