mcp-server-trello

Security Findings (360)

• LowAS-002

  ⚠️Excessive Permissions ×24

  input schema exposes 31 properties (threshold: 10)

  TRELLO_ADD_BOARDS

  input schema exposes 16 properties (threshold: 10)

  TRELLO_ADD_CARDS

  input schema exposes 12 properties (threshold: 10)

  TRELLO_ADD_ORGANIZATIONSTRELLO_GET_MEMBERS_NOTIFICATIONS_BY_ID_MEMBER

  input schema exposes 15 properties (threshold: 10)

  TRELLO_GET_BOARDS_ACTIONS_BY_ID_BOARDTRELLO_GET_BOARDS_MEMBERS_CARDS_BY_ID_BOARD_BY_ID_MEMBERTRELLO_GET_CARDS_ACTIONS_BY_ID_CARDTRELLO_GET_LISTS_ACTIONS_BY_ID_LISTTRELLO_GET_MEMBERS_ACTIONS_BY_ID_MEMBERTRELLO_GET_NOTIFICATIONS_BY_ID_NOTIFICATIONTRELLO_GET_ORGANIZATIONS_ACTIONS_BY_ID_ORGTRELLO_GET_ORGANIZATIONS_MEMBERS_CARDS_BY_ID_ORG_BY_ID_MEMBER

  input schema exposes 38 properties (threshold: 10)

  TRELLO_GET_BOARDS_BY_ID_BOARD

  input schema exposes 14 properties (threshold: 10)

  TRELLO_GET_BOARDS_CARDS_BY_ID_BOARDTRELLO_GET_CHECKLISTS_CARDS_BY_ID_CHECKLISTTRELLO_GET_LISTS_CARDS_BY_ID_LISTTRELLO_GET_MEMBERS_CARDS_BY_ID_MEMBER

  input schema exposes 18 properties (threshold: 10)

  TRELLO_GET_BOARDS_CARDS_BY_ID_BOARD_BY_ID_CARD

  input schema exposes 24 properties (threshold: 10)

  TRELLO_GET_CARDS_BY_ID_CARD

  input schema exposes 13 properties (threshold: 10)

  TRELLO_GET_MEMBERS_BOARDS_BY_ID_MEMBERTRELLO_GET_ORGANIZATIONS_BOARDS_BY_ID_ORG

  input schema exposes 53 properties (threshold: 10)

  TRELLO_GET_MEMBERS_BY_ID_MEMBER

  input schema exposes 26 properties (threshold: 10)

  TRELLO_GET_ORGANIZATIONS_BY_ID_ORG

  input schema exposes 20 properties (threshold: 10)

  TRELLO_GET_SEARCH

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• LowAS-011

  ℹ️Missing Rate-Limit / Timeout ×53

  tool performs network or execution operations but declares no rate-limit, timeout, or retry configuration

  TRELLO_ADD_CARDSTRELLO_ADD_CARDS_ATTACHMENTS_BY_ID_CARDTRELLO_ADD_LISTS_ARCHIVE_ALL_CARDS_BY_ID_LISTTRELLO_ADD_MEMBERS_SAVED_SEARCHES_BY_ID_MEMBERTRELLO_ADD_ORGANIZATIONSTRELLO_ADD_ORGANIZATIONS_LOGO_BY_ID_ORGTRELLO_ADD_TOKENS_WEBHOOKS_BY_TOKENTRELLO_DELETE_MEMBER_SAVED_SEARCHTRELLO_DELETE_ORGANIZATIONS_LOGO_BY_ID_ORGTRELLO_DELETE_ORGANIZATIONS_PREFS_ORG_INVITE_RESTRICT_BY_ID_ORGTRELLO_DELETE_ORG_ASSOCIATED_DOMAINTRELLO_DELETE_TOKENS_WEBHOOKS_BY_TOKEN_BY_ID_WEBHOOKTRELLO_DELETE_WEBHOOKS_BY_ID_WEBHOOKTRELLO_GET_ACTIONS_MEMBER_BY_ID_ACTION_BY_FIELDTRELLO_GET_ACTIONS_ORGANIZATION_BY_ID_ACTIONTRELLO_GET_ACTIONS_ORGANIZATION_BY_ID_ACTION_BY_FIELDTRELLO_GET_BATCHTRELLO_GET_BOARDS_BY_ID_BOARDTRELLO_GET_BOARDS_LABELS_BY_ID_BOARDTRELLO_GET_BOARDS_LABELS_BY_ID_BOARD_BY_ID_LABELTRELLO_GET_BOARDS_LISTS_BY_ID_BOARD_BY_FILTERTRELLO_GET_BOARDS_ORGANIZATION_BY_ID_BOARDTRELLO_GET_BOARDS_ORGANIZATION_BY_ID_BOARD_BY_FIELDTRELLO_GET_CARDS_BOARD_BY_ID_CARDTRELLO_GET_CARDS_LIST_BY_ID_CARD_BY_FIELDTRELLO_GET_CARDS_MEMBERS_VOTED_BY_ID_CARDTRELLO_GET_CHECKLISTS_BY_ID_CHECKLISTTRELLO_GET_LABELS_BOARD_BY_ID_LABEL_BY_FIELDTRELLO_GET_LISTS_BOARD_BY_ID_LIST_BY_FIELDTRELLO_GET_LISTS_BY_ID_LIST_BY_FIELDTRELLO_GET_LISTS_CARDS_BY_ID_LISTTRELLO_GET_MEMBER_CUSTOM_BGTRELLO_GET_MEMBER_SAVED_SEARCHTRELLO_GET_MEMBERS_BOARD_BACKGROUNDS_BY_ID_MEMBERTRELLO_GET_MEMBERS_BOARD_STARS_BY_ID_MEMBERTRELLO_GET_MEMBERS_BY_ID_MEMBERTRELLO_GET_MEMBERS_BY_ID_MEMBER_BY_FIELDTRELLO_GET_MEMBERS_ORGANIZATIONS_BY_ID_MEMBERTRELLO_GET_MEMBERS_ORGANIZATIONS_BY_ID_MEMBER_BY_FILTERTRELLO_GET_MEMBERS_SAVED_SEARCHES_BY_ID_MEMBERTRELLO_GET_NOTIF_CREATOR_FIELDTRELLO_GET_NOTIFICATIONS_DISPLAY_BY_ID_NOTIFICATIONTRELLO_GET_NOTIFICATIONS_LIST_BY_ID_NOTIFICATION_BY_FIELDTRELLO_GET_NOTIFICATIONS_MEMBER_BY_ID_NOTIFICATIONTRELLO_GET_NOTIFICATIONS_MEMBER_CREATOR_BY_ID_NOTIFICATIONTRELLO_GET_ORGANIZATIONS_BOARDS_BY_ID_ORGTRELLO_GET_ORGANIZATIONS_BOARDS_BY_ID_ORG_BY_FILTERTRELLO_GET_ORGANIZATIONS_BY_ID_ORG_BY_FIELDTRELLO_GET_ORGANIZATIONS_DELTAS_BY_ID_ORGTRELLO_GET_ORGANIZATIONS_MEMBERS_BY_ID_ORG_BY_FILTERTRELLO_GET_ORGANIZATIONS_MEMBERS_CARDS_BY_ID_ORG_BY_ID_MEMBERTRELLO_GET_ORGANIZATIONS_MEMBERSHIPS_BY_ID_ORGTRELLO_GET_SEARCH

  Fix: Declare explicit rate-limit, timeout, and retry configuration for all network and execution tools. Implement exponential back-off and surface resource state to the calling agent.

• InfoAS-014

  ℹ️Dependency Inventory Unavailable ×200

  Tool did not expose metadata.dependencies or repo_url, so supply-chain coverage is limited.

  TRELLO_ADD_BOARDSTRELLO_ADD_BOARDS_CALENDAR_KEY_GENERATE_BY_ID_BOARDTRELLO_ADD_BOARDS_CHECKLISTS_BY_ID_BOARDTRELLO_ADD_BOARDS_EMAIL_KEY_GENERATE_BY_ID_BOARDTRELLO_ADD_BOARDS_LABELS_BY_ID_BOARDTRELLO_ADD_BOARDS_LISTS_BY_ID_BOARDTRELLO_ADD_BOARDS_MARK_AS_VIEWED_BY_ID_BOARDTRELLO_ADD_BOARDS_POWER_UPS_BY_ID_BOARDTRELLO_ADD_CARDSTRELLO_ADD_CARDS_ACTIONS_COMMENTS_BY_ID_CARDTRELLO_ADD_CARDS_ATTACHMENTS_BY_ID_CARDTRELLO_ADD_CARDS_CHECKLIST_CHECK_ITEM_BY_ID_CARD_BY_ID_CHECKLISTTRELLO_ADD_CARDS_CHECKLISTS_BY_ID_CARDTRELLO_ADD_CARDS_ID_LABELS_BY_ID_CARDTRELLO_ADD_CARDS_ID_MEMBERS_BY_ID_CARDTRELLO_ADD_CARDS_LABELS_BY_ID_CARDTRELLO_ADD_CARDS_MEMBERS_VOTED_BY_ID_CARDTRELLO_ADD_CARDS_STICKERS_BY_ID_CARDTRELLO_ADD_CHECKLISTSTRELLO_ADD_CHECKLISTS_CHECK_ITEMS_BY_ID_CHECKLISTTRELLO_ADD_LABELSTRELLO_ADD_LISTSTRELLO_ADD_LISTS_ARCHIVE_ALL_CARDS_BY_ID_LISTTRELLO_ADD_LISTS_CARDS_BY_ID_LISTTRELLO_ADD_LISTS_MOVE_ALL_CARDS_BY_ID_LISTTRELLO_ADD_MEMBERS_AVATAR_BY_ID_MEMBERTRELLO_ADD_MEMBERS_BOARD_BACKGROUNDS_BY_ID_MEMBERTRELLO_ADD_MEMBERS_BOARD_STARS_BY_ID_MEMBERTRELLO_ADD_MEMBERS_CUSTOM_BOARD_BACKGROUNDS_BY_ID_MEMBERTRELLO_ADD_MEMBERS_CUSTOM_EMOJI_BY_ID_MEMBERTRELLO_ADD_MEMBERS_CUSTOM_STICKERS_BY_ID_MEMBERTRELLO_ADD_MEMBERS_SAVED_SEARCHES_BY_ID_MEMBERTRELLO_ADD_NOTIFICATIONS_ALL_READTRELLO_ADD_ORGANIZATIONSTRELLO_ADD_ORGANIZATIONS_LOGO_BY_ID_ORGTRELLO_ADD_SESSIONSTRELLO_ADD_TOKENS_WEBHOOKS_BY_TOKENTRELLO_CONVERT_CHECKLIST_ITEM_TO_CARDTRELLO_DELETE_ACTIONS_BY_ID_ACTIONTRELLO_DELETE_BOARDS_MEMBERS_BY_ID_BOARD_BY_ID_MEMBERTRELLO_DELETE_BOARDS_POWER_UPS_BY_ID_BOARD_BY_POWER_UPTRELLO_DELETE_CARDS_ACTIONS_COMMENTS_BY_ID_CARD_BY_ID_ACTIONTRELLO_DELETE_CARDS_ATTACHMENTS_BY_ID_CARD_BY_ID_ATTACHMENTTRELLO_DELETE_CARDS_BY_ID_CARDTRELLO_DELETE_CARDS_CHECKLISTS_BY_ID_CARD_BY_ID_CHECKLISTTRELLO_DELETE_CARDS_ID_LABELS_BY_ID_CARD_BY_ID_LABELTRELLO_DELETE_CARDS_ID_MEMBERS_BY_ID_CARD_BY_ID_MEMBERTRELLO_DELETE_CARDS_LABELS_BY_ID_CARD_BY_COLORTRELLO_DELETE_CARDS_MEMBERS_VOTED_BY_ID_CARD_BY_ID_MEMBERTRELLO_DELETE_CARDS_STICKERS_BY_ID_CARD_BY_ID_STICKERTRELLO_DELETE_CHECKLIST_ITEMTRELLO_DELETE_CHECKLISTS_BY_ID_CHECKLISTTRELLO_DELETE_LABELS_BY_ID_LABELTRELLO_DELETE_MEMBER_BOARD_BACKGROUNDTRELLO_DELETE_MEMBER_CUSTOM_STICKERTRELLO_DELETE_MEMBER_SAVED_SEARCHTRELLO_DELETE_MEMBERS_BOARD_STARS_BY_ID_MEMBER_BY_ID_BOARD_STARTRELLO_DELETE_ORGANIZATIONS_BY_ID_ORGTRELLO_DELETE_ORGANIZATIONS_LOGO_BY_ID_ORGTRELLO_DELETE_ORGANIZATIONS_MEMBERS_ALL_BY_ID_ORG_BY_ID_MEMBERTRELLO_DELETE_ORGANIZATIONS_MEMBERS_BY_ID_ORG_BY_ID_MEMBERTRELLO_DELETE_ORGANIZATIONS_PREFS_ORG_INVITE_RESTRICT_BY_ID_ORGTRELLO_DELETE_ORG_ASSOCIATED_DOMAINTRELLO_DELETE_TOKENS_BY_TOKENTRELLO_DELETE_TOKENS_WEBHOOKS_BY_TOKEN_BY_ID_WEBHOOKTRELLO_DELETE_WEBHOOKS_BY_ID_WEBHOOKTRELLO_DISMISS_MEMBER_MESSAGETRELLO_GET_ACTIONS_BOARD_BY_ID_ACTIONTRELLO_GET_ACTIONS_BOARD_BY_ID_ACTION_BY_FIELDTRELLO_GET_ACTIONS_BY_ID_ACTIONTRELLO_GET_ACTIONS_BY_ID_ACTION_BY_FIELDTRELLO_GET_ACTIONS_CARD_BY_ID_ACTIONTRELLO_GET_ACTIONS_CARD_BY_ID_ACTION_BY_FIELDTRELLO_GET_ACTIONS_DISPLAY_BY_ID_ACTIONTRELLO_GET_ACTIONS_ENTITIES_BY_ID_ACTIONTRELLO_GET_ACTIONS_LIST_BY_ID_ACTIONTRELLO_GET_ACTIONS_LIST_BY_ID_ACTION_BY_FIELDTRELLO_GET_ACTIONS_MEMBER_BY_ID_ACTIONTRELLO_GET_ACTIONS_MEMBER_BY_ID_ACTION_BY_FIELDTRELLO_GET_ACTIONS_MEMBER_CREATOR_BY_ID_ACTIONTRELLO_GET_ACTIONS_MEMBER_CREATOR_BY_ID_ACTION_BY_FIELDTRELLO_GET_ACTIONS_ORGANIZATION_BY_ID_ACTIONTRELLO_GET_ACTIONS_ORGANIZATION_BY_ID_ACTION_BY_FIELDTRELLO_GET_BATCHTRELLO_GET_BOARDS_ACTIONS_BY_ID_BOARDTRELLO_GET_BOARDS_BOARD_STARS_BY_ID_BOARDTRELLO_GET_BOARDS_BY_ID_BOARDTRELLO_GET_BOARDS_BY_ID_BOARD_BY_FIELDTRELLO_GET_BOARDS_CARDS_BY_ID_BOARDTRELLO_GET_BOARDS_CARDS_BY_ID_BOARD_BY_FILTERTRELLO_GET_BOARDS_CARDS_BY_ID_BOARD_BY_ID_CARDTRELLO_GET_BOARDS_CHECKLISTS_BY_ID_BOARDTRELLO_GET_BOARDS_DELTAS_BY_ID_BOARDTRELLO_GET_BOARDS_LABELS_BY_ID_BOARDTRELLO_GET_BOARDS_LABELS_BY_ID_BOARD_BY_ID_LABELTRELLO_GET_BOARDS_LISTS_BY_ID_BOARDTRELLO_GET_BOARDS_LISTS_BY_ID_BOARD_BY_FILTERTRELLO_GET_BOARDS_MEMBERS_BY_ID_BOARDTRELLO_GET_BOARDS_MEMBERS_BY_ID_BOARD_BY_FILTERTRELLO_GET_BOARDS_MEMBERS_CARDS_BY_ID_BOARD_BY_ID_MEMBERTRELLO_GET_BOARDS_MEMBERSHIPS_BY_ID_BOARDTRELLO_GET_BOARDS_MEMBERSHIPS_BY_ID_BOARD_BY_ID_MEMBERSHIPTRELLO_GET_BOARDS_MEMBERS_INVITED_BY_ID_BOARDTRELLO_GET_BOARDS_MEMBERS_INVITED_BY_ID_BOARD_BY_FIELDTRELLO_GET_BOARDS_MY_PREFS_BY_ID_BOARDTRELLO_GET_BOARDS_ORGANIZATION_BY_ID_BOARDTRELLO_GET_BOARDS_ORGANIZATION_BY_ID_BOARD_BY_FIELDTRELLO_GET_CARDS_ACTIONS_BY_ID_CARDTRELLO_GET_CARDS_ATTACHMENTS_BY_ID_CARDTRELLO_GET_CARDS_ATTACHMENTS_BY_ID_CARD_BY_ID_ATTACHMENTTRELLO_GET_CARDS_BOARD_BY_ID_CARDTRELLO_GET_CARDS_BOARD_BY_ID_CARD_BY_FIELDTRELLO_GET_CARDS_BY_ID_CARDTRELLO_GET_CARDS_BY_ID_CARD_BY_FIELDTRELLO_GET_CARDS_CHECK_ITEM_STATES_BY_ID_CARDTRELLO_GET_CARDS_CHECKLISTS_BY_ID_CARDTRELLO_GET_CARDS_CUSTOM_FIELD_ITEMS_BY_ID_CARDTRELLO_GET_CARDS_LIST_BY_ID_CARDTRELLO_GET_CARDS_LIST_BY_ID_CARD_BY_FIELDTRELLO_GET_CARDS_MEMBERS_BY_ID_CARDTRELLO_GET_CARDS_MEMBERS_VOTED_BY_ID_CARDTRELLO_GET_CARDS_STICKERS_BY_ID_CARDTRELLO_GET_CARDS_STICKERS_BY_ID_CARD_BY_ID_STICKERTRELLO_GET_CHECK_ITEM_BY_IDTRELLO_GET_CHECKLISTS_BOARD_BY_ID_CHECKLISTTRELLO_GET_CHECKLISTS_BOARD_BY_ID_CHECKLIST_BY_FIELDTRELLO_GET_CHECKLISTS_BY_ID_CHECKLISTTRELLO_GET_CHECKLISTS_BY_ID_CHECKLIST_BY_FIELDTRELLO_GET_CHECKLISTS_CARDS_BY_ID_CHECKLISTTRELLO_GET_CHECKLISTS_CARDS_BY_ID_CHECKLIST_BY_FILTERTRELLO_GET_CHECKLISTS_CHECK_ITEMS_BY_ID_CHECKLISTTRELLO_GET_LABELS_BOARD_BY_ID_LABELTRELLO_GET_LABELS_BOARD_BY_ID_LABEL_BY_FIELDTRELLO_GET_LABELS_BY_ID_LABELTRELLO_GET_LISTS_ACTIONS_BY_ID_LISTTRELLO_GET_LISTS_BOARD_BY_ID_LISTTRELLO_GET_LISTS_BOARD_BY_ID_LIST_BY_FIELDTRELLO_GET_LISTS_BY_ID_LISTTRELLO_GET_LISTS_BY_ID_LIST_BY_FIELDTRELLO_GET_LISTS_CARDS_BY_ID_LISTTRELLO_GET_LISTS_CARDS_BY_ID_LIST_BY_FILTERTRELLO_GET_MEMBER_BOARD_BACKGROUNDTRELLO_GET_MEMBER_CUSTOM_BGTRELLO_GET_MEMBER_CUSTOM_EMOJITRELLO_GET_MEMBER_CUSTOM_STICKERTRELLO_GET_MEMBERS_ACTIONS_BY_ID_MEMBERTRELLO_GET_MEMBER_SAVED_SEARCHTRELLO_GET_MEMBERS_BOARD_BACKGROUNDS_BY_ID_MEMBERTRELLO_GET_MEMBERS_BOARDS_BY_ID_MEMBERTRELLO_GET_MEMBERS_BOARDS_BY_ID_MEMBER_BY_FILTERTRELLO_GET_MEMBERS_BOARDS_INVITED_BY_ID_MEMBERTRELLO_GET_MEMBERS_BOARDS_INVITED_BY_ID_MEMBER_BY_FIELDTRELLO_GET_MEMBERS_BOARD_STARS_BY_ID_MEMBERTRELLO_GET_MEMBERS_BOARD_STARS_BY_ID_MEMBER_BY_ID_BOARD_STARTRELLO_GET_MEMBERS_BY_ID_MEMBERTRELLO_GET_MEMBERS_BY_ID_MEMBER_BY_FIELDTRELLO_GET_MEMBERS_CARDS_BY_ID_MEMBERTRELLO_GET_MEMBERS_CARDS_BY_ID_MEMBER_BY_FILTERTRELLO_GET_MEMBERS_CUSTOM_BOARD_BACKGROUNDS_BY_ID_MEMBERTRELLO_GET_MEMBERS_CUSTOM_EMOJI_BY_ID_MEMBERTRELLO_GET_MEMBERS_CUSTOM_STICKERS_BY_ID_MEMBERTRELLO_GET_MEMBERS_DELTAS_BY_ID_MEMBERTRELLO_GET_MEMBERS_NOTIFICATIONS_BY_ID_MEMBERTRELLO_GET_MEMBERS_NOTIFICATIONS_BY_ID_MEMBER_BY_FILTERTRELLO_GET_MEMBERS_ORGANIZATIONS_BY_ID_MEMBERTRELLO_GET_MEMBERS_ORGANIZATIONS_BY_ID_MEMBER_BY_FILTERTRELLO_GET_MEMBERS_ORGANIZATIONS_INVITED_BY_ID_MEMBERTRELLO_GET_MEMBERS_ORGANIZATIONS_INVITED_BY_ID_MEMBER_BY_FIELDTRELLO_GET_MEMBERS_SAVED_SEARCHES_BY_ID_MEMBERTRELLO_GET_MEMBERS_TOKENS_BY_ID_MEMBERTRELLO_GET_NOTIF_CREATOR_FIELDTRELLO_GET_NOTIFICATION_ORG_FIELDTRELLO_GET_NOTIFICATIONS_BOARD_BY_ID_NOTIFICATIONTRELLO_GET_NOTIFICATIONS_BOARD_BY_ID_NOTIFICATION_BY_FIELDTRELLO_GET_NOTIFICATIONS_BY_ID_NOTIFICATIONTRELLO_GET_NOTIFICATIONS_BY_ID_NOTIFICATION_BY_FIELDTRELLO_GET_NOTIFICATIONS_CARD_BY_ID_NOTIFICATIONTRELLO_GET_NOTIFICATIONS_CARD_BY_ID_NOTIFICATION_BY_FIELDTRELLO_GET_NOTIFICATIONS_DISPLAY_BY_ID_NOTIFICATIONTRELLO_GET_NOTIFICATIONS_ENTITIES_BY_ID_NOTIFICATIONTRELLO_GET_NOTIFICATIONS_LIST_BY_ID_NOTIFICATIONTRELLO_GET_NOTIFICATIONS_LIST_BY_ID_NOTIFICATION_BY_FIELDTRELLO_GET_NOTIFICATIONS_MEMBER_BY_ID_NOTIFICATIONTRELLO_GET_NOTIFICATIONS_MEMBER_BY_ID_NOTIFICATION_BY_FIELDTRELLO_GET_NOTIFICATIONS_MEMBER_CREATOR_BY_ID_NOTIFICATIONTRELLO_GET_NOTIFICATIONS_ORGANIZATION_BY_ID_NOTIFICATIONTRELLO_GET_ORGANIZATIONS_ACTIONS_BY_ID_ORGTRELLO_GET_ORGANIZATIONS_BOARDS_BY_ID_ORGTRELLO_GET_ORGANIZATIONS_BOARDS_BY_ID_ORG_BY_FILTERTRELLO_GET_ORGANIZATIONS_BY_ID_ORGTRELLO_GET_ORGANIZATIONS_BY_ID_ORG_BY_FIELDTRELLO_GET_ORGANIZATIONS_DELTAS_BY_ID_ORGTRELLO_GET_ORGANIZATIONS_MEMBERS_BY_ID_ORGTRELLO_GET_ORGANIZATIONS_MEMBERS_BY_ID_ORG_BY_FILTERTRELLO_GET_ORGANIZATIONS_MEMBERS_CARDS_BY_ID_ORG_BY_ID_MEMBERTRELLO_GET_ORGANIZATIONS_MEMBERSHIPS_BY_ID_ORGTRELLO_GET_ORGANIZATIONS_MEMBERSHIPS_BY_ID_ORG_BY_ID_MEMBERSHIPTRELLO_GET_ORGANIZATIONS_MEMBERS_INVITED_BY_ID_ORGTRELLO_GET_ORGANIZATIONS_MEMBERS_INVITED_BY_ID_ORG_BY_FIELDTRELLO_GET_SEARCH

  Fix: Review and remediate the identified issue.

• InfoAS-002

  ⚠️Excessive Permissions ×82

  declared capabilities: network access, filesystem access

  TRELLO_ADD_CARDSTRELLO_ADD_CARDS_ATTACHMENTS_BY_ID_CARDTRELLO_DELETE_MEMBER_SAVED_SEARCHTRELLO_GET_MEMBER_CUSTOM_BGTRELLO_GET_MEMBERS_BY_ID_MEMBERTRELLO_GET_MEMBERS_BY_ID_MEMBER_BY_FIELD

  declared capabilities: filesystem access

  TRELLO_ADD_CARDS_ACTIONS_COMMENTS_BY_ID_CARDTRELLO_ADD_MEMBERS_AVATAR_BY_ID_MEMBERTRELLO_ADD_MEMBERS_BOARD_BACKGROUNDS_BY_ID_MEMBERTRELLO_ADD_MEMBERS_CUSTOM_BOARD_BACKGROUNDS_BY_ID_MEMBERTRELLO_ADD_MEMBERS_CUSTOM_EMOJI_BY_ID_MEMBERTRELLO_ADD_MEMBERS_CUSTOM_STICKERS_BY_ID_MEMBERTRELLO_DELETE_ACTIONS_BY_ID_ACTIONTRELLO_DELETE_BOARDS_MEMBERS_BY_ID_BOARD_BY_ID_MEMBERTRELLO_DELETE_BOARDS_POWER_UPS_BY_ID_BOARD_BY_POWER_UPTRELLO_DELETE_CARDS_ACTIONS_COMMENTS_BY_ID_CARD_BY_ID_ACTIONTRELLO_DELETE_CARDS_ATTACHMENTS_BY_ID_CARD_BY_ID_ATTACHMENTTRELLO_DELETE_CARDS_BY_ID_CARDTRELLO_DELETE_CARDS_CHECKLISTS_BY_ID_CARD_BY_ID_CHECKLISTTRELLO_DELETE_CARDS_ID_LABELS_BY_ID_CARD_BY_ID_LABELTRELLO_DELETE_CARDS_ID_MEMBERS_BY_ID_CARD_BY_ID_MEMBERTRELLO_DELETE_CARDS_LABELS_BY_ID_CARD_BY_COLORTRELLO_DELETE_CARDS_MEMBERS_VOTED_BY_ID_CARD_BY_ID_MEMBERTRELLO_DELETE_CARDS_STICKERS_BY_ID_CARD_BY_ID_STICKERTRELLO_DELETE_CHECKLIST_ITEMTRELLO_DELETE_CHECKLISTS_BY_ID_CHECKLISTTRELLO_DELETE_LABELS_BY_ID_LABELTRELLO_DELETE_MEMBER_BOARD_BACKGROUNDTRELLO_DELETE_MEMBER_CUSTOM_STICKERTRELLO_DELETE_MEMBERS_BOARD_STARS_BY_ID_MEMBER_BY_ID_BOARD_STARTRELLO_DELETE_ORGANIZATIONS_BY_ID_ORGTRELLO_DELETE_ORGANIZATIONS_MEMBERS_ALL_BY_ID_ORG_BY_ID_MEMBERTRELLO_DELETE_ORGANIZATIONS_MEMBERS_BY_ID_ORG_BY_ID_MEMBERTRELLO_DELETE_TOKENS_BY_TOKENTRELLO_GET_ACTIONS_MEMBER_BY_ID_ACTION

  declared capabilities: HTTP requests

  TRELLO_ADD_LISTS_ARCHIVE_ALL_CARDS_BY_ID_LISTTRELLO_ADD_ORGANIZATIONS

  declared capabilities: network access, database access

  TRELLO_ADD_MEMBERS_SAVED_SEARCHES_BY_ID_MEMBERTRELLO_GET_SEARCH

  declared capabilities: filesystem access, HTTP requests

  TRELLO_ADD_ORGANIZATIONS_LOGO_BY_ID_ORGTRELLO_DELETE_ORGANIZATIONS_LOGO_BY_ID_ORGTRELLO_DELETE_ORGANIZATIONS_PREFS_ORG_INVITE_RESTRICT_BY_ID_ORGTRELLO_DELETE_ORG_ASSOCIATED_DOMAINTRELLO_DELETE_TOKENS_WEBHOOKS_BY_TOKEN_BY_ID_WEBHOOKTRELLO_DELETE_WEBHOOKS_BY_ID_WEBHOOK

  declared capabilities: code/command execution, network access, HTTP requests

  TRELLO_ADD_TOKENS_WEBHOOKS_BY_TOKEN

  declared capabilities: network access

  TRELLO_GET_ACTIONS_MEMBER_BY_ID_ACTION_BY_FIELDTRELLO_GET_ACTIONS_ORGANIZATION_BY_ID_ACTIONTRELLO_GET_ACTIONS_ORGANIZATION_BY_ID_ACTION_BY_FIELDTRELLO_GET_BOARDS_BY_ID_BOARDTRELLO_GET_BOARDS_LABELS_BY_ID_BOARDTRELLO_GET_BOARDS_LABELS_BY_ID_BOARD_BY_ID_LABELTRELLO_GET_BOARDS_LISTS_BY_ID_BOARD_BY_FILTERTRELLO_GET_BOARDS_ORGANIZATION_BY_ID_BOARDTRELLO_GET_BOARDS_ORGANIZATION_BY_ID_BOARD_BY_FIELDTRELLO_GET_CARDS_BOARD_BY_ID_CARDTRELLO_GET_CARDS_LIST_BY_ID_CARD_BY_FIELDTRELLO_GET_CARDS_MEMBERS_VOTED_BY_ID_CARDTRELLO_GET_CHECKLISTS_BY_ID_CHECKLISTTRELLO_GET_LABELS_BOARD_BY_ID_LABEL_BY_FIELDTRELLO_GET_LISTS_BOARD_BY_ID_LIST_BY_FIELDTRELLO_GET_LISTS_BY_ID_LIST_BY_FIELDTRELLO_GET_LISTS_CARDS_BY_ID_LISTTRELLO_GET_MEMBERS_BOARD_BACKGROUNDS_BY_ID_MEMBERTRELLO_GET_MEMBERS_BOARD_STARS_BY_ID_MEMBERTRELLO_GET_MEMBERS_ORGANIZATIONS_BY_ID_MEMBERTRELLO_GET_MEMBERS_ORGANIZATIONS_BY_ID_MEMBER_BY_FILTERTRELLO_GET_NOTIF_CREATOR_FIELDTRELLO_GET_NOTIFICATIONS_DISPLAY_BY_ID_NOTIFICATIONTRELLO_GET_NOTIFICATIONS_LIST_BY_ID_NOTIFICATION_BY_FIELDTRELLO_GET_NOTIFICATIONS_MEMBER_BY_ID_NOTIFICATIONTRELLO_GET_NOTIFICATIONS_MEMBER_CREATOR_BY_ID_NOTIFICATIONTRELLO_GET_ORGANIZATIONS_BOARDS_BY_ID_ORGTRELLO_GET_ORGANIZATIONS_BOARDS_BY_ID_ORG_BY_FILTERTRELLO_GET_ORGANIZATIONS_BY_ID_ORG_BY_FIELDTRELLO_GET_ORGANIZATIONS_DELTAS_BY_ID_ORGTRELLO_GET_ORGANIZATIONS_MEMBERS_BY_ID_ORG_BY_FILTERTRELLO_GET_ORGANIZATIONS_MEMBERS_CARDS_BY_ID_ORG_BY_ID_MEMBERTRELLO_GET_ORGANIZATIONS_MEMBERSHIPS_BY_ID_ORG

  declared capabilities: code/command execution, network access

  TRELLO_GET_BATCHTRELLO_GET_MEMBER_SAVED_SEARCHTRELLO_GET_MEMBERS_SAVED_SEARCHES_BY_ID_MEMBER

  Fix: Tool requests broad permissions (exec/fs/network). Validate input parameters using Enums where possible, and restrict file system operations to explicit allowed directories.

• InfoAS-010

  🔑Insecure Secret Handling

  TRELLO_GET_MEMBERS_BY_ID_MEMBER:input parameter "tokens" accepts a credential (informational; not evidence of insecure handling)

  Fix: Avoid accepting raw credentials as input parameters. Use secret managers (e.g. 1Password CLI, AWS Secrets Manager) and ensure credentials are never logged or stored in agent traces.