Model Context Protocol moderate risk

Plane

The Plane MCP server enables LLMs to interact with Plane.so for project and issue management, requiring user approval for modifications and API key security.

Connections & Capabilities

Connects To

GitHub

Capabilities

readwrite

Quickstart

Install

npx -y @smithery/cli install @kelvin6365/plane-mcp-server --client cursor

Config

{
  "mcpServers": {
    "plane": {
      "command": "node",
      "args": ["path/to/plane-mcp-server/build/index.js"],
      "env": {
        "PLANE_API_KEY": "your_plane_api_key_here",
        "PLANE_WORKSPACE_SLUG": "your_workspace_slug_here",
        "PLANE_HOST": "optional"
      }
    }
  }
}

Exposed MCP Tools (6)

safe

list-projects

Lists all projects in the Plane workspace.

Read-only operation; no data modification.

safe

get-project

Retrieves detailed information about a specific project.

Read-only operation; no data modification.

moderate

create-issue

Creates a new issue within a specified project.

Creates new data; requires user approval.

safe

list-issues

Lists issues from a specified project, with optional filtering.

Read-only operation; no data modification.

safe

get-issue

Retrieves detailed information about a specific issue.

Read-only operation; no data modification.

moderate

update-issue

Updates an existing issue in a project.

Modifies existing data; requires user approval.

Safety Assessment

This server is relatively safe for read operations. Write operations require explicit user approval, mitigating some risks. However, the security of the Plane.so API key and workspace is paramount, and compromised keys could lead to unauthorized data modification.

Requires user approval for write operations.
API key authentication for access control.
No direct code execution capabilities.
Well-defined tool set limits scope of actions.

API key compromise could lead to unauthorized modifications.
Relies on Plane.so's security for data protection.
Improperly configured environment variables can expose secrets.
Potential for misuse if LLM is instructed maliciously.