Productboard MCP Server

Productboard features, products, notes, and objectives management for AI assistants.

Data last scanned yesterday · Reviewed last month

51 dangerous tool21 tools19TypeScriptMIT

Overview

The Productboard MCP Server bridges your Productboard workspace with AI tools like Claude or Cursor. It provides a comprehensive set of functions to read and write data across your product management ecosystem, covering everything from individual feature tracking to release planning and objective monitoring.

Our verdict

This server carries a high risk level with a 35/100 security score. Because the project is community-maintained rather than official and lacks an editorially reviewed authentication or read-only implementation, users should exercise extreme caution. It is intended for developers who are comfortable auditing their own integrations, rather than for general production teams needing verified software.

  • Supports a wide array of read and write operations
  • Lightweight codebase with only 7 direct dependencies
  • Active development with commits made within the last day
  • Not maintained or supported by the official Productboard vendor
  • Authentication and read-only modes have not been editorially reviewed
  • Missing security documentation for API token management

Setup

Claude Desktop
{
  "mcpServers": {
    "productboard-mcp": {
      "args": [
        "-y",
        "@enreign/productboard-mcp"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

ToolDescriptionRisk
pb_feature_listList features with filteringlow
pb_feature_getGet a feature by IDlow
pb_feature_createCreate a new featuremedium
pb_feature_updateUpdate an existing featuremedium
pb_feature_deleteDelete a featurehigh
pb_product_listList productslow
pb_product_createCreate a productmedium
pb_product_hierarchyGet full product hierarchylow
pb_note_listList customer noteslow
pb_note_createCreate a customer notemedium

Compatibility

ClientLocalDockerRemoteRead-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

What is the recommended way to install this server?

The recommended method is to download the latest .mcpb bundle from the Releases page and install it directly into your MCP client, such as Claude Desktop.

Why must I set the LOG_LEVEL to error?

MCP servers communicate using stdio, and setting the log level to 'info' or higher will cause log messages to be written to stdout, which interferes with the protocol and causes the server to lock up.

How do I generate the required API token?

Log in to your Productboard workspace, navigate to Profile & Settings, then to API Access, and select Generate API key.

Can I use OAuth2 instead of a bearer token?

Yes, you can configure OAuth2 by setting the PRODUCTBOARD_AUTH_TYPE environment variable to 'oauth2' and providing the required client ID, client secret, and redirect URI variables.

Is the npx installation method currently available?

No, the package is not yet published to npm, so you should use the .mcpb bundle or the manual local installation method instead.

Alternatives

Changelog

Badge

Productboard MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.