Build my server

Directory / Collaboration

Miro MCP Server

Official hosted Miro server to search and read boards, create diagrams, docs, tables and other content, and reply to comments, with OAuth sign-in for one team.

Verdict: Miro MCP Server is graded B (solid, with minor gaps) in TrustedMCP's assessment from public signals, last updated 5 Nov 2026. It is at full marks on 2 of 4 checks (known bugs and connection) and loses points on login and upkeep, most of all on login. Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can.

Grade B Login: login required, broad accessUpkeep: updated recently, upkeep hard to verifyKnown bugs: 0 openConnection: safe for how it connects

2 of 4 checks at full marks · How we check

Source Docs Setup & security guide
VendorMiro
CategoryCollaboration
Connects overhttp

Our grade: 4 checks

Login Login required, broad access
Upkeep Active · 2026-09
Known bugs 0 open
Connection http

Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.

Community rating

3.9 18 reviews
50% would trust it in production
  • 5 5
  • 4 8
  • 3 4
  • 2 1
  • 1 0

Trust in production

  • Trust it - 50%
  • With caveats - 44%
  • Wouldn't - 6%

83% would recommend this server

How reviewers scored it

  • Setup & docs 3.8
  • Auth experience 3.7
  • Reliability 3.9
  • Maintainer responsiveness 4.2

Why it got a B

Miro's official server, hosted over HTTPS with OAuth 2.1, PKCE and no advisories on record. A sign-in covers one Miro team, and the agent sees only boards you can already open. It can create boards and write diagrams, docs, tables and comment replies on any board you can edit, so keep tool approval on. Enterprise admins must switch it on first. Miro replaced its older layout, diagram and doc tools with canvas tools on 14 September 2026, so older prompts and guides may name tools that no longer exist. Biggest deduction: the server lists separate read and write scopes but doesn't ask for the narrower one, so every client gets read and write access with no read-only option.

How to connect

// MCP client config (miroapp/miro-ai README, "Other MCP Clients"); Miro also offers a Cursor Marketplace plugin
{
  "mcpServers": {
    "miro": {
      "url": "https://mcp.miro.com/"
    }
  }
}

Is Miro MCP Server safe?

Is Miro MCP Server safe to use?

Miro MCP Server grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.

Does Miro MCP Server have known vulnerabilities?

Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.

Does Miro MCP Server support authentication?

Yes. It requires a login, so access can be tied to a person or a scoped key.

Alternatives in Collaboration

Compare all Collaboration MCP servers

Embed this badge

Maintain this server? Add the grade to your README.

TrustedMCP grade B

Markdown

[![TrustedMCP grade B](https://trustedmcp.io/badge/miro-mcp.svg)](https://trustedmcp.io/servers/miro-mcp)

HTML

<a href="https://trustedmcp.io/servers/miro-mcp"><img src="https://trustedmcp.io/badge/miro-mcp.svg" alt="TrustedMCP grade B" height="80"></a>

Community reviews

Lucas Silva Indie hacker
Trusts with caveats Recommends

Better than the DIY script it replaced

Tried it on a side project first, then rolled it out at work. Hosted endpoint means no local process to babysit. Keep permissions tight and it is a good tool.

Used for Keeping project boards up to date

  • Setup & docs 5/5
  • Auth experience 5/5
  • Reliability 4/5
  • Maintainer responsiveness 3/5
Nadia Petrova Backend engineer
Trusts in production Recommends

Worth the five minutes to set up

Installed it on a Friday, it was part of my workflow by Monday. Hosted endpoint means no local process to babysit. I like that access goes through a proper sign-in instead of a long-lived secret on disk.

Used for Keeping project boards up to date

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Mateo Garcia Staff engineer
Trusts in production Recommends

Solid and well behaved

Our agents call this dozens of times a day. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Easy recommendation.

Used for Posting daily standup summaries

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 5/5
  • Maintainer responsiveness 3/5
Marco Bianchi AI engineer
Trusts with caveats Recommends

Works, just lock it down

I like it, with reservations. Releases come often and the changelog is clear. I like that access goes through a proper sign-in instead of a long-lived secret on disk.

Used for Searching old conversations for decisions

  • Setup & docs 3/5
  • Auth experience 4/5
  • Reliability 2/5
  • Maintainer responsiveness 4/5
Oscar Lund Full-stack developer
Trusts with caveats Recommends

Capable but needs guardrails

Useful tool, though I would not hand it to a junior unsupervised. Turned on read-only mode on day one, highly recommend doing the same. Auth is handled properly, and revoking access later was one click. Recommended, with sensible guardrails.

Used for Drafting announcements

  • Setup & docs 3/5
  • Auth experience 3/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Tomas Novak CTO, early-stage startup
Trusts in production Recommends

Saves me a context switch every hour

Replaced a homegrown script with Miro MCP Server and have not looked back. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Would recommend without hesitation.

Used for Turning chat threads into tasks

  • Setup & docs 4/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Samir Khan Platform engineer
Trusts with caveats Recommends

Set it up once, forgot about it

Started with it as an experiment, now it is a fixture. Narrowing the scopes took ten minutes and made me much happier running it.

Used for Summarising channels I missed

  • Setup & docs 3/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Ivan Horvat Software engineer, agency
Trusts in production Recommends

Clean integration, sensible permissions

Installed it on a Friday, it was part of my workflow by Monday. You can tell it is actively maintained, the rough edges keep getting fixed. Nothing to install, I just point the client at the URL. Would recommend without hesitation.

Used for Searching old conversations for decisions

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Noah Fischer Engineering manager
Trusts in production Recommends

No complaints after a month

Clear tool names, sensible outputs, very few surprises. The OAuth flow worked first time in Claude Code. Happy to run it in production.

Used for Turning chat threads into tasks

  • Setup & docs 4/5
  • Auth experience 5/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Sofia Rossi Eng lead, fintech
Trusts with caveats

Too much access for my comfort

Gave it a fair shot over two weeks. Nice to use something maintained by Miro rather than a random fork. Sign-in flow was painless and I never had to paste a key into a config file.

Used for Turning chat threads into tasks

  • Setup & docs 2/5
  • Auth experience 3/5
  • Reliability 1/5
  • Maintainer responsiveness 3/5
Elif Yilmaz Freelance developer
Trusts with caveats Recommends

Does what it says, no drama

Simple to set up in Cursor, simple to reason about. Auth is handled properly, and revoking access later was one click. I would use it in prod, but only with a human approving writes.

Used for Drafting announcements

  • Setup & docs 4/5
  • Auth experience 5/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Kenji Watanabe Solo founder
Trusts in production Recommends

Trustworthy enough for real work

I use this almost daily. Being official from Miro counts for a lot when I pitch it to security. Good choice if you need Miro in your agent.

Used for Summarising channels I missed

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Ben Carter Security engineer
Trusts in production Recommends

Quietly reliable

Of the Miro integrations I tried, this one is the most predictable. Sign-in flow was painless and I never had to paste a key into a config file. Nice to use something maintained by Miro rather than a random fork. Good choice if you need Miro in your agent.

Used for Keeping project boards up to date

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Keiko Mori Team lead
Trusts in production Recommends

The Miro integration I wanted

Set this up for our team after comparing a few options. I like that access goes through a proper sign-in instead of a long-lived secret on disk. It is in our production agent and I sleep fine.

Used for Posting daily standup summaries

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 5/5
  • Maintainer responsiveness 4/5
Eva Novak Developer, healthtech
Trusts with caveats

Solid core, fiddly setup

Mostly reliable, with the odd timeout. Scoped the token to just what the agent needs and it respected that. Fine in production if you sandbox it.

Used for Meeting prep from shared docs

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Nina Hoffmann ML engineer
Would not trust in production

OK for read-only work

Some tools are great, a couple feel half finished. Being official from Miro counts for a lot when I pitch it to security. Not something I would put in production yet.

Used for Summarising channels I missed

  • Setup & docs 3/5
  • Auth experience 3/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Leah Cohen Product manager
Trusts in production Recommends

Exactly what I needed from Miro

Been running this for about a month now. You can tell it is actively maintained, the rough edges keep getting fixed. Scoped the token to just what the agent needs and it respected that.

Used for Drafting announcements

  • Setup & docs 3/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 5/5
Jakub Nowak Senior developer
Trusts with caveats Recommends

Surprisingly polished

Hooked Miro MCP Server into Claude Code and it worked on the first try. Scoped the token to just what the agent needs and it respected that. Worth it, just do not skip the hardening steps.

Used for Meeting prep from shared docs

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 4/5
  • Maintainer responsiveness 3/5

Write a review

Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.

How was it overall?

Would you trust it in production?
Would you recommend it to another team?

Score the details

Setup & docs
Auth experience
Reliability
Maintainer responsiveness

Tell other teams how it went

About you