Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 5
- 4 3
- 3 1
- 2 0
- 1 0
Trust in production
- Trust it - 56%
- With caveats - 44%
- Wouldn't - 0%
100% would recommend this server
How reviewers scored it
- Setup & docs 4.6
- Auth experience 3.7
- Reliability 4.3
- Maintainer responsiveness 4.2
Why it got an A
monday.com's official MCP (MIT, TypeScript, 64 contributors). The recommended route is the hosted server at mcp.monday.com: an admin installs the monday MCP app from the marketplace, then your AI tool signs in with OAuth and can be limited to chosen workspaces. It works on all monday.com plans. The local npm server (@mondaydotcomorg/monday-api-mcp) uses a personal API token and has a --read-only flag. Tools create and change items, boards, columns, groups, updates and forms, and delete_item removes items for good. The beta dynamic API tools, off by default, can run any GraphQL query or mutation. Biggest deduction: OAuth has no scopes or read-only mode, so the AI can do anything your monday.com user can; keep tool approval on, or run the local server with --read-only.
How to connect
// Cursor MCP settings (hosted server, OAuth)
{ "mcpServers": { "monday-mcp": { "url": "https://mcp.monday.com/mcp" } } }// claude_desktop_config.json (local server; add "--read-only" to args for read-only)
{ "mcpServers": { "monday-api-mcp": { "command": "npx",
"args": ["@mondaydotcomorg/monday-api-mcp@latest"],
"env": { "MONDAY_TOKEN": "your_monday_api_token" } } } }Is monday.com MCP safe?
Is monday.com MCP safe to use?
monday.com MCP grades A (strong public trust signals). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can.
Does monday.com MCP have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does monday.com MCP support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Collaboration
- A Google Drive MCP ServerOfficial Google-hosted Drive server (Developer Preview) to search, read, download, create, and copy files, with scoped OAuth.
- A Pragor Project Board MCP ServerHosted server that connects an agent to a Pragor project board to read and update messages, tasks and operations, with a per-agent token limited to its project role.
- A Slack MCP ServerOfficial hosted Slack server to search and read messages, files, and canvases, and send messages as you.
- B Asana MCPOfficial hosted Asana server to search, read, create, and update tasks and projects, with OAuth sign-in.
- B Dropbox MCP ServerOfficial hosted Dropbox server (beta) to search, read, create, move, share, and restore files, plus Paper docs and Sign requests.
Embed this badge
[](https://trustedmcp.io/servers/monday-mcp)<a href="https://trustedmcp.io/servers/monday-mcp"><img src="https://trustedmcp.io/badge/monday-mcp.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
Does what it says, no drama
I use this almost daily. Nice to use something maintained by monday.com rather than a random fork. Sign-in flow was painless and I never had to paste a key into a config file. Happy to run it in production.
Used for Drafting announcements
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Useful, with a few rough edges
Works well enough for what I need. Scoped the token to just what the agent needs and it respected that. Turned on read-only mode on day one, highly recommend doing the same. Worth it, just do not skip the hardening steps.
Used for Turning chat threads into tasks
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Quietly reliable
Clear tool names, sensible outputs, very few surprises. Read-only mode is the first thing I enable, and it covers most of what I need. Keep permissions tight and it is a good tool.
Used for Keeping project boards up to date
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Worth the five minutes to set up
Been running this for about a month now. I like that access goes through a proper sign-in instead of a long-lived secret on disk.
Used for Keeping project boards up to date
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Good defaults, good docs
Simple to set up in Cursor, simple to reason about. Updates land regularly, and nothing broke when I upgraded. Recommended, with sensible guardrails.
Used for Summarising channels I missed
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 3/5
Clean integration, sensible permissions
Set this up for our team after comparing a few options. Auth is handled properly, and revoking access later was one click.
Used for Summarising channels I missed
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 5/5
No complaints after a month
Started with it as an experiment, now it is a fixture. Sign-in flow was painless and I never had to paste a key into a config file. Would recommend without hesitation.
Used for Searching old conversations for decisions
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Our team uses it every day
Of the monday.com integrations I tried, this one is the most predictable. The OAuth flow worked first time in Claude Code. Fine in production if you sandbox it.
Used for Meeting prep from shared docs
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Solid and well behaved
Installed it on a Friday, it was part of my workflow by Monday. Scoped the token to just what the agent needs and it respected that. Used a fine-grained token with short expiry and it works fine with that. Good choice if you need monday.com in your agent.
Used for Posting daily standup summaries
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.