
Security News
npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.
claude-trello-cli
Advanced tools
CLI for Claude Trello Bridge — point Claude Code at a Trello board and work through tasks from your terminal
Point Claude Code at a Trello board and work through tasks from your terminal. Claude reads your cards and checklists, makes the code changes, and checks items off on Trello as it goes.
npx claude-trello-cli register # create an account (or `login` if you have one)
npx claude-trello-cli setup # connect Trello + save your Anthropic API key
cd ~/my-project
npx claude-trello-cli run # pick a board and start working
Everything happens in your terminal — no web app required.
$ npx claude-trello-cli run
? Select a board:
❯ My Project Board
Side Project
My Project Board
─────────────────
To Do (3 cards):
• Fix authentication bug [0/4]
• Add dark mode support [0/3]
• Update API docs [0/2]
In Progress (1 card):
• Refactor API layer [1/5]
Done (2 cards) [skipped]
Working directory: /home/you/my-project
? Start Claude Code session? (4 active cards) Yes
✓ Credentials loaded
Starting Claude Code session...
Session initialized (model: claude-sonnet-4-20250514)
I'll start by working on "Fix authentication bug"...
[Read]
[Edit]
✓ Checked item on Trello
✓ Checked item on Trello
✓ Moved card to Done
Moving on to "Add dark mode support"...
Run instantly with npx (no install needed):
npx claude-trello-cli login
Or install globally for a shorter command:
npm install -g claude-trello-cli
claude-trello login
claude-trello run
setupclaude-trello-cli registerCreate a new account. You'll be prompted for your name, email, and password.
npx claude-trello-cli register
npx claude-trello-cli register --server https://your-self-hosted-instance.com
| Flag | Description |
|---|---|
-s, --server <url> | Server URL (default: https://ct.joshualevine.me) |
claude-trello-cli loginSign in with your email and password. Your session is stored at ~/.config/claude-trello/config.json with restricted file permissions.
npx claude-trello-cli login
npx claude-trello-cli login --server https://your-app.vercel.app
| Flag | Description |
|---|---|
-s, --server <url> | Server URL (default: https://ct.joshualevine.me) |
claude-trello-cli setupInteractive wizard that walks you through connecting Trello and saving your Anthropic API key. Opens your browser for Trello authorization and polls until complete.
npx claude-trello-cli setup
claude-trello-cli runThe main command. Select a board interactively, review the cards, and launch a Claude Code session.
npx claude-trello-cli run
npx claude-trello-cli run --board 60d5e2a3f1a2b40017c3d4e5
npx claude-trello-cli run --dir ~/projects/my-api
npx claude-trello-cli run --message "Check the development branch for comparison"
Without --message, you'll be prompted interactively before the session starts. Press Enter to skip.
| Flag | Description |
|---|---|
-b, --board <id> | Board ID — skip interactive selection |
-d, --dir <path> | Working directory (default: current directory) |
-m, --message <text> | Initial instructions for Claude (e.g. "focus on API cards first") |
claude-trello-cli boardsList all your Trello boards with their IDs. Useful for grabbing a board ID to pass to run --board.
npx claude-trello-cli boards
# Your Trello Boards (3):
#
# My Project Board 60d5e2a3f1a2b40017c3d4e5
# Side Project 507f1f77bcf86cd799439011
# Personal Tasks 612a3b4c5d6e7f8a9b0c1d2e
claude-trello-cli statusCheck your auth and integration status.
npx claude-trello-cli status
# Claude Trello Bridge — Status
#
# Server: https://ct.joshualevine.me
# Auth: Signed in as Your Name
# Trello: Connected
# API Key: Configured
#
# Ready to go! Run `claude-trello run` to start.
claude-trello-cli logoutClear your stored session.
npx claude-trello-cli logout
Your Terminal Web App Server Trello API
│ │ │
│ 1. login (email/password) │ │
│──────────────────────────────>│ │
│ session cookie │ │
│<──────────────────────────────│ │
│ │ │
│ 2. run → fetch boards │ GET /members/me/boards │
│──────────────────────────────>│─────────────────────────>│
│ board list │ boards │
│<──────────────────────────────│<─────────────────────────│
│ │ │
│ 3. fetch cards + credentials │ │
│──────────────────────────────>│ │
│ cards, API key, token │ │
│<──────────────────────────────│ │
│ │ │
│ 4. Launch Claude Code locally │
│ ┌─────────────────────┐ │
│ │ Claude reads/edits │ │
│ │ your codebase │ │
│ │ │ 5. check_trello_item │
│ │ Task complete ──────│────────────────────────────────>│
│ │ │ 6. move_card_to_done │
│ │ Card complete ──────│────────────────────────────────>│
│ └─────────────────────┘ │
600 — owner-only read/write)acceptEdits permission mode — it can read and edit files but requires approval for shell commands"Session expired" error
Run npx claude-trello-cli login again to re-authenticate.
"Trello not connected" or "API key not configured" The CLI uses your web app account's integrations. Go to the web dashboard, complete onboarding (connect Trello and save your Anthropic API key), then try the CLI again.
Can I use the CLI without the web server running? No — the CLI authenticates against and fetches data from the web app. You need either a local dev server or a deployed instance running.
Claude asked me a question — what do I do?
Sometimes Claude needs clarification. The question appears in yellow with a > prompt. Type your answer and press Enter — Claude will continue working.
MIT
FAQs
CLI for Claude Trello Bridge — point Claude Code at a Trello board and work through tasks from your terminal
We found that claude-trello-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.

Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.