# TRELLO_GET_CARDS_MEMBERS_BY_ID_CARD

Retrieves members of a Trello card, identified by its ID or shortLink, allowing customization of which member fields are returned.

Agent View of the PolicyLayer registry record for `TRELLO_GET_CARDS_MEMBERS_BY_ID_CARD`. HTML page: https://policylayer.com/tools/trello/trello-get-cards-members-by-id-card

## Facts

- Tool: `TRELLO_GET_CARDS_MEMBERS_BY_ID_CARD`
- Server: Trello (`mcp-server-trello`) — https://policylayer.com/tools/trello.md
- Install: `npx -y mcp-server-trello`
- Homepage: git+https://github.com/Infall-Insurance/mcp-server-trello.git
- Risk category: Read (Low risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 2
- Recommended policy verdict: Allowed

## Parameters

| Parameter | Type | Required | Description |
| --- | --- | --- | --- |
| `fields` | string | no | Comma-separated list of member fields to return (e.g., `avatarHash`, `fullName`, `username`), or 'all'. Valid fields: `avatarHash`, `bio`, `bioData`, `confirmed |
| `idCard` | string | no | The ID or shortLink of the Trello card from which to retrieve members. Card IDs are typically 24-character hexadecimal strings. |

Parameters from the server's own tool schema.

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "TRELLO_GET_CARDS_MEMBERS_BY_ID_CARD",
    "arguments": {}
  }
}
```

## Why TRELLO_GET_CARDS_MEMBERS_BY_ID_CARD is rated Low

This tool performs a read-only query operation on Trello data (listing card members). It has no side effects, does not modify or delete data, and cannot trigger external actions. The blast radius if misused is minimal—an attacker could enumerate membership information but cannot cause irreversible harm or escalate privileges through this tool alone.

From the tool's own definition: "Tool name contains 'GET' and description states 'Retrieves members' with no mention of modification, creation, or deletion. The action is purely informational—querying which members are associated with a card."

## Use case

AI agents call TRELLO_GET_CARDS_MEMBERS_BY_ID_CARD to retrieve information from Trello without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

## Recommended policy (PolicyLayer)

Verdict: **Allowed**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Trello:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "TRELLO_GET_CARDS_MEMBERS_BY_ID_CARD": {}
  }
}
```

## Other tools on Trello (199)

- `TRELLO_ADD_LISTS_ARCHIVE_ALL_CARDS_BY_ID_LIST` — Destructive — https://policylayer.com/tools/trello/trello-add-lists-archive-all-cards-by-id-list.md
- `TRELLO_ADD_LISTS_MOVE_ALL_CARDS_BY_ID_LIST` — Destructive — https://policylayer.com/tools/trello/trello-add-lists-move-all-cards-by-id-list.md
- `TRELLO_ADD_NOTIFICATIONS_ALL_READ` — Destructive — https://policylayer.com/tools/trello/trello-add-notifications-all-read.md
- `TRELLO_CONVERT_CHECKLIST_ITEM_TO_CARD` — Destructive — https://policylayer.com/tools/trello/trello-convert-checklist-item-to-card.md
- `TRELLO_DELETE_ACTIONS_BY_ID_ACTION` — Destructive — https://policylayer.com/tools/trello/trello-delete-actions-by-id-action.md
- `TRELLO_DELETE_BOARDS_MEMBERS_BY_ID_BOARD_BY_ID_MEMBER` — Destructive — https://policylayer.com/tools/trello/trello-delete-boards-members-by-id-board-by-id-member.md
- `TRELLO_DELETE_BOARDS_POWER_UPS_BY_ID_BOARD_BY_POWER_UP` — Destructive — https://policylayer.com/tools/trello/trello-delete-boards-power-ups-by-id-board-by-power-up.md
- `TRELLO_DELETE_CARDS_ACTIONS_COMMENTS_BY_ID_CARD_BY_ID_ACTION` — Destructive — https://policylayer.com/tools/trello/trello-delete-cards-actions-comments-by-id-card-by-id-action.md
- `TRELLO_DELETE_CARDS_ATTACHMENTS_BY_ID_CARD_BY_ID_ATTACHMENT` — Destructive — https://policylayer.com/tools/trello/trello-delete-cards-attachments-by-id-card-by-id-attachment.md
- `TRELLO_DELETE_CARDS_BY_ID_CARD` — Destructive — https://policylayer.com/tools/trello/trello-delete-cards-by-id-card.md
- `TRELLO_DELETE_CARDS_CHECKLISTS_BY_ID_CARD_BY_ID_CHECKLIST` — Destructive — https://policylayer.com/tools/trello/trello-delete-cards-checklists-by-id-card-by-id-checklist.md
- `TRELLO_DELETE_CARDS_ID_MEMBERS_BY_ID_CARD_BY_ID_MEMBER` — Destructive — https://policylayer.com/tools/trello/trello-delete-cards-id-members-by-id-card-by-id-member.md
- `TRELLO_DELETE_CARDS_LABELS_BY_ID_CARD_BY_COLOR` — Destructive — https://policylayer.com/tools/trello/trello-delete-cards-labels-by-id-card-by-color.md
- `TRELLO_DELETE_CARDS_MEMBERS_VOTED_BY_ID_CARD_BY_ID_MEMBER` — Destructive — https://policylayer.com/tools/trello/trello-delete-cards-members-voted-by-id-card-by-id-member.md
- `TRELLO_DELETE_CARDS_STICKERS_BY_ID_CARD_BY_ID_STICKER` — Destructive — https://policylayer.com/tools/trello/trello-delete-cards-stickers-by-id-card-by-id-sticker.md
- `TRELLO_DELETE_CHECKLIST_ITEM` — Destructive — https://policylayer.com/tools/trello/trello-delete-checklist-item.md
- `TRELLO_DELETE_CHECKLISTS_BY_ID_CHECKLIST` — Destructive — https://policylayer.com/tools/trello/trello-delete-checklists-by-id-checklist.md
- `TRELLO_DELETE_LABELS_BY_ID_LABEL` — Destructive — https://policylayer.com/tools/trello/trello-delete-labels-by-id-label.md
- `TRELLO_DELETE_MEMBER_BOARD_BACKGROUND` — Destructive — https://policylayer.com/tools/trello/trello-delete-member-board-background.md
- `TRELLO_DELETE_MEMBER_CUSTOM_STICKER` — Destructive — https://policylayer.com/tools/trello/trello-delete-member-custom-sticker.md
- `TRELLO_DELETE_MEMBER_SAVED_SEARCH` — Destructive — https://policylayer.com/tools/trello/trello-delete-member-saved-search.md
- `TRELLO_DELETE_MEMBERS_BOARD_STARS_BY_ID_MEMBER_BY_ID_BOARD_STAR` — Destructive — https://policylayer.com/tools/trello/trello-delete-members-board-stars-by-id-member-by-id-board-star.md
- `TRELLO_DELETE_ORG_ASSOCIATED_DOMAIN` — Destructive — https://policylayer.com/tools/trello/trello-delete-org-associated-domain.md
- `TRELLO_DELETE_ORGANIZATIONS_BY_ID_ORG` — Destructive — https://policylayer.com/tools/trello/trello-delete-organizations-by-id-org.md
- `TRELLO_DELETE_ORGANIZATIONS_LOGO_BY_ID_ORG` — Destructive — https://policylayer.com/tools/trello/trello-delete-organizations-logo-by-id-org.md
- `TRELLO_DELETE_ORGANIZATIONS_MEMBERS_ALL_BY_ID_ORG_BY_ID_MEMBER` — Destructive — https://policylayer.com/tools/trello/trello-delete-organizations-members-all-by-id-org-by-id-member.md
- `TRELLO_DELETE_ORGANIZATIONS_MEMBERS_BY_ID_ORG_BY_ID_MEMBER` — Destructive — https://policylayer.com/tools/trello/trello-delete-organizations-members-by-id-org-by-id-member.md
- `TRELLO_DELETE_ORGANIZATIONS_PREFS_ORG_INVITE_RESTRICT_BY_ID_ORG` — Destructive — https://policylayer.com/tools/trello/trello-delete-organizations-prefs-org-invite-restrict-by-id-org.md
- `TRELLO_DELETE_TOKENS_BY_TOKEN` — Destructive — https://policylayer.com/tools/trello/trello-delete-tokens-by-token.md
- `TRELLO_DELETE_TOKENS_WEBHOOKS_BY_TOKEN_BY_ID_WEBHOOK` — Destructive — https://policylayer.com/tools/trello/trello-delete-tokens-webhooks-by-token-by-id-webhook.md
- …and 169 more: https://policylayer.com/tools/trello.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=trello · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/trello