by markrai
Self-hosted kanban & project management with shareable boards, voice commands, sticky-notes, multi-language and MCP support
# Add to your Claude Code skills
git clone https://github.com/markrai/scrumboyGuides for using mcp servers skills like scrumboy.
Last scanned: 5/30/2026
{
"issues": [],
"status": "PASSED",
"scannedAt": "2026-05-30T14:59:57.136Z",
"npmAuditRan": true,
"pipAuditRan": true
}scrumboy is an open-source mcp servers skill for AI coding assistants such as Claude Code, Codex CLI, and ChatGPT, built by markrai. Self-hosted kanban & project management with shareable boards, voice commands, sticky-notes, multi-language and MCP support. It has 429 GitHub stars.
Yes. scrumboy passed SkillsLLM's automated security scan — a dependency vulnerability audit plus prompt-injection heuristics — with no high-severity issues. You can read the full report in the Security Report section on this page.
Clone the repository with "git clone https://github.com/markrai/scrumboy" and add it to your Claude Code skills directory (see the Installation section above).
scrumboy is primarily written in Go. It is open-source under markrai on GitHub, so you can review or fork the full source.
Yes. SkillsLLM lists many other MCP Servers skills you can browse and compare side by side. Open the MCP Servers category from the badge at the top of this page, or use the Related Skills and comparison links further down to weigh scrumboy against similar tools.
No comments yet. Be the first to share your thoughts!
Top skills in this category by stars
⚠️ Third-Party Software Notice
This skill is third-party open-source software developed and hosted independently on GitHub. SkillsLLM is an informational directory and does not control or maintain the underlying repository.
Any security checks, ratings, or warnings displayed by SkillsLLM are automated and limited in scope. They do not constitute a security certification or guarantee that the software is safe, error-free, or free from malicious code, vulnerabilities, compromised dependencies, or prompt-injection risks.
Review the source code, permissions, dependencies, and configuration before installing or running any third-party skill. Use is at your own risk. To the maximum extent permitted by applicable law, SkillsLLM is not liable for losses arising from third-party software.
Runs in seconds. No setup required.
No .env file, TLS certificates, or encryption key are required to start the app.
Scrumboy creates runtime data under ./data by default. The default SQLite database is ./data/app.db, and SQLite may also create app.db-wal and app.db-shm while the server is running.
Scrumboy is distributed as a container image on GitHub Container Registry:
ghcr.io/markrai/scrumboy:latest
Published images are multi-arch for linux/amd64 and linux/arm64; Docker pulls the variant that matches your host.
Docker run (named volume for persistent SQLite data under /data):
docker run -d \
--name scrumboy \
-p 127.0.0.1:8080:8080 \
-v scrumboy-data:/data \
ghcr.io/markrai/scrumboy:latest
The image defaults to DATA_DIR=/data and SQLITE_PATH=/data/app.db. Mount a volume or host directory on /data so the database and file-backed uploads (for example user-wallpapers/) survive container recreation. Back up the whole /data volume (or at least app.db plus WAL/SHM sidecars and user-wallpapers/); see [docs/diagrams/scrumboy_deployment_ops.md](docs/diagrams/scrumboy_deployment_ops.md).
Docker Compose (minimal example; save as docker-compose.yml):
services:
scrumboy:
image: ghcr.io/markrai/scrumboy:latest
container_name: scrumboy
ports:
- "127.0.0.1:8080:8080"
volumes:
- ./data:/data
restart: unless-stopped
docker compose up -d
Open http://localhost:8080.
To build from a local clone instead of pulling the published image:
docker compose up --build
The repository's docker-compose.yml uses build: . and maps ./data to /data.
Open http://localhost:8080.
go run ./cmd/scrumboy
Open http://localhost:8080.
Windows users can download scrumboy-*-windows-amd64.exe from GitHub Releases. The matching .sha256 file is published beside it for checksum verification. Release builds also publish a matching .intoto.jsonl provenance bundle.
The .sha256 file checks file integrity. The attestation verifies the artifact's signed build provenance and expected repository identity:
gh attestation verify scrumboy-<tag>-windows-amd64.exe -R markrai/scrumboy
Put the exe in a dedicated writable folder before running it, for example %USERPROFILE%\Scrumboy. The exe starts a local Scrumboy server; open http://localhost:8080 after it starts.
Simplicity of a light Kanban, with the power of structured systems: Roles, sprints, audit trails & customizable workflows - without being locked into SaaS tools. Centered around the self-hosted & privacy-focused community, as well as small to medium-sized teams & solo builders
SCRUMBOY_MODE=full, default): Auth can be enabled. First user via bootstrap; then login/session. Backup/export, tags, multi-project. Projects can be user-owned (project_members) or anonymous (shareable by URL): /anon (or /temp) creates a throwaway board and redirects to /{slug}.SCRUMBOY_MODE=anonymous): No auth. Landing at /; live deployment at: https://scrumboy.com/todo.assigned). For your own automations, not in-app or browser notifications. See Integrations.SCRUMBOY_ENCRYPTION_KEY is set.SCRUMBOY_ENCRYPTION_KEY + SCRUMBOY_PUBLIC_BASE_URL): see docs/smtp.md.audit_events table; todo/member/project/link actions logged (see docs/audit-trail.md).DATA_DIR disaster-recovery backup (uploaded wallpapers and audit_events are omitted); see [docs/diagrams/scrumboy_deployment_ops.md](docs/diagrams/scrumboy_deployment_ops.md).blocks in preview only (seeFAQ.md, docs/markdown-and-mermaid.md`)..env files.export SCRUMBOY_ENCRYPTION_KEY=...).win_run_full.bat and win_run_anonymous.bat manage data/scrumboy.env automatically for local convenience.SCRUMBOY_ENCRYPTION_KEY, then data/scrumboy.env, then legacy root scrumboy.env.SCRUMBOY_ENCRYPTION_KEY=<base64-32-byte-key>.internal/config/config.go. ResolveDataDir uses DATA_DIR and SQLITE_PATH as documented there. None of these are required for basic startup.| Variable | Default |
|---|