API & MCP server

Scrumbo has a JSON REST API and a Model Context Protocol (MCP) server, so you (or an AI assistant such as Claude) can read and manage boards and stories from outside the web app.

Authentication

Every request needs a personal API key. Create one on your account page — it is shown once, so copy it right away.

Send it as a bearer token on every request:

Authorization: Bearer sbo_your_key_here

REST API

The API is mounted at https://scrumbo.com/api/v1 and returns JSON. A key has exactly your access: it can only reach projects and boards you own, are a member of, or administer.

Method	Path	Description	Access needed
GET	`/projects`	List projects you can access	Any key
GET	`/projects/:token/boards`	List boards in a project	Viewer
GET	`/boards/:boardid`	Get a board with its statuses and stories	Viewer
GET	`/boards/:boardid/statuses`	List a board's statuses	Viewer
GET	`/boards/:boardid/stories`	List stories on a board, optionally filtered by status or assignee	Viewer
GET	`/boards/:boardid/stories/:storyid`	Get a single story	Viewer
POST	`/boards/:boardid/stories`	Create a story	Editor
PATCH	`/boards/:boardid/stories/:storyid`	Update a story's fields	Editor
POST	`/boards/:boardid/stories/:storyid/status`	Change a story's status	Editor or contributor
DELETE	`/boards/:boardid/stories/:storyid`	Delete a story	Editor
POST	`/boards/:boardid/stories/:storyid/comments`	Add a comment to a story	Commenter

"Editor or contributor" also covers developers, who may change status but not edit story text.

Example:

curl https://scrumbo.com/api/v1/boards/123/stories \
  -H "Authorization: Bearer sbo_your_key_here"

curl -X POST https://scrumbo.com/api/v1/boards/123/stories \
  -H "Authorization: Bearer sbo_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{"subject": "New story", "story": "Details go here"}'

MCP server

The mcp/ folder in the Scrumbo source ships a standalone MCP server that wraps the REST API as tools, so an MCP-aware assistant such as Claude Desktop or Claude Code can use your boards directly.

Install its dependencies once: cd mcp && npm install
Create an API key on your account page and copy it.
Register the server with your MCP client, for example:

{
  "mcpServers": {
    "scrumbo": {
      "command": "node",
      "args": ["/absolute/path/to/scrumbo.com/node/mcp/index.js"],
      "env": {
        "SCRUMBO_API_KEY": "sbo_your_key_here",
        "SCRUMBO_API_URL": "https://scrumbo.com/api/v1"
      }
    }
  }
}

Tools:

Description	Access needed
`list_projects`	Any key
`list_boards`, `get_board`, `list_stories`, `get_story`, `list_statuses`	Viewer
`add_comment`	Commenter
`create_story`, `update_story`, `move_story`, `delete_story`	Editor

Keep in mind

A key has exactly your access — anyone holding it can act as you within that scope, so treat it like a password.
Revoke a key from your account page at any time; anything using it stops working immediately.
The MCP server itself holds no database access — it is a thin HTTP client that is only ever as privileged as the key you give it.