Self-host scrumboy
v3.40.0Kanban project boards with sprints, SSO and AI-agent APIs
docker run -d --name scrumboy -p 127.0.0.1:8080:8080 -v scrumboy-data:/data ghcr.io/markrai/scrumboy:latest- Stars
- 448
- Port
- 8080 (HTTP(S) web UI and API; the server listens on `:8080` by default (BIND_ADDR).)
ghcr.io/markrai/scrumboy
What is scrumboy?
Scrumboy is a self-hosted project-management and issue-tracking server for solo developers and small teams, written in Go and licensed under AGPL v3. Projects get customizable workflow columns with a dedicated done lane, sprints, priority tiers, tags, dashboards with workload and flow analytics, an agenda fed by ICS calendar feeds, and a freeform sticky-note wall. Collaboration is realtime, and boards can be shared anonymously, published read-only, or exported and re-imported as JSON; existing Trello boards can be migrated from a JSON export with a preview. User login uses a local password with optional TOTP 2FA, and optional OIDC/SSO, SMTP email notifications, password-reset mail, TLS and Web Push are all configuration-driven extras. Automation is first-class: REST API tokens, outbound webhooks, and an MCP JSON-RPC endpoint at /mcp/rpc that Claude Code, Cursor and similar clients can use. Run it with the published GHCR image, docker compose, a go run from source, or a downloaded Windows/macOS executable; everything persists in an embedded SQLite database under ./data, and no environment variables are required to start. An experimental native Android client (Capacitor) must be built from source, and there is no audit-log screen in the UI yet — audit history is queried in the database directly.
Should you self-host scrumboy?
scrumboy scores 52/100 on selfhost.directory (how scoring works) and ranks #28 of 45 in Project Management. It has 448 GitHub stars.
It shipped 11 stable releases in the past year. The latest, v3.40.0, came out on 23 October 2026. New versions land roughly every 4 days.
Setup is easy: most people get it running in one sitting. An official Docker image is available. It is AGPL-3.0-licensed and written mostly in Go.
Its closest alternative on selfhost.directory is Plane (86/100, 61 588 stars). It scores higher overall, so compare the two before you pick. See scrumboy vs Plane side by side.
Features
- Backup & RestoreJSON export omits uploaded wallpapers and audit_events, so it is not a complete data-directory backup.
- Kanban Boards
- MCP server for AI agents
- Real-Time Collaboration
- REST API
- Sprints
- Trello Import
- Webhooks
- Workload and flow analytics
scrumboy README
FAQ
How does auditing work, and where can I see it?
Scrumboy appends actions on todos, members, projects and links to an append-only audit_events table automatically, with no setting to enable. There is no audit screen in the web UI or public API yet, so history is reviewed by querying the SQLite database directly.
How do I turn on email notifications?
Email notifications reuse the password-reset SMTP config but do not need the encryption key; once available, each user opts in per category under Settings → Customization. Nothing is emailed unless the user's master toggle and the relevant category are on.
Do I need to configure SMTP? What happens if I don't?
No — SMTP is optional and only powers self-service password-reset email; without it admins can still generate reset links manually and share them out of band. Enabling user reset mail requires SMTP host and From, the encryption key, a valid public base URL, and local auth.
How do I generate SCRUMBOY_ENCRYPTION_KEY?
Generate a base64-encoded 32-byte secret yourself, for example with `openssl rand -base64 32`, and inject it via your process manager, Compose or systemd unit. It is needed for 2FA, password-reset tokens and encrypted ICS feed URLs, and must be backed up with the database.
What are VAPID keys, and do I need them?
They are optional server credentials for Web Push background notifications about todo assignments; boards, live updates and normal use work without them. To enable push, set both SCRUMBOY_VAPID_PUBLIC_KEY and SCRUMBOY_VAPID_PRIVATE_KEY in full mode.
Can Scrumboy MCP OAuth work with OIDC-only login?
Yes — after the initial owner finishes one-time setup in the main app, the OAuth authorization page can continue through the configured SSO and return to the pending consent request.
How do I use Scrumboy with Claude or other MCP clients?
Point native MCP clients at https://YOUR_HOST/mcp/rpc, which speaks JSON-RPC 2.0 over Streamable HTTP with OAuth or tokens. Scrumboy is HTTP-only — it does not support stdio MCP and hosts no cloud relay.
Are tag colors personal, or shared with the team?
Personal tags store a color per user, so teammates can pick different colors for the same tag name. Tags belonging to a specific board have one color everyone on that board sees.
What does the done lane mean for dashboard stats?
Each project marks exactly one workflow lane as done; entering it records done_at, which drives throughput, lead time and sprint completion. Todos in Review or Testing count as WIP until they reach that lane.
How do I edit several todos at once?
Ctrl/⌘-click cards (or Shift-click for a range, or the touch Select mode) and use the bulk edit bar; each field is changed only when its own checkbox is turned on. Viewers cannot multi-select.
How do I enable Mermaid diagrams in my notes?
Mermaid is on by default but only works while Markdown preview is on; set SCRUMBOY_MERMAID_NOTES_ENABLED=0 to disable it alone. Diagrams render from fenced mermaid blocks in the preview tab only.
How do I enable Markdown in my notes?
Markdown preview is on by default; set SCRUMBOY_MARKDOWN_NOTES_ENABLED=0 on the server and restart to turn it off, which also disables Mermaid diagrams and inline images.
What happens if the SSO provider is unavailable?
Existing sessions keep working until they expire, while new SSO sign-ins fail; a dual-authentication owner can use the local login form. Otherwise a host operator stops Scrumboy, backs up the database and runs the offline `scrumboy recover-owner` break-glass command.
Can one account use both a Scrumboy password and SSO?
Yes — accounts can be local-only, SSO-only or dual-authentication, and a local user can connect SSO after confirming their password (and 2FA). SSO login matches accounts only by provider issuer and subject, so a matching email never silently links identities.
More in Issue Tracking
taiga-dockerSelf-host the Taiga project management platform with this official Docker Compose stack: back, front, realtime events, PostgreSQL, RabbitMQ, served on port 9000.
taskview-communitySelf-hosted, source-available project and task manager for software teams: Kanban, dependency graphs, RBAC, SSO, time tracking and an MCP server.- TracTrac is an enhanced wiki and issue tracking system for software development projects, offering integrated wiki, version control (Subversion/Git), and ticket management in a minimalistic web-based interface.
TraqSelf-hosted PHP tool for managing projects, issues, milestones, and sprints with a built-in wiki, REST API, and plugin system.
WindshiftWindshift is a self-hosted, open-source Jira alternative with boards, sprints, workflows, service management, test management, and time tracking on your infrastructure.
BugzillaOpen-source self-hosted web bug tracker from the Mozilla community, with advanced search, time tracking, custom workflows, email-in bug filing and LDAP login.
crikketSelf-hosted bug reporting tool capturing screenshots, video, console logs, and network requests with shareable links and team workspaces. Alternative to jam.dev.
fizzyA kanban tool for tracking issues and ideas from 37signals — entirely free hosted, or self-hosted via the ONCE installer, a Docker image, or Kamal.
GitLab-CESelf-hosted, open-source DevOps platform for Git repositories, merge requests, CI/CD pipelines, issue boards and wikis, with free CE and paid Premium/Ultimate tiers.
It's a PlanOpen-source, self-hosted issue tracker where AI agents work alongside humans on shared boards. Replaces Linear, Jira, Plane with built-in AI, multiple views, initiatives.
KaneoOpen-source, self-hosted project tracker for teams: kanban boards, Gantt and calendar views, a backlog, time tracking, and free single sign-on via OAuth or OIDC.
MantisBTMantis Bug Tracker is a self-hosted, open-source issue tracker in PHP with role-based access, customizable workflows, LDAP auth, and REST/SOAP APIs.
0 comments