Verified

ClickUp MCP Server

ClickUp task and project management tools for AI-driven agentic workflows.

Data last scanned yesterday · Reviewed 2 months ago

2025 dangerous tools150 tools49DockerfileNOASSERTION

Overview

This MCP server provides an interface to interact with ClickUp objects such as tasks, sprints, documents, and comments. It allows AI models to perform management actions within ClickUp workspaces through natural language processing.

Our verdict

This server receives a high-risk security score of 20/100, primarily due to the lack of any authentication mechanism and the absence of a read-only mode, which grants full write access to anyone with the configuration. It is community-maintained rather than official, carries a NOASSERTION license, and is not recommended for environments where sensitive data exposure or unauthorized task manipulation poses a significant operational risk.

  • Supports comprehensive management of tasks, sprints, and documents
  • Limited supply-chain footprint with 12 direct dependencies
  • Maintains active repository status with recent commits
  • High security risk due to missing authentication methods
  • Lacks a read-only mode for safe data exploration
  • Non-standard licensing labeled as NOASSERTION

Setup

Claude Desktop
{
  "mcpServers": {
    "clickup-mcp-server": {
      "args": [
        "-y",
        "@taazkareem/clickup-mcp-server"
      ],
      "command": "npx"
    }
  }
}

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.

  • No read-only mode — running this grants full read/write access.
  • No built-in authentication — anyone with access to this config can invoke every tool it exposes.

Tools

ToolDescriptionRisk
get_workspaceGet workspace structure and metadata (hierarchy, members, plan, seats, shared items, custom task types)low
get_workspace_seatsGet member and guest seat utilization (used, total, available)low
get_workspace_planGet plan details for the workspace (plan_name, plan_id)low
get_audit_logsRetrieve workspace audit logs (Enterprise only)low
create_taskCreate a taskmedium
get_taskGet single task detailslow
update_taskModify task propertiesmedium
move_taskMove task to new listmedium
duplicate_taskDuplicate a taskmedium
delete_taskRemove taskhigh

Compatibility

ClientLocalDockerRemoteRead-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

What authentication methods does the ClickUp MCP server support?

The server supports OAuth 2.1 as per the MCP specification and is also backwards compatible with API Key and Team ID authentication.

Can I use this server to manage multiple ClickUp workspaces?

Yes, the server features multi-account support, allowing you to manage multiple authorized workspaces within a single session.

What kind of data can I interact with using this server?

The server provides tools for managing tasks, checklists, sprints, comments, tags, spaces, lists, folders, files, docs, chat, and time tracking using natural language.

Alternatives

Badge

ClickUp MCP Server security score, rated on RepoAI

Maintain this server? Add the live badge to your README.