Todoist MCP Server
Todoist task management for AI agents via MCP-compliant HTTP services.
Data last scanned today · Reviewed today
Overview
This repository provides tools that enable LLMs to access and modify Todoist accounts, facilitating task lookup and creation. It functions either as a standalone MCP server or as a library for direct integration into custom AI conversational interfaces using the official Todoist SDK. The server supports various deployment methods, including direct execution via npx or configuration within AI clients like Claude Desktop, Cursor, and VS Code. It relies on a remote HTTP service for connectivity and utilizes OAuth for user authentication.
Our verdict
With a security score of 45/100, this server is currently classified as high-risk. This assessment stems from the fact that it is community-maintained rather than developed by the official vendor, and critical security components like OAuth support and read-only mode functionality have not yet been editorially reviewed. Users should exercise caution and review the codebase before granting it access to their personal Todoist data.
- Supports seven direct dependencies reducing supply-chain surface
- Maintained by 29 contributors decreasing bus-factor risk
- Provides documented examples for Vercel AI SDK integration
- Last commit activity recorded within the last two days
- Community-maintained project lacking official vendor oversight
- OAuth implementation remains pending an editorial security review
- Read-only mode effectiveness is not yet verified
- Missing a configured homepage link in repository metadata
Setup
{
"mcpServers": {
"todoist-mcp": {
"args": [
"-y",
"@doist/todoist-mcp"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| findTasksByDate | Helper to wrap tools with the client to find tasks by date. | low |
| addTasks | Helper to wrap tools with the client to add tasks. | medium |
| user-info | Confirms which Todoist account the current TODOIST_API_KEY is connected to. | low |
| add-projects | Creates new projects. | medium |
| update-projects | Modifies existing projects. | medium |
| delete-object | Universal deletion handling all entity types. | high |
| add-tasks | Creates multiple tasks at once. | medium |
| complete-tasks | Completes tasks. | medium |
| search | Follows the OpenAI MCP specification to search for items. | low |
| fetch | Follows the OpenAI MCP specification to fetch items. | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf | ||||
| ChatGPT |
Frequently asked questions
›Do I need to host the server myself?
No, you can connect directly to the Todoist-hosted streamable HTTP service at https://ai.todoist.net/mcp.
›How do I authenticate with my Todoist account?
For most MCP clients, authentication is handled via an OAuth flow that triggers during the first time you attempt to use a Todoist tool.
›Can I use these tools outside of an MCP server environment?
Yes, you can install the library as an npm dependency and import the tools directly into your own projects, such as those using Vercel's AI SDK.
›Are there visual UI components available for the AI chat interface?
Yes, the project includes support for MCP Apps, which are interactive widgets that provide rich visual representations of task lists and other data.
›Does this server support the OpenAI MCP specification?
Yes, the server includes specific search and fetch tools that return JSON-encoded results designed to be compatible with the OpenAI MCP protocol.
›What is the requirement for running tools locally during development?
You must provide a valid TODOIST_API_KEY in your .env file, which can be configured by running the project's setup script.
Alternatives
Changelog
Badge
Maintain this server? Add the live badge to your README.