Skip to content

ClickUp MCP by usefulapi

by usefulapi.io · remote · no sign-in to list tools · v1.16.3 · published by io.usefulapi

Read teams, spaces, lists and tasks; create, update and comment on tasks and track time.

Deletes · 3

14 tools: 3 can delete or cancel things and 11 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http clickup https://clickup.usefulapi.io/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

14 tools

Deletes or cancels 3Claude Code: deny
  • clickup_create_taskWRITE: create a new task in a list.No findings

    Why it is in this group

    • The name "clickup_create_task" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    WRITE: create a new task in a list. `name` is required; the list is the {list_id} path param, not a body field. ClickUp REST: POST /list/{list_id}/task.

    Annotations the server declares

    • title: Create task
    • destructiveHint: true
  • clickup_create_task_commentWRITE: add a comment to a task.No findings

    Why it is in this group

    • The name "clickup_create_task_comment" says "create": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    WRITE: add a comment to a task. `comment_text` is required; the task is the {task_id} path param. ClickUp REST: POST /task/{task_id}/comment.

    Annotations the server declares

    • title: Create task comment
    • destructiveHint: true
  • clickup_update_taskWRITE: update fields on an existing task.No findings

    Why it is in this group

    • The name "clickup_update_task" says "update": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    WRITE: update fields on an existing task. Only the fields you pass are changed. ClickUp REST: PUT /task/{task_id}.

    Annotations the server declares

    • title: Update task
    • destructiveHint: true
Only reads 11Claude Code: allow
  • clickup_get_authorized_userGet the user associated with the current ClickUp API token.No findings

    Why it is in this group

    • The name "clickup_get_authorized_user" says "get": a word for reading.
    Description, as the server wrote it
    Get the user associated with the current ClickUp API token. ClickUp REST: GET /user.

    Annotations the server declares

    • title: Get authorized user
    • readOnlyHint: true
  • clickup_get_list_commentsGet the comments on a list.No findings

    Why it is in this group

    • The name "clickup_get_list_comments" says "get": a word for reading.
    Description, as the server wrote it
    Get the comments on a list. ClickUp REST: GET /list/{list_id}/comment.

    Annotations the server declares

    • title: Get list comments
    • readOnlyHint: true
  • clickup_get_taskGet a single task by id.No findings

    Why it is in this group

    • The name "clickup_get_task" says "get": a word for reading.
    Description, as the server wrote it
    Get a single task by id. ClickUp REST: GET /task/{task_id}.

    Annotations the server declares

    • title: Get task
    • readOnlyHint: true
  • clickup_get_task_commentsGet the comments on a task.No findings

    Why it is in this group

    • The name "clickup_get_task_comments" says "get": a word for reading.
    Description, as the server wrote it
    Get the comments on a task. ClickUp REST: GET /task/{task_id}/comment.

    Annotations the server declares

    • title: Get task comments
    • readOnlyHint: true
  • clickup_get_tasksGet the tasks in a list, with optional filters and pagination.No findings

    Why it is in this group

    • The name "clickup_get_tasks" says "get": a word for reading.
    Description, as the server wrote it
    Get the tasks in a list, with optional filters and pagination. ClickUp REST: GET /list/{list_id}/task.

    Annotations the server declares

    • title: Get tasks
    • readOnlyHint: true
  • clickup_list_folderless_listsList the lists that live directly in a space (not inside a folder).No findings

    Why it is in this group

    • The name "clickup_list_folderless_lists" says "list": a word for reading.
    Description, as the server wrote it
    List the lists that live directly in a space (not inside a folder). ClickUp REST: GET /space/{space_id}/list.

    Annotations the server declares

    • title: List folderless lists
    • readOnlyHint: true
  • clickup_list_foldersList folders in a space.No findings

    Why it is in this group

    • The name "clickup_list_folders" says "list": a word for reading.
    Description, as the server wrote it
    List folders in a space. ClickUp REST: GET /space/{space_id}/folder.

    Annotations the server declares

    • title: List folders
    • readOnlyHint: true
  • clickup_list_listsList the lists inside a folder.No findings

    Why it is in this group

    • The name "clickup_list_lists" says "list": a word for reading.
    Description, as the server wrote it
    List the lists inside a folder. ClickUp REST: GET /folder/{folder_id}/list.

    Annotations the server declares

    • title: List lists
    • readOnlyHint: true
  • clickup_list_spacesList spaces in a workspace (team).No findings

    Why it is in this group

    • The name "clickup_list_spaces" says "list": a word for reading.
    Description, as the server wrote it
    List spaces in a workspace (team). ClickUp REST: GET /team/{team_id}/space.

    Annotations the server declares

    • title: List spaces
    • readOnlyHint: true
  • clickup_list_workspacesList the workspaces (the ClickUp API calls these "teams") the token can access — their ids are the team_id used by other tools.No findings

    Why it is in this group

    • The name "clickup_list_workspaces" says "list": a word for reading.
    Description, as the server wrote it
    List the workspaces (the ClickUp API calls these "teams") the token can access — their ids are the team_id used by other tools. ClickUp REST: GET /team.

    Annotations the server declares

    • title: List workspaces
    • readOnlyHint: true
  • clickup_search_tasksSearch/filter tasks across a whole workspace (team), optionally scoped to spaces/folders/lists.No findings

    Why it is in this group

    • The name "clickup_search_tasks" says "search": a word for reading.
    Description, as the server wrote it
    Search/filter tasks across a whole workspace (team), optionally scoped to spaces/folders/lists. ClickUp's "Get Filtered Team Tasks". ClickUp REST: GET /team/{team_id}/task.

    Annotations the server declares

    • title: Search tasks
    • readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.16.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http clickup https://clickup.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__clickup__clickup_get_authorized_user",
      "mcp__clickup__clickup_list_workspaces",
      "mcp__clickup__clickup_list_spaces",
      "mcp__clickup__clickup_list_folders",
      "mcp__clickup__clickup_list_lists",
      "mcp__clickup__clickup_list_folderless_lists",
      "mcp__clickup__clickup_get_tasks",
      "mcp__clickup__clickup_get_task",
      "mcp__clickup__clickup_get_task_comments",
      "mcp__clickup__clickup_get_list_comments",
      "mcp__clickup__clickup_search_tasks"
    ],
    "ask": [],
    "deny": [
      "mcp__clickup__clickup_create_task",
      "mcp__clickup__clickup_update_task",
      "mcp__clickup__clickup_create_task_comment"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as clickup. Review it before you use it.