ClickUp MCP by usefulapi
by usefulapi.io · remote · no sign-in to list tools · v1.16.3 · published by io.usefulapi
Read teams, spaces, lists and tasks; create, update and comment on tasks and track time.
14 tools: 3 can delete or cancel things and 11 only read.
Scanned Oct 21, 2026
- Deletes or cancels3Claude Code: deny: see these tools
- Can't be undone0Claude Code: ask
- Changes things0Claude Code: ask
- Only reads11Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http clickup https://clickup.usefulapi.io/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
14 tools
Deletes or cancels 3Claude Code: deny
clickup_create_taskWRITE: create a new task in a list.No findings
Why it is in this group
- The name "clickup_create_task" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it WRITE: create a new task in a list. `name` is required; the list is the {list_id} path param, not a body field. ClickUp REST: POST /list/{list_id}/task.
Annotations the server declares
- title: Create task
- destructiveHint: true
clickup_create_task_commentWRITE: add a comment to a task.No findings
Why it is in this group
- The name "clickup_create_task_comment" says "create": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it WRITE: add a comment to a task. `comment_text` is required; the task is the {task_id} path param. ClickUp REST: POST /task/{task_id}/comment.
Annotations the server declares
- title: Create task comment
- destructiveHint: true
clickup_update_taskWRITE: update fields on an existing task.No findings
Why it is in this group
- The name "clickup_update_task" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it WRITE: update fields on an existing task. Only the fields you pass are changed. ClickUp REST: PUT /task/{task_id}.
Annotations the server declares
- title: Update task
- destructiveHint: true
Only reads 11Claude Code: allow
clickup_get_authorized_userGet the user associated with the current ClickUp API token.No findings
Why it is in this group
- The name "clickup_get_authorized_user" says "get": a word for reading.
Description, as the server wrote it Get the user associated with the current ClickUp API token. ClickUp REST: GET /user.
Annotations the server declares
- title: Get authorized user
- readOnlyHint: true
clickup_get_list_commentsGet the comments on a list.No findings
Why it is in this group
- The name "clickup_get_list_comments" says "get": a word for reading.
Description, as the server wrote it Get the comments on a list. ClickUp REST: GET /list/{list_id}/comment.
Annotations the server declares
- title: Get list comments
- readOnlyHint: true
clickup_get_taskGet a single task by id.No findings
Why it is in this group
- The name "clickup_get_task" says "get": a word for reading.
Description, as the server wrote it Get a single task by id. ClickUp REST: GET /task/{task_id}.
Annotations the server declares
- title: Get task
- readOnlyHint: true
clickup_get_task_commentsGet the comments on a task.No findings
Why it is in this group
- The name "clickup_get_task_comments" says "get": a word for reading.
Description, as the server wrote it Get the comments on a task. ClickUp REST: GET /task/{task_id}/comment.
Annotations the server declares
- title: Get task comments
- readOnlyHint: true
clickup_get_tasksGet the tasks in a list, with optional filters and pagination.No findings
Why it is in this group
- The name "clickup_get_tasks" says "get": a word for reading.
Description, as the server wrote it Get the tasks in a list, with optional filters and pagination. ClickUp REST: GET /list/{list_id}/task.
Annotations the server declares
- title: Get tasks
- readOnlyHint: true
clickup_list_folderless_listsList the lists that live directly in a space (not inside a folder).No findings
Why it is in this group
- The name "clickup_list_folderless_lists" says "list": a word for reading.
Description, as the server wrote it List the lists that live directly in a space (not inside a folder). ClickUp REST: GET /space/{space_id}/list.
Annotations the server declares
- title: List folderless lists
- readOnlyHint: true
clickup_list_foldersList folders in a space.No findings
Why it is in this group
- The name "clickup_list_folders" says "list": a word for reading.
Description, as the server wrote it List folders in a space. ClickUp REST: GET /space/{space_id}/folder.
Annotations the server declares
- title: List folders
- readOnlyHint: true
clickup_list_listsList the lists inside a folder.No findings
Why it is in this group
- The name "clickup_list_lists" says "list": a word for reading.
Description, as the server wrote it List the lists inside a folder. ClickUp REST: GET /folder/{folder_id}/list.
Annotations the server declares
- title: List lists
- readOnlyHint: true
clickup_list_spacesList spaces in a workspace (team).No findings
Why it is in this group
- The name "clickup_list_spaces" says "list": a word for reading.
Description, as the server wrote it List spaces in a workspace (team). ClickUp REST: GET /team/{team_id}/space.
Annotations the server declares
- title: List spaces
- readOnlyHint: true
clickup_list_workspacesList the workspaces (the ClickUp API calls these "teams") the token can access — their ids are the team_id used by other tools.No findings
Why it is in this group
- The name "clickup_list_workspaces" says "list": a word for reading.
Description, as the server wrote it List the workspaces (the ClickUp API calls these "teams") the token can access — their ids are the team_id used by other tools. ClickUp REST: GET /team.
Annotations the server declares
- title: List workspaces
- readOnlyHint: true
clickup_search_tasksSearch/filter tasks across a whole workspace (team), optionally scoped to spaces/folders/lists.No findings
Why it is in this group
- The name "clickup_search_tasks" says "search": a word for reading.
Description, as the server wrote it Search/filter tasks across a whole workspace (team), optionally scoped to spaces/folders/lists. ClickUp's "Get Filtered Team Tasks". ClickUp REST: GET /team/{team_id}/task.
Annotations the server declares
- title: Search tasks
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.16.3. Values in angle brackets are yours to fill in.
claude mcp add --transport http clickup https://clickup.usefulapi.io/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__clickup__clickup_get_authorized_user",
"mcp__clickup__clickup_list_workspaces",
"mcp__clickup__clickup_list_spaces",
"mcp__clickup__clickup_list_folders",
"mcp__clickup__clickup_list_lists",
"mcp__clickup__clickup_list_folderless_lists",
"mcp__clickup__clickup_get_tasks",
"mcp__clickup__clickup_get_task",
"mcp__clickup__clickup_get_task_comments",
"mcp__clickup__clickup_get_list_comments",
"mcp__clickup__clickup_search_tasks"
],
"ask": [],
"deny": [
"mcp__clickup__clickup_create_task",
"mcp__clickup__clickup_update_task",
"mcp__clickup__clickup_create_task_comment"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as clickup. Review it before you use it.