# io.github.cvrt-jh/clickup-mcp (npm · @cavort-it-systems/clickup-mcp)

Lightweight ClickUp MCP server - 37 tools, token-optimized (95% smaller responses)

- Trust score: 68/100 (medium)
- Change this week: +22
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@cavort-it-systems/clickup-mcp`: 68/100 (this document), [markdown](https://verifymcp.io/servers/cvrt-jh-clickup-mcp/cavort-it-systems-clickup-mcp.md), [page](https://verifymcp.io/servers/cvrt-jh-clickup-mcp/cavort-it-systems-clickup-mcp)

## Channel facts

- Registry: `npm`
- Package: `@cavort-it-systems/clickup-mcp`
- Version: `1.0.3`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 181 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 70/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 2563 tokens (~69/item across 37 items; 37 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 27/100
  - Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 96/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 88% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add cvrt-jh-clickup-mcp -- npx -y @cavort-it-systems/clickup-mcp
```

### Codex

```bash
codex mcp add cvrt-jh-clickup-mcp -- npx -y @cavort-it-systems/clickup-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "cvrt-jh-clickup-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@cavort-it-systems/clickup-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add cvrt-jh-clickup-mcp --command npx --arg -y --arg @cavort-it-systems/clickup-mcp
```

### Hermes

```yaml
mcp_servers:
  cvrt-jh-clickup-mcp:
    command: "npx"
    args: ["-y", "@cavort-it-systems/clickup-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "cvrt-jh-clickup-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@cavort-it-systems/clickup-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 68, +4)

- [functional improvement] Stability: unverified → 0.27

### 2026-08-02 (score 64, +43)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Schema quality: unverified → good
- [functional] Licence: MIT

### 2026-08-01 (score 21, −5)

- [security] Stability: Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.
- [functional regression] Capabilities: pass → unverified

### 2026-07-31 (score 26, −20)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-27 (score 46)

First indexed and scored.

## MCP tools (37)

### `clickup_whoami` (~23 tokens)

Get current user info and list of workspaces with members

### `clickup_get_spaces` (~43 tokens)

List all spaces in a workspace

Input parameters:

- `archived` (boolean): Include archived spaces (default false)
- `team_id` (string, required): ClickUp workspace/team ID

### `clickup_get_folders` (~46 tokens)

List folders in a space (includes nested lists)

Input parameters:

- `archived` (boolean): Include archived folders (default false)
- `space_id` (string, required): ClickUp space ID

### `clickup_get_lists` (~69 tokens)

Get lists in a folder, or folderless lists in a space. Provide either folder_id or space_id.

Input parameters:

- `archived` (boolean): Include archived lists (default false)
- `folder_id` (string): ClickUp folder ID
- `space_id` (string): ClickUp space ID

### `clickup_get_list` (~32 tokens)

Get a single list's details including its statuses

Input parameters:

- `list_id` (string, required): ClickUp list ID

### `clickup_create_list` (~130 tokens)

Create a new list in a folder or as a folderless list in a space

Input parameters:

- `content` (string): List description
- `due_date` (number): Due date as Unix timestamp in milliseconds
- `folder_id` (string): Folder ID (for list inside folder)
- `name` (string, required): List name
- `priority` (number): Priority (1=urgent, 2=high, 3=normal, 4=low)
- `space_id` (string): Space ID (for folderless list)
- `status` (string): Status name to use as default

### `clickup_delete_list` (~34 tokens)

Delete a list. This is permanent and cannot be undone.

Input parameters:

- `list_id` (string, required): ClickUp list ID

### `clickup_get_task` (~58 tokens)

Get a task by its ID

Input parameters:

- `include_markdown_description` (boolean): Return description as markdown
- `include_subtasks` (boolean): Include subtasks (default false)
- `task_id` (string, required): ClickUp task ID

### `clickup_create_task` (~248 tokens)

Create a new task in a list

Input parameters:

- `assignees` (array): Array of user IDs to assign
- `custom_fields` (array): Custom field values to set
- `description` (string): Task description (plain text or markdown)
- `due_date` (number): Due date as Unix timestamp in milliseconds
- `due_date_time` (boolean): Whether due_date includes time
- `list_id` (string, required): ClickUp list ID
- `markdown_description` (string): Task description in markdown
- `name` (string, required): Task name
- `notify_all` (boolean): Notify assignees (default true)
- `parent` (string): Parent task ID (to create subtask)
- `priority` (number): Priority: 1=urgent, 2=high, 3=normal, 4=low
- `start_date` (number): Start date as Unix timestamp in milliseconds
- `start_date_time` (boolean): Whether start_date includes time
- `status` (string): Status name (must match list's statuses)
- `tags` (array): Array of tag names
- `time_estimate` (number): Time estimate in milliseconds

### `clickup_update_task` (~212 tokens)

Update a task. Assignees use add/rem arrays, not a flat list.

Input parameters:

- `archived` (boolean): Archive/unarchive the task
- `assignees` (object): Assignee changes (add/rem)
- `description` (string): New description
- `due_date` (number): Due date as Unix timestamp in milliseconds
- `due_date_time` (boolean)
- `markdown_description` (string): New description in markdown
- `name` (string): New task name
- `parent` (string): Move to new parent (set null to unparent)
- `priority` (number): Priority: 1=urgent, 2=high, 3=normal, 4=low
- `start_date` (number): Start date as Unix timestamp in milliseconds
- `start_date_time` (boolean)
- `status` (string): New status
- `task_id` (string, required): ClickUp task ID
- `time_estimate` (number): Time estimate in milliseconds

### `clickup_get_tasks` (~211 tokens)

List tasks in a list with optional filters

Input parameters:

- `archived` (boolean): Include archived tasks
- `assignees` (array): Filter by assignee IDs
- `date_created_gt` (number): Created after (ms)
- `date_created_lt` (number): Created before (ms)
- `date_updated_gt` (number): Updated after (ms)
- `date_updated_lt` (number): Updated before (ms)
- `due_date_gt` (number): Due date greater than (ms)
- `due_date_lt` (number): Due date less than (ms)
- `include_closed` (boolean): Include closed tasks
- `include_markdown_description` (boolean)
- `list_id` (string, required): ClickUp list ID
- `order_by` (string)
- `page` (number): Page number (0-indexed)
- `reverse` (boolean): Reverse sort order
- `statuses` (array): Filter by status names
- `subtasks` (boolean): Include subtasks

### `clickup_search_tasks` (~202 tokens)

Search tasks across an entire workspace

Input parameters:

- `assignees` (array)
- `date_created_gt` (number)
- `date_created_lt` (number)
- `date_updated_gt` (number)
- `date_updated_lt` (number)
- `due_date_gt` (number)
- `due_date_lt` (number)
- `folder_ids` (array): Filter by folder IDs
- `include_closed` (boolean)
- `include_markdown_description` (boolean)
- `list_ids` (array): Filter by list IDs
- `order_by` (string)
- `page` (number): Page number (0-indexed)
- `project_ids` (array): Filter by project IDs
- `reverse` (boolean)
- `space_ids` (array): Filter by space IDs
- `statuses` (array)
- `subtasks` (boolean)
- `team_id` (string, required): ClickUp workspace/team ID

### `clickup_set_custom_field` (~63 tokens)

Set a custom field value on a task (update_task cannot do this)

Input parameters:

- `field_id` (string, required): Custom field ID
- `task_id` (string, required): ClickUp task ID
- `value` (required): Custom field value (type depends on field type)

### `clickup_delete_task` (~28 tokens)

Permanently delete a task

Input parameters:

- `task_id` (string, required): ClickUp task ID

### `clickup_get_space_tags` (~30 tokens)

List all tags in a space

Input parameters:

- `space_id` (string, required): ClickUp space ID

### `clickup_create_space_tag` (~76 tokens)

Create a new tag in a space

Input parameters:

- `name` (string, required): Tag name
- `space_id` (string, required): ClickUp space ID
- `tag_bg` (string): Background color hex (e.g. '#000000')
- `tag_fg` (string): Foreground color hex (e.g. '#ffffff')

### `clickup_edit_space_tag` (~82 tokens)

Edit (rename or recolor) a tag in a space

Input parameters:

- `new_name` (string): New tag name
- `space_id` (string, required): ClickUp space ID
- `tag_bg` (string): New background color hex
- `tag_fg` (string): New foreground color hex
- `tag_name` (string, required): Current tag name

### `clickup_delete_space_tag` (~42 tokens)

Delete a tag from a space

Input parameters:

- `space_id` (string, required): ClickUp space ID
- `tag_name` (string, required): Tag name to delete

### `clickup_add_tag_to_task` (~43 tokens)

Add a tag to a task

Input parameters:

- `tag_name` (string, required): Tag name to add
- `task_id` (string, required): ClickUp task ID

### `clickup_remove_tag_from_task` (~43 tokens)

Remove a tag from a task

Input parameters:

- `tag_name` (string, required): Tag name to remove
- `task_id` (string, required): ClickUp task ID

### `clickup_create_checklist` (~39 tokens)

Create a checklist on a task

Input parameters:

- `name` (string, required): Checklist name
- `task_id` (string, required): ClickUp task ID

### `clickup_edit_checklist` (~50 tokens)

Rename or reorder a checklist

Input parameters:

- `checklist_id` (string, required): Checklist ID
- `name` (string): New checklist name
- `position` (number): New position (0-indexed)

### `clickup_delete_checklist` (~29 tokens)

Delete a checklist and all its items

Input parameters:

- `checklist_id` (string, required): Checklist ID

### `clickup_create_checklist_item` (~50 tokens)

Add an item to a checklist

Input parameters:

- `assignee` (number): User ID to assign
- `checklist_id` (string, required): Checklist ID
- `name` (string, required): Item name

### `clickup_edit_checklist_item` (~105 tokens)

Edit a checklist item (name, resolved status, assignee, or parent)

Input parameters:

- `assignee` (number): User ID to assign (or null to unassign)
- `checklist_id` (string, required): Checklist ID
- `checklist_item_id` (string, required): Checklist item ID
- `name` (string): New item name
- `parent` (string): Parent checklist item ID (to nest items)
- `resolved` (boolean): Mark as resolved/unresolved

### `clickup_delete_checklist_item` (~39 tokens)

Delete a checklist item

Input parameters:

- `checklist_id` (string, required): Checklist ID
- `checklist_item_id` (string, required): Checklist item ID

### `clickup_add_dependency` (~65 tokens)

Add a dependency between tasks (waiting_on or blocking)

Input parameters:

- `dependency_of` (string): Task ID that this task blocks
- `depends_on` (string): Task ID this task is waiting on
- `task_id` (string, required): The task to add the dependency to

### `clickup_delete_dependency` (~68 tokens)

Remove a dependency. Note: uses query params, not body.

Input parameters:

- `dependency_of` (string): Task ID that this task was blocking
- `depends_on` (string): Task ID this task was waiting on
- `task_id` (string, required): The task to remove the dependency from

### `clickup_add_task_link` (~41 tokens)

Link two tasks together

Input parameters:

- `links_to` (string, required): Second task ID to link to
- `task_id` (string, required): First task ID

### `clickup_delete_task_link` (~42 tokens)

Remove a link between two tasks

Input parameters:

- `links_to` (string, required): Second task ID to unlink
- `task_id` (string, required): First task ID

### `clickup_create_comment` (~70 tokens)

Add a comment to a task

Input parameters:

- `assignee` (number): User ID to assign with this comment
- `comment_text` (string, required): Comment text
- `notify_all` (boolean): Notify all assignees (default true)
- `task_id` (string, required): ClickUp task ID

### `clickup_get_comments` (~60 tokens)

Get comments on a task (paginated, 25 per page)

Input parameters:

- `start` (number): Start offset for pagination
- `start_id` (string): Comment ID to start from
- `task_id` (string, required): ClickUp task ID

### `clickup_update_comment` (~67 tokens)

Edit a comment's text or resolve/unresolve it

Input parameters:

- `assignee` (number): New assignee user ID
- `comment_id` (string, required): Comment ID
- `comment_text` (string): New comment text
- `resolved` (boolean): Mark as resolved/unresolved

### `clickup_create_reply` (~38 tokens)

Add a threaded reply to a comment

Input parameters:

- `comment_id` (string, required): Comment ID
- `comment_text` (string, required): Reply text

### `clickup_get_replies` (~28 tokens)

Get threaded replies to a comment

Input parameters:

- `comment_id` (string, required): Comment ID

### `clickup_get_workspace_members` (~25 tokens)

Get all members across all workspaces (extracted from teams response)

### `clickup_get_list_members` (~32 tokens)

Get members with access to a specific list

Input parameters:

- `list_id` (string, required): ClickUp list ID

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/cvrt-jh-clickup-mcp/cavort-it-systems-clickup-mcp#diagnostics

## Score history

- 2026-08-03: 68
- 2026-08-02: 64
- 2026-08-01: 21
- 2026-07-31: 26
- 2026-07-30: 46
- 2026-07-28: 46
- 2026-07-27: 46

## Links

- npm package: https://www.npmjs.com/package/@cavort-it-systems/clickup-mcp
- Socket report: https://socket.dev/npm/package/@cavort-it-systems/clickup-mcp
- Repository: https://github.com/cvrt-jh/clickup-mcp
- Changelog RSS feed: https://verifymcp.io/servers/cvrt-jh-clickup-mcp/cavort-it-systems-clickup-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/cvrt-jh-clickup-mcp/cavort-it-systems-clickup-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/cvrt-jh-clickup-mcp/cavort-it-systems-clickup-mcp