io.usefulapi/clickup

REMOTE · CLICKUP.USEFULAPI.IO · SCANNED AUG 3

Read teams, spaces, lists and tasks; create, update and comment on tasks and track time.

Available components

70 70 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security78

The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
HTTPS not yet verified: we couldn't determine whether a plaintext access path exists. View diagnostics → Unverified
HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial

Transport & Reachability100

Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass

Schema Quality & AI Usability75

AI-judged instruction clarity (excellent).Pass
Context-footprint check failed: tool/resource definitions use about 1598 tokens (~114/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management3

Stability observed for 1 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities60

Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28. See how to fix → Fail

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · clickup.usefulapi.io

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add --transport http io-usefulapi-clickup https://clickup.usefulapi.io/mcp

# ~/.codex/config.toml

[mcp_servers.io-usefulapi-clickup]
url = "https://clickup.usefulapi.io/mcp"

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "io-usefulapi-clickup": {
      "type": "remote",
      "url": "https://clickup.usefulapi.io/mcp",
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add io-usefulapi-clickup --url https://clickup.usefulapi.io/mcp --transport streamable-http

# ~/.hermes/config.yaml

mcp_servers:
  io-usefulapi-clickup:
    url: "https://clickup.usefulapi.io/mcp"

// mcp.json

{
  "mcpServers": {
    "io-usefulapi-clickup": {
      "type": "http",
      "url": "https://clickup.usefulapi.io/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +1
- Stability: unverified → 0.03 ▲ functional
2 Aug 26 +41
- Authorization: unverified → pass ▲ security
- First check of Authorization: partial security
- MCP protocol: unverified → fail ▼ functional
- Tool coverage: unverified → 100 ▲ functional
- First check of Schema quality: excellent functional
- First check of Schema quality: fail functional
- First check of Tool coverage: 100 functional
- First check of Schema quality: fail functional
1 Aug 26 28

First indexed and scored.

Show 1 earlier entry Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Probed https://clickup.usefulapi.io/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject	Issuer	Valid from	Valid until	Key	Signature	Serial
CN=usefulapi.io	CN=WE1,O=Google Trust Services,C=US	1 Aug 2026	30 Oct 2026	ECDSA 256	ECDSA-SHA256	77a8fc75c723b7750edd56f71b0f5f3c
SANs: usefulapi.io, clickup.usefulapi.io, *.clickup.usefulapi.io
CN=WE1,O=Google Trust Services,C=US (CA)	CN=GTS Root R4,O=Google Trust Services LLC,C=US	13 Dec 2023	20 Feb 2029	ECDSA 256	ECDSA-SHA384	7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA)	CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE	15 Nov 2023	28 Jan 2028	ECDSA 384	SHA256-RSA	7fe530bf331343bedd821610493d8a1b

DNSSEC insecure

Validation of clickup.usefulapi.io. — Not signed

Zone	DS	Keys	Algorithms	Outcome
.	trust_anchor	20326, 38696	8, 8	Verified
io.	present	57355	8	Verified
usefulapi.io.	absent			Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation

Authentication Enforced and verified

The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.

Result	Enforced and verified
Enforced	On tool calls
HTTP status	200

WWW-Authenticate challenge Bearer realm="OAuth", resource_metadata="https://clickup.usefulapi.io/.well-known/oauth-protected-resource/mcp", error="invalid_token", error_description="Missing or invalid access token"

Bearer realm="OAuth", resource_metadata="https://clickup.usefulapi.io/.well-known/oauth-protected-resource/mcp", error="invalid_token", error_description="Missing or invalid access token"

Protected resource metadata

Document	https://clickup.usefulapi.io/.well-known/oauth-protected-resource/mcp
Retrieved	Yes
Resource	https://clickup.usefulapi.io/mcp
Authorisation server	https://clickup.usefulapi.io

Transports 2 probes

Transport	URL	Outcome	Status	Location
streamable-http	https://clickup.usefulapi.io/mcp	Verified	200
http (plaintext)	http://clickup.usefulapi.io/mcp	Inconclusive	401

MCP tools — 14 exposed · ~1,598 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

clickup_create_task Create task ~249

WRITE: create a new task in a list. `name` is required; the list is the {list_id} path param, not a body field. ClickUp REST: POST /list/{list_id}/task.

Input Output Examples

Name	Type	Req	Description
assignees	array	—	User ids to assign the task to (numeric).
description	string	—	The task description / body text.
due_date	integer	—	Due date as Unix time in ms.
due_date_time	boolean	—	Whether due_date carries a time component (else date-only).
list_id	string	yes	The list id to create the task in (path param, not body).
name	string	yes	The task name (required).
parent	string	—	Parent task id — set to create this task as a subtask.
priority	integer	—	Task priority: 1=Urgent, 2=High, 3=Normal, 4=Low.
start_date	integer	—	Start date as Unix time in ms.
status	string	—	Status name (must be a valid status in the list).
tags	array	—	Tag names to attach.

No output schema declared.

No examples provided.

clickup_create_task_comment Create task comment ~123

WRITE: add a comment to a task. `comment_text` is required; the task is the {task_id} path param. ClickUp REST: POST /task/{task_id}/comment.

Input Output Examples

Name	Type	Req	Description
assignee	integer	—	User id to assign the comment to (numeric).
comment_text	string	yes	The comment text (required).
notify_all	boolean	—	If true, notify everyone tagged/subscribed (else just the assignee).
task_id	string	yes	The task id to comment on (path param, not body).

No output schema declared.

No examples provided.

clickup_get_authorized_user Get authorized user ~32

Get the user associated with the current ClickUp API token. ClickUp REST: GET /user.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

clickup_get_list_comments Get list comments ~42

Get the comments on a list. ClickUp REST: GET /list/{list_id}/comment.

Input Output Examples

Name	Type	Req	Description
list_id	string	yes	The list id.

No output schema declared.

No examples provided.

clickup_get_task Get task ~59

Get a single task by id. ClickUp REST: GET /task/{task_id}.

Input Output Examples

Name	Type	Req	Description
include_subtasks	boolean	—	Include the task's subtasks (serialized true/false).
task_id	string	yes	The task id.

No output schema declared.

No examples provided.

clickup_get_task_comments Get task comments ~42

Get the comments on a task. ClickUp REST: GET /task/{task_id}/comment.

Input Output Examples

Name	Type	Req	Description
task_id	string	yes	The task id.

No output schema declared.

No examples provided.

clickup_get_tasks Get tasks ~242

Get the tasks in a list, with optional filters and pagination. ClickUp REST: GET /list/{list_id}/task.

Input Output Examples

Name	Type	Req	Description
archived	boolean	—	Include archived items — serialized as archived=true/false. Default false.
assignees	array	—	Filter by assignee user ids (repeated assignees[] params).
due_date_gt	integer	—	Only tasks due after this Unix time in ms.
due_date_lt	integer	—	Only tasks due before this Unix time in ms.
include_closed	boolean	—	Include closed tasks (serialized true/false).
list_id	string	yes	The list id.
order_by	string	—	Sort field, e.g. 'created', 'updated', 'due_date', 'id'.
page	integer	—	0-indexed page number for pagination.
reverse	boolean	—	Reverse the sort order (serialized true/false).
statuses	array	—	Filter by status names (repeated statuses[] params), e.g. ["open","in progress"].
subtasks	boolean	—	Include subtasks (serialized true/false).

No output schema declared.

No examples provided.

clickup_list_folderless_lists List folderless lists ~71

List the lists that live directly in a space (not inside a folder). ClickUp REST: GET /space/{space_id}/list.

Input Output Examples

Name	Type	Req	Description
archived	boolean	—	Include archived items — serialized as archived=true/false. Default false.
space_id	string	yes	The space id.

No output schema declared.

No examples provided.

clickup_list_folders List folders ~61

List folders in a space. ClickUp REST: GET /space/{space_id}/folder.

Input Output Examples

Name	Type	Req	Description
archived	boolean	—	Include archived items — serialized as archived=true/false. Default false.
space_id	string	yes	The space id.

No output schema declared.

No examples provided.

clickup_list_lists List lists ~61

List the lists inside a folder. ClickUp REST: GET /folder/{folder_id}/list.

Input Output Examples

Name	Type	Req	Description
archived	boolean	—	Include archived items — serialized as archived=true/false. Default false.
folder_id	string	yes	The folder id.

No output schema declared.

No examples provided.

clickup_list_spaces List spaces ~65

List spaces in a workspace (team). ClickUp REST: GET /team/{team_id}/space.

Input Output Examples

Name	Type	Req	Description
archived	boolean	—	Include archived items — serialized as archived=true/false. Default false.
team_id	string	yes	The workspace (team) id.

No output schema declared.

No examples provided.

clickup_list_workspaces List workspaces ~49

List the workspaces (the ClickUp API calls these "teams") the token can access — their ids are the team_id used by other tools. ClickUp REST: GET /team.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

clickup_search_tasks Search tasks ~289

Search/filter tasks across a whole workspace (team), optionally scoped to spaces/folders/lists. ClickUp's "Get Filtered Team Tasks". ClickUp REST: GET /team/{team_id}/task.

Input Output Examples

Name	Type	Req	Description
assignees	array	—	Filter by assignee user ids (repeated assignees[] params).
due_date_gt	integer	—	Only tasks due after this Unix time in ms.
due_date_lt	integer	—	Only tasks due before this Unix time in ms.
include_closed	boolean	—	Include closed tasks (serialized true/false).
list_ids	array	—	Restrict to these list ids (repeated list_ids[] params).
order_by	string	—	Sort field, e.g. 'created', 'updated', 'due_date', 'id'.
page	integer	—	0-indexed page number for pagination.
project_ids	array	—	Restrict to these folder/project ids (repeated project_ids[] params).
reverse	boolean	—	Reverse the sort order (serialized true/false).
space_ids	array	—	Restrict to these space ids (repeated space_ids[] params).
statuses	array	—	Filter by status names (repeated statuses[] params), e.g. ["open","in progress"].
team_id	string	yes	The workspace (team) id.

No output schema declared.

No examples provided.

clickup_update_task Update task ~213

WRITE: update fields on an existing task. Only the fields you pass are changed. ClickUp REST: PUT /task/{task_id}.

Input Output Examples

Name	Type	Req	Description
archived	boolean	—	Archive (true) or unarchive (false) the task.
description	string	—	New task description / body text.
due_date	integer	—	Due date as Unix time in ms.
due_date_time	boolean	—	Whether due_date carries a time component (else date-only).
name	string	—	New task name.
parent	string	—	Parent task id (re-parent as a subtask).
priority	integer	—	Task priority: 1=Urgent, 2=High, 3=Normal, 4=Low.
start_date	integer	—	Start date as Unix time in ms.
status	string	—	New status name (must be valid for the list).
task_id	string	yes	The task id to update (path param, not body).

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

1 Aug 3 Aug