# io.usefulapi/clickup (remote · clickup.usefulapi.io)

Read teams, spaces, lists and tasks; create, update and comment on tasks and track time.

- Trust score: 70/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `clickup.usefulapi.io`: 70/100 (this document), [markdown](https://verifymcp.io/servers/io-usefulapi-clickup/clickup.md), [page](https://verifymcp.io/servers/io-usefulapi-clickup/clickup)

## Channel facts

- Endpoint: `https://clickup.usefulapi.io/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.0`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 78/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token.
  - HTTPS not yet verified: we couldn't determine whether a plaintext access path exists.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
  - The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 75/100
  - AI-judged instruction clarity (excellent).
  - Context-footprint check failed: tool/resource definitions use about 1598 tokens (~114/item across 14 items; 14 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 3/100
  - Stability observed for 1 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 60/100
  - Spec-recency check failed: implements MCP spec 2025-06-18; the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add --transport http io-usefulapi-clickup https://clickup.usefulapi.io/mcp
```

### Codex

```toml
[mcp_servers.io-usefulapi-clickup]
url = "https://clickup.usefulapi.io/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "io-usefulapi-clickup": {
      "type": "remote",
      "url": "https://clickup.usefulapi.io/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add io-usefulapi-clickup --url https://clickup.usefulapi.io/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  io-usefulapi-clickup:
    url: "https://clickup.usefulapi.io/mcp"
```

### Other

```json
{
  "mcpServers": {
    "io-usefulapi-clickup": {
      "type": "http",
      "url": "https://clickup.usefulapi.io/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 70, +1)

- [functional improvement] Stability: unverified → 0.03

### 2026-08-02 (score 69, +41)

- [security improvement] Authorization: unverified → pass
- [security] First check of Authorization: partial
- [functional regression] MCP protocol: unverified → fail
- [functional improvement] Tool coverage: unverified → 100
- [functional] First check of Schema quality: excellent
- [functional] First check of Schema quality: fail
- [functional] First check of Tool coverage: 100
- [functional] First check of Schema quality: fail

### 2026-08-01 (score 28)

First indexed and scored.

## MCP tools (14)

### `clickup_get_authorized_user` (~32 tokens)

Get authorized user

Get the user associated with the current ClickUp API token. ClickUp REST: GET /user.

### `clickup_list_workspaces` (~49 tokens)

List workspaces

List the workspaces (the ClickUp API calls these "teams") the token can access — their ids are the team_id used by other tools. ClickUp REST: GET /team.

### `clickup_list_spaces` (~65 tokens)

List spaces

List spaces in a workspace (team). ClickUp REST: GET /team/{team_id}/space.

Input parameters:

- `archived` (boolean): Include archived items — serialized as archived=true/false. Default false.
- `team_id` (string, required): The workspace (team) id.

### `clickup_list_folders` (~61 tokens)

List folders

List folders in a space. ClickUp REST: GET /space/{space_id}/folder.

Input parameters:

- `archived` (boolean): Include archived items — serialized as archived=true/false. Default false.
- `space_id` (string, required): The space id.

### `clickup_list_lists` (~61 tokens)

List lists

List the lists inside a folder. ClickUp REST: GET /folder/{folder_id}/list.

Input parameters:

- `archived` (boolean): Include archived items — serialized as archived=true/false. Default false.
- `folder_id` (string, required): The folder id.

### `clickup_list_folderless_lists` (~71 tokens)

List folderless lists

List the lists that live directly in a space (not inside a folder). ClickUp REST: GET /space/{space_id}/list.

Input parameters:

- `archived` (boolean): Include archived items — serialized as archived=true/false. Default false.
- `space_id` (string, required): The space id.

### `clickup_get_tasks` (~242 tokens)

Get tasks

Get the tasks in a list, with optional filters and pagination. ClickUp REST: GET /list/{list_id}/task.

Input parameters:

- `archived` (boolean): Include archived items — serialized as archived=true/false. Default false.
- `assignees` (array): Filter by assignee user ids (repeated assignees[] params).
- `due_date_gt` (integer): Only tasks due after this Unix time in ms.
- `due_date_lt` (integer): Only tasks due before this Unix time in ms.
- `include_closed` (boolean): Include closed tasks (serialized true/false).
- `list_id` (string, required): The list id.
- `order_by` (string): Sort field, e.g. 'created', 'updated', 'due_date', 'id'.
- `page` (integer): 0-indexed page number for pagination.
- `reverse` (boolean): Reverse the sort order (serialized true/false).
- `statuses` (array): Filter by status names (repeated statuses[] params), e.g. ["open","in progress"].
- `subtasks` (boolean): Include subtasks (serialized true/false).

### `clickup_get_task` (~59 tokens)

Get task

Get a single task by id. ClickUp REST: GET /task/{task_id}.

Input parameters:

- `include_subtasks` (boolean): Include the task's subtasks (serialized true/false).
- `task_id` (string, required): The task id.

### `clickup_get_task_comments` (~42 tokens)

Get task comments

Get the comments on a task. ClickUp REST: GET /task/{task_id}/comment.

Input parameters:

- `task_id` (string, required): The task id.

### `clickup_get_list_comments` (~42 tokens)

Get list comments

Get the comments on a list. ClickUp REST: GET /list/{list_id}/comment.

Input parameters:

- `list_id` (string, required): The list id.

### `clickup_search_tasks` (~289 tokens)

Search tasks

Search/filter tasks across a whole workspace (team), optionally scoped to spaces/folders/lists. ClickUp's "Get Filtered Team Tasks". ClickUp REST: GET /team/{team_id}/task.

Input parameters:

- `assignees` (array): Filter by assignee user ids (repeated assignees[] params).
- `due_date_gt` (integer): Only tasks due after this Unix time in ms.
- `due_date_lt` (integer): Only tasks due before this Unix time in ms.
- `include_closed` (boolean): Include closed tasks (serialized true/false).
- `list_ids` (array): Restrict to these list ids (repeated list_ids[] params).
- `order_by` (string): Sort field, e.g. 'created', 'updated', 'due_date', 'id'.
- `page` (integer): 0-indexed page number for pagination.
- `project_ids` (array): Restrict to these folder/project ids (repeated project_ids[] params).
- `reverse` (boolean): Reverse the sort order (serialized true/false).
- `space_ids` (array): Restrict to these space ids (repeated space_ids[] params).
- `statuses` (array): Filter by status names (repeated statuses[] params), e.g. ["open","in progress"].
- `team_id` (string, required): The workspace (team) id.

### `clickup_create_task` (~249 tokens)

Create task

WRITE: create a new task in a list. `name` is required; the list is the {list_id} path param, not a body field. ClickUp REST: POST /list/{list_id}/task.

Input parameters:

- `assignees` (array): User ids to assign the task to (numeric).
- `description` (string): The task description / body text.
- `due_date` (integer): Due date as Unix time in ms.
- `due_date_time` (boolean): Whether due_date carries a time component (else date-only).
- `list_id` (string, required): The list id to create the task in (path param, not body).
- `name` (string, required): The task name (required).
- `parent` (string): Parent task id — set to create this task as a subtask.
- `priority` (integer): Task priority: 1=Urgent, 2=High, 3=Normal, 4=Low.
- `start_date` (integer): Start date as Unix time in ms.
- `status` (string): Status name (must be a valid status in the list).
- `tags` (array): Tag names to attach.

### `clickup_update_task` (~213 tokens)

Update task

WRITE: update fields on an existing task. Only the fields you pass are changed. ClickUp REST: PUT /task/{task_id}.

Input parameters:

- `archived` (boolean): Archive (true) or unarchive (false) the task.
- `description` (string): New task description / body text.
- `due_date` (integer): Due date as Unix time in ms.
- `due_date_time` (boolean): Whether due_date carries a time component (else date-only).
- `name` (string): New task name.
- `parent` (string): Parent task id (re-parent as a subtask).
- `priority` (integer): Task priority: 1=Urgent, 2=High, 3=Normal, 4=Low.
- `start_date` (integer): Start date as Unix time in ms.
- `status` (string): New status name (must be valid for the list).
- `task_id` (string, required): The task id to update (path param, not body).

### `clickup_create_task_comment` (~123 tokens)

Create task comment

WRITE: add a comment to a task. `comment_text` is required; the task is the {task_id} path param. ClickUp REST: POST /task/{task_id}/comment.

Input parameters:

- `assignee` (integer): User id to assign the comment to (numeric).
- `comment_text` (string, required): The comment text (required).
- `notify_all` (boolean): If true, notify everyone tagged/subscribed (else just the assignee).
- `task_id` (string, required): The task id to comment on (path param, not body).

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/io-usefulapi-clickup/clickup#diagnostics

## Score history

- 2026-08-03: 70
- 2026-08-02: 69
- 2026-08-01: 28

## Links

- Remote endpoint: https://clickup.usefulapi.io/mcp
- Repository: https://github.com/m190/usefulapi-mcp
- Changelog RSS feed: https://verifymcp.io/servers/io-usefulapi-clickup/clickup/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/io-usefulapi-clickup/clickup/changelog.json
- HTML version of this page: https://verifymcp.io/servers/io-usefulapi-clickup/clickup