Provides comprehensive integration with ClickUp's project management platform, offering 170+ tools for managing workspaces, tasks, comments, documents, custom fields, time tracking, goals, webhooks, and dependencies with AI-powered workflow optimization and GitHub Flavored Markdown support
ClickUp MCP Server - Enhanced
A comprehensive Model Context Protocol (MCP) server providing AI assistants with complete ClickUp API access. Features 170+ tools, AI-powered efficiency, production-grade security, and full GitHub Flavored Markdown support.
📦 Quick Install:
npx @chykalophia/clickup-mcp-server
- No build required!
📋 Attribution
This Enhanced version is based on the original ClickUp MCP Server codebase by David Whatley at nsxdavid/clickup-mcp-server.
🚀 Key Features
🧠 AI-Powered Efficiency ⭐
- Smart Tool Suggestions: Context-aware recommendations for optimal workflows
- Workflow Optimization: 50-70% efficiency gains in common workflows
- Intelligent Discovery: Purpose-built tools that replace inefficient navigation
- Direct Access: Skip hierarchical navigation with smart discovery tools
✅ GitHub Flavored Markdown Support
- Rich Text Formatting: Headers, bold, italic, code blocks, lists, tables, links
- Smart Content Processing: Automatic markdown ↔ HTML ↔ plain text conversion
- Syntax Highlighting: Code blocks with language-specific highlighting
- Backward Compatible: Existing plain text content continues to work
🛠️ Comprehensive API Coverage
- 170+ Total Tools covering 100% of major ClickUp API endpoints
- 9 Feature Domains: Tasks, comments, docs, webhooks, views, dependencies, attachments, time tracking, goals
- Real-time Integration: Webhook processing with HMAC validation
- Advanced Workflows: Dependencies, custom fields, bulk operations
🔒 Production Ready Security
- Zero Vulnerabilities: Comprehensive security audit with 85+ test cases
- Input Validation: XSS and injection prevention with sanitization
- Rate Limiting: Configurable thresholds (1000 API, 100 webhook, 10 upload/min)
- HMAC Validation: Secure webhook authentication with timing-safe comparison
- File Security: Path traversal prevention, dangerous file blocking, size limits
🏷️ Namespaced Tool Names
- Conflict Prevention: All tools prefixed with
clickup_
to avoid conflicts with other MCP servers - Clear Identification: Easy to distinguish ClickUp tools from other services (e.g.,
clickup_get_tasks
vstaskmaster_get_tasks
) - Backward Compatibility: Previous tool names are deprecated but documented for migration
- Examples:
clickup_create_task
,clickup_get_workspaces
,clickup_update_comment
📊 Complete Tool Inventory (170+ Tools)
🧠 Efficiency & Intelligence Tools (20+ tools) ⭐
- Smart Discovery:
clickup_find_chat_channels
,clickup_search_views_by_name
,clickup_get_workspace_overview
- Workflow Analysis:
clickup_analyze_tool_efficiency
,clickup_suggest_tools_for_task
- Enhanced Metadata: All 153 core tools enhanced with efficiency hints and alternatives
Core Workspace Management (47 tools)
- Workspaces:
clickup_get_workspaces
,clickup_get_workspace_seats
- Spaces & Lists:
clickup_get_spaces
,clickup_get_lists
,clickup_create_list
,clickup_update_list
,clickup_delete_list
- Tasks:
clickup_get_tasks
,clickup_create_task
,clickup_update_task
,clickup_get_task_details
(with markdown support) - Comments:
clickup_create_task_comment
,clickup_create_list_comment
,clickup_create_chat_view_comment
(with markdown) - Checklists:
clickup_create_checklist
,clickup_update_checklist
,clickup_create_checklist_item
Advanced Feature Domains
- 📄 Document Management (18 tools): Full CRUD, pages, sharing, search with markdown support
- 🔧 Custom Fields (15 tools): All field types, values, templates, bulk operations
- 📎 Attachments (14 tools): Upload, download, versions, thumbnails, security validation
- 👁️ Views (13 tools): All view types, filters, grouping, sharing, custom configurations
- 🔗 Dependencies (12 tools): Relationships, graphs, conflict detection, critical path
- 🎯 Goals (12 tools): All goal types, targets, progress tracking, analytics
- 🔔 Webhooks (11 tools): Real-time processing, HMAC validation, event history
- ⏱️ Time Tracking (10 tools): Entries, timers, analytics, team tracking
- 💬 Chat & Communication (24 tools): Enhanced chat discovery and messaging
🚀 Efficiency Examples
Smart Chat Discovery (60% faster)
Instead of hierarchical navigation:
Workflow Analysis
Real-time Webhook Processing
📝 Markdown Examples
Creating a Task with Rich Description
Adding a Formatted Comment
🚀 Easy Installation
Option 1: One-Click Installer (Recommended)
Download and run the automated installer:
Or via NPX:
Option 2: Web Configurator
Visit the web-based configurator for visual setup: ClickUp MCP Configurator
- Select your preferred version
- Enter your ClickUp API token
- Download the generated config file
- Place it in your Claude Desktop config directory
Option 3: NPM Package (Manual Setup)
Use the published npm package - no build required:
Option 4: Build from Source
For development or customization:
Get ClickUp API Token
- Log in to ClickUp account
- Go to Settings > Apps
- Click "Generate API Token"
- Copy the token
Configuration
Add to the MCP settings file:
🚀 Quick Setup Configuration
NPM Package (Recommended) ⭐
🔧 Build from Source (Advanced Users)
If you prefer to build from source:
Standard Version
Enhanced Efficiency Version ⭐
📝 Configuration Notes
- Replace
YOUR_API_TOKEN_HERE
with your actual ClickUp API token - NPM method requires no installation or cloning - the package is downloaded automatically
- Build from source requires cloning this repository and running
npm run build
Configuration File Locations
- Cline VSCode Extension:
~/.vscode/extensions/saoudrizwan.claude-dev/globalStorage/saoudrizwan.claude-dev/settings/cline_mcp_settings.json
- Claude Desktop Apps:
- macOS:
~/Library/Application Support/Claude/claude_desktop_config.json
- Windows:
%APPDATA%\Claude\claude_desktop_config.json
- macOS:
Examples
See the examples/
folder for:
- Basic MCP client usage
- Tool integration patterns
- Authentication setup
- Advanced workflows
Run examples with: node examples/basic-usage.js
🔒 Security Features
Production-Grade Security
- Input Validation: XSS and injection prevention with comprehensive sanitization
- API Token Security: Format validation, secure storage, character validation
- Rate Limiting: Sliding window implementation (1000 API, 100 webhook, 10 upload/min)
- HMAC Validation: Timing-safe webhook signature verification
- File Security: Path traversal prevention, dangerous file blocking, 100MB size limits
- URL Validation: SSRF prevention, private IP blocking, protocol validation
- Error Handling: Secure responses without information leakage
Security Testing
- 85+ Test Cases covering all security scenarios
- Zero Vulnerabilities in dependency audit
- Comprehensive Integration Tests for real-world validation
- Security Headers implementation for HTTP protection
📝 Markdown Support
GitHub Flavored Markdown Features
- Headers:
# H1
through###### H6
- Text Formatting:
**bold**
,*italic*
,~~strikethrough~~
- Code:
inline code
and fenced blocks with syntax highlighting - Lists: Ordered, unordered, and task lists with
- [ ]
checkboxes - Links & Images:
[text](url)
and
- Tables: Full table support with alignment
- Blockquotes:
> quoted text
and nested quotes
Smart Processing
- Auto-Detection: Identifies markdown, HTML, or plain text content
- Bidirectional Conversion: Seamless markdown ↔ HTML ↔ plain text
- ClickUp Optimization: Prepares content in format ClickUp expects
- Response Processing: Converts ClickUp responses to readable markdown
🔔 Webhook Processing
Real-time Integration
- Event Processing: Handle all ClickUp events (tasks, comments, goals, etc.)
- HMAC Validation: Secure signature verification with timing-safe comparison
- Event Analysis: Extract relationships, changes, and context from payloads
- Monitoring: Event history, statistics, and retry mechanisms
Supported Events
- Task Events: Created, updated, deleted, status changed, assigned
- Comment Events: Posted, updated, threaded discussions
- Time Events: Time tracked, timer started/stopped
- Goal Events: Created, updated, target progress
- Workspace Events: Lists, folders, spaces created/updated/deleted
Development
Environment Requirements
- Node.js: Version 18.x or higher
- Package Manager: npm or yarn
- IDE: VSCode recommended with TypeScript support
Setup
Building
Running Tests
Testing Markdown Features
Release Procedure
Pre-release Checklist
- Ensure all changes are committed and pushed
- Verify all tests pass:
npm test
- Check build process works:
npm run build
- Update CHANGELOG.md with new version details
Version Update Process
- Update package.json version following semantic versioning:
- MAJOR: Incompatible API changes
- MINOR: New functionality (backward compatible)
- PATCH: Bug fixes (backward compatible)
- Update CHANGELOG.md:
Release Steps
- Build and Test:
- Create Git Tag:
- Publish to NPM:
- Create GitHub Release:
Post-release Verification
- Check npm package: https://www.npmjs.com/package/@chykalophia/clickup-mcp-server
- Verify GitHub release: https://github.com/Chykalophia/ClickUp-MCP-Server---Enhanced/releases
- Test installation:
npm install @chykalophia/clickup-mcp-server@latest
🔧 Technical Architecture
Enhanced Client System
- Base Client: Secure ClickUp API client with axios integration
- Specialized Clients: 9 enhanced clients for different feature areas
- Type Safety: Comprehensive TypeScript schemas with Zod validation
- Error Handling: Structured error responses with user-friendly messages
Performance & Scalability
- Efficient Operations: Bulk operations for multiple items in single requests
- Pagination Support: Handle large datasets efficiently
- Memory Management: Automatic cleanup and optimization
- Caching Strategy: Optimized API usage patterns
Testing Framework
- Security Tests: 47 test cases covering all attack vectors
- Integration Tests: 15 test cases for end-to-end validation
- Error Handling Tests: 23 test cases for robust error processing
- Total Coverage: 85+ test cases with 80%+ code coverage
License
MIT
🎯 Production Readiness
Quality Assurance
- Security Level: HIGH - Production approved with zero vulnerabilities
- Code Quality: TypeScript strict mode, comprehensive validation
- Test Coverage: Security-focused testing with 85+ test cases
- Documentation: Complete guides with security audit and examples
Deployment Features
- Health Checks: Built-in monitoring endpoints
- Environment Validation: Secure configuration verification
- Logging & Monitoring: Structured logging with security event tracking
- Error Recovery: Automatic retry mechanisms and conflict resolution
Performance Metrics
- API Call Reduction: 50-70% fewer calls for common workflows
- Execution Speed: 40-60% faster completion times
- Memory Efficiency: <1% security overhead, optimized resource usage
- Scalability: Supports high concurrency with efficient batch processing
Status: ✅ PRODUCTION READY - Comprehensive ClickUp integration with AI-powered efficiency, production-grade security, and complete API coverage. Ready for immediate deployment and enterprise use.
This server cannot be installed
remote-capable server
The server can be hosted and run remotely because it primarily relies on remote services or has no dependency on the local environment.
Enables comprehensive ClickUp workspace management through 170+ AI-powered tools with GitHub Flavored Markdown support, webhook processing, and production-grade security. Provides 50-70% efficiency gains in common workflows with smart tool suggestions and direct API access.
- 📋 Attribution
- 🚀 Key Features
- 📊 Complete Tool Inventory (170+ Tools)
- 🚀 Efficiency Examples
- 📝 Markdown Examples
- 🚀 Easy Installation
- Get ClickUp API Token
- Configuration
- Configuration File Locations
- Examples
- 🔒 Security Features
- 📝 Markdown Support
- 🔔 Webhook Processing
- Development
- Release Procedure
- 🔧 Technical Architecture
- License
- 🎯 Production Readiness
Related MCP Servers
- AsecurityAlicenseAqualityThis server integrates AI assistants with ClickUp workspaces, enabling task, team, list, and board management through a secure OAuth2 authentication process.Last updated -52212MIT License
- AsecurityAlicenseAqualityEnables AI integrations with ClickUp tasks, supporting resource management, task operations, workspace organization, and AI-powered task recommendations through a standardized protocol.Last updated -181,749352MIT License
- AsecurityAlicenseAqualityAn enhanced Model Context Protocol server that enables AI assistants to interact with ClickUp workspaces, supporting task relationships, comments, checklists, and workspace management through natural language.Last updated -4062MIT License
- AsecurityAlicenseAqualityClickUp MCP Server enables AI assistants to seamlessly interact with your ClickUp workspace. This powerful integration allows Claude to create and manage tasks, access documents, organize folders and lists, add comments, and handle checklists—all through natural conversation.Last updated -4251524MIT License