Skip to main content
Glama

GitHub Stars Maintenance

ClickUp MCP Server - Remote SaaS

Build Status Coverage License Version Dependencies TypeScript Docker

Securely connect your ClickUp workspace to AI assistants without managing API keys.

A Remote MCP Server hosted on CloudFlare Workers that enables AI agents to interact with ClickUp workspaces through OAuth 2.0 authentication. Transform your task management workflow with 72 tools across 12 categories.

šŸš€ Ready to get started? Authenticate with ClickUp →

✨ Key Benefits

  • šŸ” Zero API Key Management - OAuth 2.0 secure authentication

  • ā˜ļø Always Available - Hosted on CloudFlare Workers global network

  • šŸš€ 72 Tools Across 12 Categories - Comprehensive ClickUp integration

  • šŸ’Ž Free & Premium Tiers - Start free, upgrade for advanced features

  • šŸ›”ļø Enterprise Security - Encrypted storage, audit logging, rate limiting

  • ⚔ Lightning Fast - Sub-100ms response times globally

šŸ†š Free vs Premium

Feature

Free Tier

Premium Tier ($4.99/mo)

Basic Operations

āœ… Create, read, update tasks

āœ… All free features

Workspace Navigation

āœ… Hierarchy, lists, folders

āœ… Enhanced navigation

Rate Limits

100 requests/minute

⚔ 500 requests/minute

Bulk Operations

āŒ

āœ… Create/update/move multiple tasks

Time Tracking

āŒ

āœ… Start/stop timers, time entries

Custom Fields

āŒ

āœ… Full custom field management

Project Management

āŒ

āœ… Gantt charts, milestones

Advanced Tools

āŒ

āœ… 40+ premium tools

Support

Community

šŸ“ž Priority support

šŸš€ Quick Start (5 minutes)

Step 1: Authenticate with ClickUp OAuth

Click the authentication link to start the secure OAuth 2.0 flow:

https://clickup-mcp.workers.dev/auth/login

What happens:

  1. You'll be redirected to ClickUp's authorization page

  2. Log in and authorize access to your workspace

  3. ClickUp redirects back with an authorization code

  4. The server securely exchanges the code for an access token

  5. Your access token is encrypted and stored securely

  6. You receive a JWT session token (24-hour lifetime)

Security Note: You never expose your ClickUp API key! OAuth handles all authentication automatically and securely.

Step 2: Save Your JWT Session Token

After authorization, you'll receive a JWT token. Save it securely - you'll need it to configure your AI client.

Example JWT token:

eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1c2VyX2lkIjoiMTIzNDU2Iiwi...

Token Details:

  • 24-hour lifetime (auto-expires for security)

  • Use /auth/refresh endpoint to renew before expiry

  • Stored JWT contains: user ID, workspace ID, tier level

Step 3: Configure Your AI Client

Claude Desktop Configuration

Add this to your MCP settings:

{ "mcpServers": { "clickup": { "url": "https://clickup-mcp.workers.dev/mcp", "headers": { "Authorization": "Bearer YOUR_JWT_TOKEN" }, "name": "ClickUp Workspace", "description": "Manage ClickUp tasks and projects" } } }

Other MCP Clients

Most MCP-compatible clients support remote servers. Use:

  • URL: https://clickup-mcp.workers.dev/mcp

  • Authentication: Bearer token in headers

  • Transport: HTTP Streamable (recommended)

šŸ› ļø Available Tools (72 Across 12 Categories)

Core Tools (Free Tier)

Category

Tools

Description

Workspace

3 tools

Navigate hierarchy, get members, view structure

Basic Tasks

8 tools

Create, read, update, delete, move, duplicate

Lists & Folders

6 tools

Manage organizational structure

Comments

2 tools

Add and view task comments

Premium Tools

Category

Tools

Description

Bulk Operations

6 tools

Create/update/move/delete multiple items

Time Tracking

5 tools

Start/stop timers, manage time entries

Custom Fields

6 tools

Full custom field management

Project Management

5 tools

Gantt charts, milestones, templates

Advanced Tasks

6 tools

Scheduling, dependencies, parallel groups

Documents

7 tools

Create and manage ClickUp documents

Space Management

7 tools

Advanced space operations

Tags

3 tools

Tag management and organization

Dependencies

5 tools

Task relationships and links

Attachments

3 tools

File management

Tool Categories Breakdown

šŸ“Š Total: 72 tools across 12 categories ┣━ šŸ“ Task Management: 27 tools (core CRUD + advanced features) ┣━ šŸ“‹ List Management: 12 tools (organization and list operations) ┣━ 🌐 Workspace Operations: 8 tools (hierarchy and workspace navigation) ┣━ ā±ļø Time Tracking: 6 tools (productivity and time management) ┣━ šŸ”§ Custom Fields: 5 tools (metadata and custom properties) ┣━ šŸ¢ Space Management: 4 tools (space organization) ┣━ šŸŽÆ Goal Tracking: 3 tools (OKRs and goal management) ┣━ šŸ‘¤ User Management: 2 tools (user accounts and permissions) ┣━ šŸ‘„ Team Management: 2 tools (team configuration) ┣━ šŸ’¬ Comment Management: 2 tools (task discussions) ┣━ šŸ‘ļø View Management: 1 tool (custom views) ┗━ šŸ”— Other: 1 tool (utilities)

All tools tested and validated via npm run test:ultrathink

šŸ’Ž Upgrade to Premium

Instant Activation

Get your premium subscription link:

curl -X POST https://clickup-mcp.workers.dev/stripe/create-checkout \ -H "Authorization: Bearer YOUR_JWT_TOKEN"

Complete payment through Stripe's secure checkout and premium features activate immediately!

Why Upgrade?

  • 10x Productivity with bulk operations

  • Time Tracking integrated into AI workflows

  • Complex Project Management with dependencies and scheduling

  • 5x Rate Limits for power users

  • Priority Support when you need help

šŸ”’ Security & Privacy

How We Protect Your Data

  • šŸ” AES-256-GCM Encryption - All API keys encrypted at rest

  • šŸ›”ļø OAuth 2.0 - Industry-standard secure authentication

  • ā° Session Management - JWT tokens auto-expire after 24 hours

  • šŸ“Š Audit Logging - Complete action history for security monitoring

  • 🚪 User Isolation - Complete data separation between users

  • šŸŒ Global Edge - CloudFlare's security infrastructure

What We Store

āœ… Encrypted API Keys - For workspace access āœ… Team IDs - To identify your workspace āœ… Session Tokens - Auto-expire after 24 hours āœ… Usage Metrics - Anonymous for rate limiting

What We Don't Store

āŒ Your ClickUp password āŒ Task content or descriptions āŒ Unencrypted sensitive data āŒ Personal information beyond email

šŸ—ļø Architecture

The Remote MCP Server uses a secure, scalable architecture on CloudFlare Workers:

graph TB subgraph "Client Layer" User[AI Agent/Client] end subgraph "CloudFlare Workers - Remote MCP Server" Worker[Worker Entry Point] OAuth[OAuth 2.0 Service] UserMgmt[User Service<br/>Multi-tenant Isolation] MCPServer[MCP Protocol Handler<br/>HTTP Streamable] Tools[Tool Layer<br/>72 Tools - 12 Categories] Security[Security Layer<br/>Encryption + Audit] end subgraph "Storage" KV[(CloudFlare KV<br/>Encrypted Sessions)] R2[(CloudFlare R2<br/>Audit Logs)] end subgraph "External" ClickUp[ClickUp API v2] Stripe[Stripe Billing] end User -->|1. OAuth Login| Worker Worker --> OAuth OAuth -->|2. Authorize| ClickUp ClickUp -->|3. Access Token| OAuth OAuth -->|4. Encrypt & Store| UserMgmt UserMgmt -->|Store| KV User -->|5. MCP Request + JWT| MCPServer MCPServer -->|6. Validate| UserMgmt UserMgmt -->|7. Decrypt Key| KV MCPServer -->|8. Route| Tools Tools -->|9. ClickUp API| ClickUp ClickUp -->|10. Response| User Security -->|Rate Limit| Tools Security -->|Audit| R2 UserMgmt -->|Check Tier| Stripe style User fill:#e1f5ff style Worker fill:#fff9e1 style OAuth fill:#ffe1e1 style KV fill:#e1ffe1 style ClickUp fill:#e1e1ff

Architecture Highlights:

  • OAuth 2.0: Secure authorization without exposing API keys

  • JWT Sessions: Stateless authentication with 24-hour tokens

  • AES-256-GCM Encryption: All API keys encrypted at rest in CloudFlare KV

  • Multi-Tenancy: Complete user isolation with per-user rate limiting

  • Global Edge: Deployed on CloudFlare's 300+ data centers worldwide

  • Audit Trail: All actions logged to CloudFlare R2 for security monitoring

šŸš€ Usage Examples

Once configured, use natural language with your AI assistant:

Basic Task Management

"Create a task called 'Review Q1 Reports' due next Monday in my Marketing list" "Update the task 'Website Redesign' status to 'In Progress'" "Show me all tasks in the Development folder"

Time Tracking (Premium)

"Start tracking time on the 'Client Meeting Prep' task" "Log 2 hours on the 'Code Review' task for yesterday" "Show me my time entries for this week"

Bulk Operations (Premium)

"Create 5 tasks for the sprint planning: 1. Setup environment 2. Database migration 3. API development 4. Frontend integration 5. Testing and QA" "Move all 'In Review' tasks to 'Completed'"

Project Management (Premium)

"Create a project plan with dependencies for our website launch" "Generate a Gantt chart for the current sprint" "Set up milestones for the Q2 product release"

šŸ› ļø Development & Self-Hosting

Local Development

# Clone repository git clone https://github.com/YOUR_GITHUB_USERNAME/clickup-remote-mcp-server.git cd clickup-mcp-server # Install dependencies npm install # CloudFlare Workers development npm run dev:worker # Traditional MCP development npm run build && npm start

Self-Hosting on CloudFlare Workers

See DEPLOYMENT.md for complete self-hosting instructions including:

  • CloudFlare Workers setup

  • OAuth app configuration

  • KV namespace creation

  • Environment variables

  • Security configuration

Testing

# Run comprehensive tool testing npm run test:ultrathink # Run unit tests npm test # Test specific functionality npm run test:integration

🌐 Alternative Installation Methods

NPX Installation (Traditional Local MCP)

For users who prefer local installation:

{ "mcpServers": { "ClickUp": { "command": "npx", "args": ["-y", "@YOUR_GITHUB_USERNAME/clickup-remote-mcp-server@latest"], "env": { "CLICKUP_API_KEY": "your-api-key", "CLICKUP_TEAM_ID": "your-team-id" } } } }

Note: Local installation requires manual API key management and lacks the security, scalability, and premium features of the hosted version.

šŸ”§ Configuration Options

Tool Filtering

Control which tools are available:

# Environment variables for self-hosting FREE_TIER_TOOLS="get_workspace_hierarchy,create_task,get_task,update_task" PREMIUM_TIER_TOOLS="create_bulk_tasks,time_tracking_tools,custom_fields"

Rate Limiting

# Adjust limits based on subscription MAX_REQUESTS_PER_MINUTE=100 # Free tier MAX_REQUESTS_PER_MINUTE=500 # Premium tier

šŸ“Š API Endpoints

The remote MCP server provides these endpoints:

GET /auth/login - Initiate OAuth flow GET /auth/callback - OAuth callback handler POST /auth/refresh - Refresh access token POST /auth/api-key - Store encrypted API key POST /auth/logout - Terminate session POST /mcp - MCP HTTP Streamable endpoint GET /mcp/sse - Server-Sent Events transport WS /mcp/ws - WebSocket transport POST /stripe/create-checkout - Create premium subscription POST /stripe/webhook - Handle subscription events GET /health - Health check GET /metrics - Usage statistics

šŸ› Troubleshooting

Common Issues

"Authentication Required"

  • Your session expired. Visit /auth/login to get a new token

"API Key Not Found"

  • Store your API key using the /auth/api-key endpoint

"Rate Limit Exceeded"

  • Wait 1 minute or upgrade to Premium for higher limits

"Tool Not Available"

  • This tool requires Premium access

Getting Help

  1. Check Service Status: curl https://clickup-mcp.workers.dev/health

  2. Review Setup: Ensure JWT token and API key are correctly configured

  3. Documentation: See USER_SETUP_GUIDE.md

  4. Community Support: Create an issue on GitHub

  5. Premium Support: Priority response for premium subscribers

šŸ“ˆ Roadmap

Current (v1.0)

  • āœ… OAuth 2.0 authentication with ClickUp

  • āœ… 72 tools across 12 categories

  • āœ… Free and Premium tiers

  • āœ… Enterprise security features

  • āœ… Global CloudFlare deployment

Coming Soon

  • 🚧 Multi-workspace support

  • 🚧 Team collaboration features

  • 🚧 Webhook integrations

  • 🚧 Mobile app support

  • 🚧 Advanced reporting dashboard

  • 🚧 Custom integrations

šŸ’° Pricing

  • Free Tier: $0/month - Essential ClickUp operations

  • Premium Tier: $4.99/month - Advanced features + 5x rate limits

  • Enterprise: Custom pricing - Team features, SSO, dedicated support

All plans include:

  • āœ… Secure OAuth 2.0 authentication

  • āœ… Encrypted data storage

  • āœ… Global CloudFlare infrastructure

  • āœ… 99.9% uptime SLA

šŸ¤ Support the Project

This is an open-source project that helps thousands of users automate their ClickUp workflows. Your support helps us:

  • šŸ”§ Maintain and improve the service

  • šŸš€ Add new features and integrations

  • šŸ›”ļø Enhance security and reliability

  • šŸ“š Create better documentation

License: MIT

This project is licensed under the MIT License - see the LICENSE file for details.

Privacy Policy

We are committed to protecting your privacy. See our privacy practices:

  • Data encrypted at rest and in transit

  • No selling of personal information

  • Minimal data collection (only what's needed for functionality)

  • Full audit logs available to users

  • GDPR compliant data handling

Terms of Service

By using this service, you agree to:

  • Use the service in compliance with ClickUp's Terms of Service

  • Not abuse rate limits or attempt to circumvent security measures

  • Not use the service for illegal or harmful activities

  • Respect intellectual property rights

šŸ™ Acknowledgments

Special thanks to:


Ready to transform your ClickUp workflow? Get started now →

Need help? Check our User Setup Guide or Deployment Guide

-
security - not tested
A
license - permissive license
-
quality - not tested

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/gofullthrottle/mcp-server-clickup'

If you have feedback or need assistance with the MCP directory API, please join our Discord server