TickTick MCP Service

Bring TickTick task and goal data into MCP workflows with official OAuth and Open API support.

→ GalaxyXieyu/didatodolist-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

1 flow detected: DIDA_ACCESS_TOKEN. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 6 credentials: DIDA_ACCESS_TOKEN, MCP_API_KEY, DIDA_TOKEN, DIDA_PASSWORD, DIDA_CLIENT_SECRET, DIDA_REFRESH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretDIDA_ACCESS_TOKEN— 在 .env 中配置 MCP_API_KEY=...、DIDA_CLIENT_ID、DIDA_CLIENT_SECRET；运行 python scripts/oauth_authenticate.py --port 38000 完成一次性授权，脚本会将、DIDA_REFRESH_TOKEN 写入 .env。

configDIDA_BASE_URL

configOPENCLAW_CONFIG_PATH

🔐 secretMCP_API_KEY— 在 .env 中配置 =...、DIDA_CLIENT_ID、DIDA_CLIENT_SECRET；运行 python scripts/oauth_authenticate.py --port 38000 完成一次性授权，脚本会将 DIDA_ACCESS_TOKEN、DIDA_REFRESH_TOKEN 写入 .env。

🔐 secretDIDA_TOKEN

configDIDA_EMAIL

🔐 secretDIDA_PASSWORD

configDIDA_CLIENT_ID— 在 .env 中配置 MCP_API_KEY=...、、DIDA_CLIENT_SECRET；运行 python scripts/oauth_authenticate.py --port 38000 完成一次性授权，脚本会将 DIDA_ACCESS_TOKEN、DIDA_REFRESH_TOKEN 写入 .env。

🔐 secretDIDA_CLIENT_SECRET— 在 .env 中配置 MCP_API_KEY=...、DIDA_CLIENT_ID、；运行 python scripts/oauth_authenticate.py --port 38000 完成一次性授权，脚本会将 DIDA_ACCESS_TOKEN、DIDA_REFRESH_TOKEN 写入 .env。

configDIDA_REDIRECT_URI— 与环境变量对齐，例如 http://localhost:38000/callback

🔐 secretDIDA_REFRESH_TOKEN— 在 .env 中配置 MCP_API_KEY=...、DIDA_CLIENT_ID、DIDA_CLIENT_SECRET；运行 python scripts/oauth_authenticate.py --port 38000 完成一次性授权，脚本会将 DIDA_ACCESS_TOKEN、写入 .env。

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/galaxyxieyu-didatodolist-mcp-oqgdtc)](https://m8ven.ai/mcp/galaxyxieyu-didatodolist-mcp-oqgdtc)

commit: e2f2df1f15a942a703c97c26273a8e4699489ead

code hash: 8989ab486fbcfd29706a6525e3772a063b43833424e8e0df7afd854f500d71f3

verified: 6/17/2026, 11:38:49 AM

view raw JSON →