ClickUp MCP Pro exposes nearly every ClickUp operation as a typed Model Context Protocol tool — so Claude Code (and any MCP client) can drive your entire workspace: tasks, lists, folders, spaces, docs, chat, goals, sprints, time tracking, custom fields, webhooks, guests and more. When a niche endpoint isn't wrapped, clickup_raw reaches the rest of the API directly, giving you 100% coverage.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
form-data uses unsafe random function in form-data for choosing boundary
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
process.env. You'll be asked to provide them before it can run.CLICKUP_API_TOKEN— "": "pk_your_token_here",CLICKUP_DISABLE_RAW— false true hides the clickup_raw tool.CLICKUP_MAX_RETRIES— 3 Max retries on 429/5xx/network errors.CLICKUP_MAX_UPLOAD_BYTES— 52428800 Max attachment size (50 MB) for uploads.CLICKUP_READONLY— Readonly mode (=true) blocks every write while keeping reads working — safe exploration.CLICKUP_TEAM_ID— "": "9007012345"CLICKUP_TIMEOUT_MS— 60000 Per-request timeout.CLICKUP_TOKEN— CLICKUP_API_TOKEN ✅ — Personal API token (pk_...). is also accepted.CLICKUP_UPLOAD_DIR— Restrict upload_task_attachment(file_path) to this base directory.[](https://m8ven.ai/mcp/helbertparanhos-clickup-mcp-pro-1o2gbp)