ClickUp MCP Server

Enables AI assistants to interact directly with the ClickUp REST API v2 for managing tasks, folders, and lists. It supports full workspace hierarchy management, time tracking, and task operations through natural language.

→ smeric28/clickup-mcp · listed on glama

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Known vulnerabilities in dependencies: 2 critical, 2 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 3 credentials: CLICKUP_ACCESS_TOKEN, CLICKUP_CLIENT_SECRET, CLICKUP_REFRESH_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretCLICKUP_ACCESS_TOKEN

configCLICKUP_CLIENT_ID

🔐 secretCLICKUP_CLIENT_SECRET

🔐 secretCLICKUP_REFRESH_TOKEN

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/smeric28-clickup-mcp-1f9m2g)](https://m8ven.ai/mcp/smeric28-clickup-mcp-1f9m2g)

commit: 72d6866344c3ea477b63254268ba315b8aaf541c

code hash: a211ffc47c1d2167ff27ff899715bcfcec7148695354ddca407c3769f7585af9

verified: 4/11/2026, 3:11:36 PM

view raw JSON →