BasecampCAUTION
MCP server for Basecamp 3 with OAuth, FastMCP, and 75 tools for projects, todos, messages, card tables, docs, uploads, and search.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://www.python.org/) [](https://modelcontextprotocol.io/) [](https://basecamp.com/) [](LICENSE)
An MCP server for Basecamp 3. It lets MCP-capable clients such as Codex, Cursor, and Claude Desktop read and manage Basecamp projects through OAuth-authenticated Basecamp API calls.
The main server is basecamp_fastmcp.py. It uses the official mcp.server.fastmcp Python SDK and exposes 79 tools covering projects, todos, message boards, campfires, card tables, inbox forwards, documents, uploads, comments, events, webhooks, and search.
What It Can Do
- Browse Basecamp projects and project details.
- Search across projects, todos, messages, campfire lines, comments, uploads, and schedules.
- Read and manage todolists, todos, todo groups, and completion state.
- Read and create message board messages, including drafts and categories.
- Read campfire lines.
- Read and create comments.
- Work with card tables, columns, cards, and card steps.
- Read inbox forwards and replies.
- Read daily check-ins and answers.
- Upload attachments and inspect uploads.
- Read and manage documents, including drafts.
- List events and manage webhooks.
- Generate local MCP configuration for Codex, Cursor, and Claude Desktop.
Requirements
- Python 3.10 or newer.
- A Basecamp 3 account.
- A Basecamp OAuth application from .
- A client that can run local MCP servers, such as Codex, Cursor, or Claude Desktop.
If your system Python is older, use uv; it can create a virtual environment with a newer Python version.
Quick Start
Clone the repository and install dependencies:
git clone https://github.com/georgeantonopoulos/Basecamp-
de0a72914c13OBSERVED · 2026-10-07Exposed tools (82)
49 read · 29 write · 4 destructive. Blast radius: 4 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
archive_todo | read | Archive a todo item. |
complete_card | read | Mark a card as complete. |
complete_card_step | read | Mark a card step as complete. |
complete_todo | read | Mark a todo item as complete. |
create_attachment | write | Upload a file as an attachment. |
create_card | write | Create a new card in a column. |
create_card_step | write | Create a new step (sub-task) for a card. |
create_column | write | Create a new column in a card table. |
create_comment | write | Create a comment on a Basecamp item. |
create_document | write | Create a document in a vault. |
create_draft_document | write | Create a draft document in a vault without publishing it. |
create_draft_message | write | Create a draft message on a project |
create_message | write | Create a new message on a project |
create_todo | write | Create a new todo item in a todo list. |
create_todolist | write | Create a new todo list in a project. |
create_todolist_group | write | Create a new group inside a todo list. |
create_webhook | write | Create a webhook. |
delete_card_step | destructive | Delete a card step. |
delete_todo | destructive | Move a todo item to the trash. |
delete_webhook | destructive | Delete a webhook. |
download_attachment | read | Download an inline comment/message attachment as MCP content. |
download_upload | write | Download the binary content of an upload (PDF, image, document, ...). |
get_assignable_people | read | Get all people who can have to-dos assigned to them. |
get_campfire_lines | read | Get recent messages from a Basecamp campfire (chat room). |
get_card | read | Get details for a specific card. |
get_card_step | read | Get details for a specific card step. |
get_card_steps | read | Get all steps (sub-tasks) for a card. |
get_card_table | read | Get the card table details for a project, including its columns. |
get_card_tables | read | Get all card tables for a project. |
get_cards | read | Get all cards in a column. |
get_column | read | Get details for a specific column. |
get_columns | read | Get all columns in a card table. |
get_comments | read | Get comments for a Basecamp item. |
get_daily_check_ins | read | Get project |
get_document | read | Get a single document. |
get_documents | read | List documents in a vault. |
get_events | read | Get events for a recording. |
get_forward | read | Get a specific forwarded email by ID. |
get_forwards | read | Get all forwarded emails from a project |
get_inbox | read | Get the inbox for a project (for email forwards). |
get_inbox_replies | read | Get all replies to a forwarded email. |
get_inbox_reply | read | Get a specific reply to a forwarded email. |
get_message | read | Get a specific message by ID. |
get_message_board | read | Get the message board for a project. |
get_message_categories | read | Get message categories (types) for a project. |
get_messages | read | Get all messages from a project |
get_overdue_todos | read | Get overdue to-dos for the WHOLE ACCOUNT, grouped by how late they are. |
get_person_assignments | read | Get all active, pending to-dos assigned to a specific person. |
get_project | read | Get one project |
get_projects | read | List Basecamp projects. Returns a compact summary by default. |
get_question_answers | read | Get answers on daily check-in question. |
get_todo | read | Get a single todo item by its ID. |
get_todolist | read | Get a specific todo list by ID. |
get_todolist_groups | read | Get all groups in a todo list. |
get_todolists | read | Get todo lists for a project. |
get_todos | read | Get todos from a todo list. |
get_upload | write | Get details for a specific upload. |
get_uploads | read | List uploads in a project or vault. |
get_webhooks | read | List webhooks for a project. |
global_search | read | Search projects, todos and campfire messages across all projects. |
move_card | write | Move a card to a new column. |
move_column | write | Move a column to a new position. |
put_column_on_hold | write | Put a column on hold (freeze work). |
remove_column_hold | destructive | Remove hold from a column (unfreeze work). |
reposition_todo | write | Reposition a todo within its list, or move it to another list or group. |
reposition_todolist_group | read | Reposition a todo list group to a new location within its list. |
search_basecamp | read | Search across Basecamp projects, todos, and messages. |
trash_document | write | Move a document to trash. |
trash_forward | write | Move a forwarded email to trash. |
trash_todolist | write | Move a todo list to the trash. |
uncomplete_card | read | Mark a card as incomplete. |
uncomplete_card_step | read | Mark a card step as incomplete. |
uncomplete_todo | read | Mark a todo item as incomplete. |
unwatch_column | read | Unsubscribe from notifications for a column. |
update_card | write | Update a card. |
update_card_step | write | Update a card step. |
update_column | write | Update a column title. |
update_column_color | write | Update a column color. |
update_document | write | Update a document. |
update_todo | write | Update an existing todo item. |
update_todolist | write | Update an existing todo list. |
watch_column | read | Subscribe to notifications for changes in a column. |
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (2 observation(s))
- Network
- declared (5 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (5)
secret = "sensitive-provider-response"
delete_card_step, delete_todo, delete_webhook, remove_column_hold
f"http://127.0.0.1:{server.server_port}/auth/callback?code=private-code",mcp, httpx, anyio
- `download_attachment` MCP tool for retrieving inline comment/message attachments. Pass the `content_attachments[].download_url` returned by `get_comments` / `get_messages` and receive the file as MC
Gates applied: no_behavioural_pass.
de0a72914c13full audit observations/trust-audit/mcp-server/georgeantonopoulos__basecamp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | de0a72914c13 | CAUTION | B | 89 | first audit |
Questions
What is the Basecamp MCP server?
MCP server for Basecamp 3 with OAuth, FastMCP, and 75 tools for projects, todos, messages, card tables, docs, uploads, and search.
What tools does Basecamp expose?
82 in total: 49 read-only, 29 that write, and 4 that can delete or overwrite (delete_card_step, delete_todo, delete_webhook, remove_column_hold). Every one is listed on this page with its risk.
Is Basecamp safe to connect to an agent?
With care. The audit graded it B (89/100) and found 5 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 4 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Basecamp need?
It reads BASECAMP_ACCESS_TOKEN, BASECAMP_CLIENT_SECRET, BASECAMP_MCP_TOKEN_FILE, BASECAMP_PASSWORD, FLASK_SECRET_KEY and MCP_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Basecamp run?
It speaks stdio, so it runs as a local process your client starts.
How current is this page?
The grade is for one exact copy of the source (de0a72914c13), read on 2026-10-07. The repository is watched and re-audited when it changes.