Atlas / MCP servers / nazruden / ClickUp

ClickUpBLOCK

Name: ClickUp
Author: nazruden

mcp/nazruden/clickup

MCP server by nazruden · Audited 2026-10-09

A Model Context Protocol server implementation for ClickUp integration, enabling AI assistants to interact with ClickUp workspaces.

Verdict

BLOCK

Grade

Trust score

59 /100

Exposed tools

31 13r · 14w · 4d

Transport

stdio

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://smithery.ai/server/@Nazruden/clickup-mcp-server) [](https://badge.fury.io/js/%40nazruden%2Fclickup-server) [](https://opensource.org/licenses/MIT)

A Model Context Protocol server implementation for ClickUp integration, enabling AI assistants to interact with ClickUp workspaces.

This server runs via Stdio as per the MCP specification when invoked by an MCP client.

Quick Start

This server uses your ClickUp Personal API Token for authentication.

Generate a Personal API Token: In your ClickUp settings, navigate to "My Settings" > "Apps" and generate a token.
Configure your MCP Client (e.g., Claude for Desktop): Set the required environment variable when configuring the server for your client.

Example configuration snippet for an MCP client:

{
"mcpServers": {
"clickup": {
"command": "npx",
"args": ["@nazruden/clickup-server"],
"env": {
"CLICKUP_PERSONAL_TOKEN": "your_personal_api_token_here"
}
}
}
}

Restart your MCP Client.

The server will be automatically downloaded and started by the MCP client when needed.

Installing via Smithery

To install ClickUp MCP Server for Claude Desktop automatically via Smithery:

npx -y @smithery/cli install @Nazruden/clickup-mcp-server --client cla

Read from source at commit b4cbb7fce802OBSERVED · 2026-10-09

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add clickup-server --env CLICKUP_CLIENT_SECRET=${CLICKUP_CLIENT_SECRET} --env CLICKUP_PERSONAL_TOKEN=${CLICKUP_PERSONAL_TOKEN} --env CLICKUP_PERSONAL_TOKEN_INTEGRATION=${CLICKUP_PERSONAL_TOKEN_INTEGRATION} --env ENCRYPTION_KEY=${ENCRYPTION_KEY} -- npx -y @nazruden/[email protected]

claude-desktop

{
  "mcpServers": {
    "clickup-server": {
      "command": "npx",
      "args": [
        "-y",
        "@nazruden/[email protected]"
      ],
      "env": {
        "CLICKUP_CLIENT_SECRET": "${CLICKUP_CLIENT_SECRET}",
        "CLICKUP_PERSONAL_TOKEN": "${CLICKUP_PERSONAL_TOKEN}",
        "CLICKUP_PERSONAL_TOKEN_INTEGRATION": "${CLICKUP_PERSONAL_TOKEN_INTEGRATION}",
        "ENCRYPTION_KEY": "${ENCRYPTION_KEY}"
      }
    }
  }
}

Exposed tools (31)

13 read · 14 write · 4 destructive. Blast radius: 4 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`clickup_create_board`	write	Create a new board view in a ClickUp space.
`clickup_create_doc`	write	Creates a new Doc within a Workspace.
`clickup_create_doc_page`	write	Creates a new page within a specific Doc.
`clickup_create_folder`	write	Creates a new Folder within a Space.
`clickup_create_list`	write	Creates a new List within a Folder or Space.
`clickup_create_space`	write	Creates a new Space within a Workspace.
`clickup_create_task`	write	Create a new task in ClickUp workspace
`clickup_create_view`	write	Creates a new View within a Team, Space, Folder, or List.
`clickup_delete_folder`	destructive	Deletes a Folder.
`clickup_delete_space`	destructive	Deletes a Space.
`clickup_delete_view`	destructive	Deletes a View.
`clickup_edit_doc_page_content`	write	Updates the content and/or title of a specific Doc page.
`clickup_get_custom_fields`	read	Retrieves all accessible Custom Fields for a given List.
`clickup_get_doc_page_content`	read	Retrieves the content (Markdown) of a specific Doc page.
`clickup_get_doc_pages`	read	Retrieves the list of pages within a specific Doc.
`clickup_get_folder`	read	Retrieves details for a specific Folder.
`clickup_get_folders`	read	Retrieves all Folders within a given Space.
`clickup_get_lists`	read	Get all lists in a specific folder.
`clickup_get_space`	read	Retrieves details for a specific Space.
`clickup_get_spaces`	read	Retrieves all Spaces for a given Workspace (Team).
`clickup_get_teams`	read	Get all teams (workspaces) accessible to the authenticated user.
`clickup_get_view_details`	read	Retrieves details for a specific View.
`clickup_get_view_tasks`	read	Retrieves tasks belonging to a specific View.
`clickup_get_views`	read	Retrieves all Views for a given parent (Team, Space, Folder, or List).
`clickup_remove_task_custom_field_value`	destructive	Removes the value of a Custom Field from a specific task.
`clickup_search_docs`	read	Searches for Docs within a Workspace (Team).
`clickup_set_task_custom_field_value`	write	Sets the value of a Custom Field on a specific task.
`clickup_update_folder`	write	Updates an existing Folder.
`clickup_update_space`	write	Updates an existing Space.
`clickup_update_task`	write	Update an existing task in ClickUp
`clickup_update_view`	write	Updates an existing View. Note: ClickUp API v2 /view/{view_id} PUT endpoint currently has known issues (Internal Server Error).

Trust audit

BLOCKgrade F · trust 59/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (3 observation(s))
Network: declared (6 observation(s))
Shell: declared (6 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (19)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

scripts/release.js:90

exec(`npm version ${VERSION_TYPE} --no-git-tag-version`);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

scripts/release.js:106

exec(`git commit -m "chore(release): bump version to ${newVersion}"`);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

scripts/release.js:109

exec(`git tag -a v${newVersion} -m "Release v${newVersion}"`);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

scripts/release.js:113

exec(`git push origin v${newVersion}`);

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

src/__integration__/setup/integration.setup.ts:43

console.log(`  - Token: ${INTEGRATION_CONFIG.clickupToken.substring(0, 20)}...`);

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

clickup_delete_folder, clickup_delete_space, clickup_delete_view, clickup_remove_task_custom_field_value

Why it matters. 4 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius