Best of · Work & business apps
Best project and task management tools for AI agents
The 10 highest-scoring of 15 project and task management tools on the Anchor benchmark, with a pick for each need and where each one falls short. Scores come from public evidence, re-checked as vendors change.
- 15 ranked
- 2 agent-ready
- 11 hosted endpoints
- Updated 9 October 2026
Top three
Picks by need
Worked out from the scores, prices and facts, so they change when the research does.
Schema & documentation
Asana BB
91/100 on schema & documentation, against 88 for the overall leader.
Maintenance & community
Todoist B
88/100 on maintenance & community, against 85 for the overall leader.
Transparency & trust
87/100 on transparency & trust, against 80 for the overall leader.
Self-hosting under an open licence
Plane B
self-hosted, Plane Community Edition is AGPL-3 licence.
Also OpenProject, self-hosted, GPL-3 licence.
The shortlist
| # | Tool | Grade | Best for | Price | Where |
|---|---|---|---|---|---|
| 1 | monday.com monday.com Ltd. |
BB 76.4 | Teams that already run projects on monday.com boards and want an agent to create items, change status, post updates and read board summaries through MCP or GraphQL. | Freemium | hosted |
| 2 | Asana Asana, Inc. |
BB 70.1 | Teams already on Asana that want an agent to create and update tasks, comment, post status updates and read project and portfolio summaries. | $10.99 / seat-mo | hosted |
| 3 | Basecamp 37signals LLC |
B 67.9 | Teams already on Basecamp that want an agent to create and complete to-dos, move cards, post messages and comments, and read overdue work and assignments, either through the CLI or the REST API. | $25 / mo | hosted and local |
| 4 | Plane Plane Software, Inc. |
B 67.6 | Teams that want an issue tracker they can also self-host, with an agent creating and updating work items, cycles, modules and pages over MCP. | $6 / seat-mo | hosted and local |
| 5 | Todoist Doist |
B 66.9 | Individuals and small teams who already keep tasks in Todoist and want an agent to add, reschedule, comment and report through MCP. | $7 / seat-mo | hosted and local |
| 6 | Teamwork.com Teamwork Crew Limited |
B 65.9 | Agencies and services firms already on Teamwork.com that want an assistant to create and update tasks, log time, read workload and budgets, and answer Desk tickets. | $9.99 / seat-mo | hosted and local |
| 7 | Trello Atlassian (Trello, Inc.) |
C 61.1 | Teams already on Trello that want an agent to create and move cards, set owners and due dates, comment and react to changes through webhooks. | $5 / seat-mo | hosted |
| 8 | ClickUp Mango Technologies, Inc. DBA ClickUp |
C 60.9 | Teams already working in ClickUp that want an assistant to create and update tasks, comment, log time and read Docs through one OAuth connection. | $7 / seat-mo | hosted |
| 9 | Shortcut Shortcut Software Company |
C 60.2 | Software teams already on Shortcut that want an agent to search, create and update stories, epics, iterations and docs, and coding agents that pick up assigned stories. | $8.50 / seat-mo | hosted |
| 10 | Wrike Wrike, Inc. |
C 60.1 | Teams already on Wrike that want an assistant to find work, create tasks and projects from notes, update status in bulk, comment and check approvals. | $10 / seat-mo | hosted |
5 more are ranked in the full table.
How to choose
- Agent accounts and scopesCheck whether an agent can have its own account and whether its token can be limited to specific projects, so it cannot read or change work outside its remit.
- Search and filter depthCheck whether the API can filter by due date, owner and status in one query, since finding overdue work should not mean paging through every task.
- Comments and change eventsCheck whether comments and status changes can be read back as events, so an agent can notice when a human has replied to work it owns.
- Project summary reportingCheck whether a project summary can be read in one call with status counts and overdue items, so an agent can report progress without assembling it from raw tasks.
How the benchmark tests this category. The same project of twenty tasks in each listing. The same tasks run through its API or MCP server (create a task with an owner and due date, update status, add a comment, find overdue work, read a project summary). We check search, permissions and events. In this run listings are graded from public evidence against the published checklist.
Each one in detail
monday.com
BB 76.4/100monday.com is a hosted work management platform built on boards, items and columns. Agents reach it through a GraphQL API at api.monday.com/v2 and an official hosted MCP server, using personal API tokens or OAuth.
Verdict The GraphQL API publishes its full schema, accepts an Idempotency-Key header on mutations and reports limits in RateLimit headers, and a documented signup API lets an agent create its own account and token. Personal tokens carry every permission their user has, daily calls stop at 1,000 below Pro, and the status page shows two long platform incidents since July 2026.
Choose it for Teams that already run projects on monday.com boards and want an agent to create items, change status, post updates and read board summaries through MCP or GraphQL.
Strengths
- Full GraphQL schema is public as SDL and JSON at api.monday.com/v2/get_schema, with a copy for each dated API version
- Mutations accept an
Idempotency-Keyheader, with responses cached for 30 minutes and replays markedIdempotency-Replayed: true - A documented signup API at signup-logic.monday.com creates an account and returns an API token after an agent captcha, with no browser step
Weaknesses
- Personal API tokens have no scopes. Each carries every permission its user has in the app
- 1,000 API calls a day on Free, Basic and Standard, shared with MCP tool calls, against 10,000 on Pro and 25,000 on Enterprise
- status.monday.com lists a critical platform incident of 2 hours 8 minutes on 5 September 2026 and a major latency incident of 2 hours 57 minutes on 13 July 2026
Price FreemiumAuth OAuth or keyx402 nohosted
Asana
BB 70.1/100Asana is a hosted work management product for tasks, projects, portfolios and goals. Agents reach it through a REST API with a public OpenAPI spec, or through the vendor's hosted MCP server.
Verdict The REST API has a public OpenAPI spec with 251 operations, scoped OAuth, field selection and written rate limits, and works on the free plan. The MCP server grants every tool to each authorisation with no scopes, and status.asana.com shows three major incidents affecting the API between 31 August and 30 September 2026.
Choose it for Teams already on Asana that want an agent to create and update tasks, comment, post status updates and read project and portfolio summaries.
Strengths
- Public OpenAPI 3.0 spec with 251 described operations, rebuilt almost daily, plus llms.txt and Markdown copies of every docs page
- REST OAuth has PKCE, one-hour access tokens, a revocation endpoint and scopes in
<resource>:<action>form - Rate limits are published (150 requests a minute on free domains, 1,500 on paid) and every 429 carries
Retry-After
Weaknesses
- Three incidents marked major touched the API between 31 August and 30 September 2026, one lasting about two hours for roughly a quarter of users
- MCP tokens carry no scopes. Each authorisation can call every tool, including
delete_task, which is permanent - No idempotency keys were found in the docs or the OpenAPI spec, so a retried POST can create a duplicate
Price $10.99 / seat-moAuth OAuth or keyx402 nohosted
Basecamp
B 67.9/100Basecamp is 37signals' hosted project tool with to-dos, card tables, message boards, schedules, chat and files. Agents reach it through a REST API with a public OpenAPI spec, seven SDKs and an official CLI with agent skills and MCP.
Verdict The REST API has a public OpenAPI 3.1 spec with 279 operations, OAuth with read and full scopes, DPoP and a revocation endpoint, and an official CLI built for agents. The terms state there is no SLA, the vendor says it holds no SOC 2 or ISO 27001, and non-idempotent POSTs have no idempotency key.
Choose it for Teams already on Basecamp that want an agent to create and complete to-dos, move cards, post messages and comments, and read overdue work and assignments, either through the CLI or the REST API.
Strengths
- Public OpenAPI 3.1 spec (version 2026-09-15) with 279 operations on 187 paths, each with a description, in the MIT-licensed
basecamp-sdkrepository - The OAuth server at app.basecamp.com publishes
read,full,mcpandoffline_accessscopes, PKCE, DPoP, device flow, client credentials and a revocation endpoint - Official CLI (v0.13.0, 7 October 2026) returns a JSON envelope with a stable error
codeand aretryableflag, and includes a stdio MCP server with a--read-onlymode
Weaknesses
- The terms of service state that 37signals does not offer service-level agreements
- The trust centre says 37signals holds no SOC 2 report or ISO 27001 certificate, and security.txt returned 404 on three hosts
- No idempotency keys. The SDK's own model marks 48 POST operations as not safe to retry, so a retried create can duplicate a to-do
Price $25 / moAuth OAuthx402 nohosted and local
Plane
B 67.6/100Plane is an open-source project management platform for work items, cycles, modules and pages, sold as a cloud service and for self-hosting. Agents reach it through an MIT-licensed MCP server, hosted at mcp.plane.so, and a REST API.
Verdict Plane's MCP server is open source and typed, and its v2 REST API has fine-grained OAuth scopes, problem+json errors and field selection. Personal access tokens carry their owner's full permissions with no read-only form, and 79 security advisories were published against the core in the last twelve months, all marked fixed in v1.4.0 or earlier.
Choose it for Teams that want an issue tracker they can also self-host, with an agent creating and updating work items, cycles, modules and pages over MCP.
Strengths
- The MCP server is MIT, with 30 typed tools covering 207 actions and
readOnlyHintanddestructiveHintannotations derived from each tool's actions - OAuth apps on the REST API can request any of 83 fine-grained read and write scopes, and a token without the scope is refused before the permission check
- API v2 answers errors as
application/problem+jsonwith a stablecode, per-field validation errors andRetry-Afteron 429
Weaknesses
- A personal access token acts with its owner's full permissions, and the v2 docs say no read-only key can be created
- 79 advisories published against makeplane/plane since October 2025, six rated critical on 3 August 2026, most of them cross-project or cross-workspace access flaws
- The hosted OAuth flow accepts only allow-listed redirect URIs (Cursor, VS Code, Antigravity, Claude.ai, ChatGPT and localhost), per the docs and open issue 220
Price $6 / seat-moAuth OAuth or keyx402 nohosted and local
Todoist
B 66.9/100Todoist is a task and project manager from Doist. Agents reach it through the Todoist API v1, a hosted MCP server at ai.todoist.net/mcp, Python and TypeScript SDKs and the td command line tool.
Verdict The API has a public OpenAPI 3.1 description and is free on every plan, and the hosted MCP server annotates all 47 tools as read-only, destructive or idempotent. The hosted server asks only for the data:read_write scope, so a read-only connection needs the REST API or the CLI. No SLA or llms.txt was found.
Choose it for Individuals and small teams who already keep tasks in Todoist and want an agent to add, reschedule, comment and report through MCP.
Strengths
- OpenAPI 3.1 description of API v1 at developer.todoist.com/openapi.json, 108 operations, all described, 878 examples
- OAuth with six documented scopes, PKCE, refresh tokens, a revocation endpoint and dynamic client registration under RFC 7591
- All 47 MCP tools carry readOnlyHint, destructiveHint and idempotentHint, checked by a test in the MIT repository
Weaknesses
- The hosted MCP server lists
data:read_writeas its only scope, so it has no read-only mode - 47 tool definitions load at once, with no toolsets. The repository's own test caps the fixed cost at 35,000 tokens
- No SLA found in the terms of service, and no llms.txt on todoist.com or developer.todoist.com
Price $7 / seat-moAuth OAuth or keyx402 nohosted and local
Teamwork.com
B 65.9/100Teamwork.com is a hosted project management and professional services platform for client work, covering projects, tasks, time, resourcing and budgets. Agents reach it through REST API v3 and an official MCP server, hosted at mcp.ai.teamwork.com or run locally.
Verdict The official MCP server is MIT licensed, released almost daily, and has typed tools with annotations, profile endpoints and no delete tools on the shipped servers. OAuth scopes stop at product level, access tokens are permanent, and no SLA, API changelog or prompt-injection guidance was found in the reviewed documentation.
Choose it for Agencies and services firms already on Teamwork.com that want an assistant to create and update tasks, log time, read workload and budgets, and answer Desk tickets.
Strengths
- Official MCP server under MIT at https://mcp.ai.teamwork.com, with profile endpoints such as
/project-managerthat load a subset of tools - No delete tool reaches a client. Delete operations sit behind an
allowDeleteflag that no shipped server enables - A Swagger 2.0 file for API v3 downloads from the docs, with 319 paths and 430 operations
Weaknesses
- OAuth scopes are per product only (
projects,desk,spaces,chat), and the token from the app login flow is described as permanent - The main MCP endpoint loads every tool. The generated tool reference lists 225, 147 of them for Projects
- 429 responses carry
X-Rate-Limit-Resetbut no Retry-After, and no idempotency keys were found
Price $9.99 / seat-moAuth OAuth or keyx402 nohosted and local
Trello
C 61.1/100Trello is Atlassian's hosted board product for lists and cards of work. Agents reach it through a REST API at api.trello.com with a public OpenAPI spec, using an API key and user token or OAuth 2.0.
Verdict The REST API has a public OpenAPI spec with 261 operations, published rate limits, field selection and a free plan, and the status page lists no incident between 10 July and 8 October 2026. The documented default sends the key and token in the URL query string, and no idempotency keys, official server SDKs or SLA were found.
Choose it for Teams already on Trello that want an agent to create and move cards, set owners and due dates, comment and react to changes through webhooks.
Strengths
- Public OpenAPI 3.0.0 spec with 261 operations on 191 paths, each with a summary, served from developer.atlassian.com
- OAuth 2.0 with PKCE, ten scopes, one-hour access tokens and single-use refresh tokens has been available since 15 September 2026
- Rate limits are published (300 requests per 10 seconds per key, 100 per token) and every response carries remaining-quota headers
Weaknesses
- The documented default passes the API key and user token as
keyandtokenquery parameters, and the spec declares both as query credentials - No idempotency keys and no
Retry-Afterheader were found in the docs or the spec, so a retried POST can create a duplicate card - No official server-side SDK was found. The vendor's client.js is a browser wrapper
Price $5 / seat-moAuth OAuth or keyx402 nohosted
ClickUp
C 60.9/100ClickUp is a work management platform for tasks, docs, chat and time tracking. Agents reach it through a hosted MCP server at mcp.clickup.com and a public REST API (v2 and v3), both available on every plan.
Verdict The hosted MCP server uses OAuth 2.1 with PKCE, dynamic client registration and read and write scopes, and works on the Free Forever plan. Without the Everything AI add-on, MCP calls are capped at 100 to 25,000 per rolling 24 hours by plan. No API changelog, deprecation policy, official SDK or SLA was found.
Choose it for Teams already working in ClickUp that want an assistant to create and update tasks, comment, log time and read Docs through one OAuth connection.
Strengths
- Hosted MCP server at mcp.clickup.com/mcp with OAuth 2.1, PKCE (S256), dynamic client registration and read and write scopes
- Public OpenAPI specs for API v2 (138 operations) and v3 (35), plus llms.txt and a Markdown copy of every docs page
- API and MCP server available on every plan, including Free Forever
Weaknesses
- MCP calls are capped per rolling 24 hours without the Everything AI add-on, 100 on Free Forever and 300 on Unlimited, per Workspace and client
- Personal API tokens and REST OAuth tokens never expire and carry no scopes
- No API changelog or deprecation policy found, and the Developer Terms state no obligation to maintain the API
Price $7 / seat-moAuth OAuth or keyx402 nohosted
Shortcut
C 60.2/100Shortcut is a hosted project tracker for software teams, with stories, epics, iterations, objectives and docs. Agents reach it through REST API v3 with a personal token, or the hosted MCP server at mcp.shortcut.com/mcp with OAuth.
Verdict REST API v3 and the hosted MCP server are included on the Free plan, with downloadable OpenAPI files and OAuth scopes down to story or comment writes on the MCP side. The API still accepts the token in a query string, and no idempotency keys, Retry-After header, uptime SLA or API changelog were found in the reviewed documentation.
Choose it for Software teams already on Shortcut that want an agent to search, create and update stories, epics, iterations and docs, and coding agents that pick up assigned stories.
Strengths
- REST API v3, webhooks and the MCP server are listed on every plan, Free (up to 10 users) among them, and the 14-day trial needs no card
- Swagger 2.0 and OpenAPI 3.0 files for v3 (143 operations) are downloadable, with enums, string limits and required fields
- The hosted MCP server uses OAuth with PKCE, dynamic client registration and the scopes read, write, story-write, comment-write and admin
Weaknesses
- The v3 docs still allow the API token as a
tokenquery parameter, marked deprecated with no removal date - No idempotency keys, Retry-After header or backoff guidance found. The docs state only 200 requests a minute and a 429
- No API changelog or deprecation policy found. API changes appear as lines in the product release notes
Price $8.50 / seat-moAuth OAuth or keyx402 nohosted
Wrike
C 60.1/100Wrike is a hosted work management platform for tasks, projects, folders, approvals and request forms. Agents reach it through REST API v4 and an official remote MCP server at mcp.wrike.com/v2 with 29 documented tools.
Verdict The official MCP server has 29 documented tools for search, task and project creation, bulk updates, comments and approvals, and it works on every plan including Free. Permanent access tokens never expire and carry the user's full access, and no SLA, official SDK or deprecation policy was found in the reviewed documentation.
Choose it for Teams already on Wrike that want an assistant to find work, create tasks and projects from notes, update status in bulk, comment and check approvals.
Strengths
- Official remote MCP server at https://mcp.wrike.com/v2 over Streamable HTTP, with 29 documented tools and no delete tool
- REST API v4 and the MCP server are included on every plan, Free among them, and the 14-day trial needs no card
- OpenAPI 3.0.1 definitions on each of 244 reference pages, plus llms.txt and Markdown copies of the docs
Weaknesses
- A permanent access token never expires and reaches everything its user can, and it is the documented route for clients that need dynamic client registration
- The API accepts the access token as an
access_tokenquery parameter as a documented option - No SLA, idempotency keys or Retry-After header found in the reviewed documentation
Price $10 / seat-moAuth OAuth or keyx402 nohosted
Head to head
- Asana vs monday.com BB 70.1 vs BB 76.4
- Basecamp vs monday.com B 67.9 vs BB 76.4
- monday.com vs Plane BB 76.4 vs B 67.6
- monday.com vs Todoist BB 76.4 vs B 66.9
- Asana vs Basecamp BB 70.1 vs B 67.9
- Asana vs Plane BB 70.1 vs B 67.6
- Asana vs Todoist BB 70.1 vs B 66.9
- Basecamp vs Plane B 67.9 vs B 67.6
- Basecamp vs Todoist B 67.9 vs B 66.9
- Plane vs Todoist B 67.6 vs B 66.9
Questions
What are the highest-rated project and task management tools for AI agents?
monday.com has the highest benchmark score of the 15 ranked project and task management tools, 76.4 (BB). Asana is second with 70.1 (BB).
How many project and task management tools are agent-ready?
2 of the 15 ranked here grade BB or better, the bar for agent-ready on the Anchor benchmark.
Which project and task management tools accept x402 payments?
None of the ranked listings here accepts x402 for its main call yet.
How is this list ranked?
By the Anchor benchmark score out of 100, a weighted mean of the scored categories minus deductions for negative events, from public evidence re-checked as vendors change. Listings cannot pay for a place. The latest assessment behind this page is from 9 October 2026.
How this list is made
The order is the Anchor benchmark score, the same number as on each listing and in the top list. Each listing is graded from public evidence against the benchmark checklist, and the picks above are worked out from those grades, prices and facts. No listing pays for its place, and paid audits or listing help never change a score.
Full ranked table · 135 head-to-head comparisons · Best tools in every category