{ "data": { "a": { "slug": "clickup", "name": "ClickUp", "vendor": "Mango Technologies, Inc. DBA ClickUp", "vendorUrl": "https://clickup.com", "kind": "http-api", "category": "project-management", "summary": "ClickUp is a work management platform for tasks, docs, chat and time tracking. Agents reach it through a hosted MCP server at mcp.clickup.com and a public REST API (v2 and v3), both available on every plan.", "url": "https://www.anchorterminal.com/tools/clickup", "markdownUrl": "https://www.anchorterminal.com/tools/clickup.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/clickup.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/clickup.json", "repo": "https://github.com/clickup/clickup-plugin", "license": "Proprietary service under ClickUp's Terms of Service and Developer Terms. The clickup-plugin repository on GitHub is MIT", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.clickup.com", "packages": [], "auth": "mixed", "authNotes": "Access is self-serve. The MCP server at https://mcp.clickup.com/mcp accepts only OAuth 2.1 with PKCE, with dynamic client registration and read and write scopes, and refuses API keys. The REST API takes a personal token (`pk_`, generated under Settings, Apps) or an OAuth 2.0 authorisation code token from an app that a Workspace owner or admin creates. Neither REST token expires or carries scopes. Users choose the Workspaces they authorise, and calls act with that user's permissions. No app review or partner approval is described.", "pricing": "freemium", "pricingNotes": "Free Forever includes the API and the MCP server, so an agent can start without a contract. Unlimited is $7 a seat a month billed yearly or $10 monthly, Business $12 or $19, Enterprise through sales. API calls are not priced. Without the Everything AI add-on ($28 a seat a month as shown) MCP is capped per rolling 24 hours, from 100 calls on Free Forever to 25,000 on Enterprise Plus. No separate sandbox was found (https://clickup.com/pricing, checked 2026-10-08).", "priceSummary": "$7 / seat-mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the developer docs, the OpenAPI specs or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": 48, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://developer.clickup.com", "llmsTxt": "https://developer.clickup.com/llms.txt", "openapi": "https://developer.clickup.com/openapi/clickup-api-v2-reference.json", "capabilities": [ "tasks.create", "tasks.update", "projects.manage", "tasks.comments", "projects.reporting", "work.docs", "work.chat" ], "tags": [ "official", "hosted", "mcp", "oauth", "openapi", "llms-txt", "freemium", "free-tier", "webhooks", "status-page", "soc2", "project-management" ], "lastRelease": "2026-09-18", "graded": true, "anchor": { "graded": true, "score": 60.9, "grade": "C", "agentReady": false, "rank": 490, "ranked": true, "rankOf": 954, "categoryRank": 8, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 48, "maintenance": 54, "payments": 30, "reliability": 74, "schema": 74, "security": 64, "transparency": 75 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": 0, "verdict": "The hosted MCP server uses OAuth 2.1 with PKCE, dynamic client registration and read and write scopes, and works on the Free Forever plan. Without the Everything AI add-on, MCP calls are capped at 100 to 25,000 per rolling 24 hours by plan. No API changelog, deprecation policy, official SDK or SLA was found.", "bestFor": "Teams already working in ClickUp that want an assistant to create and update tasks, comment, log time and read Docs through one OAuth connection.", "strengths": [ "Hosted MCP server at mcp.clickup.com/mcp with OAuth 2.1, PKCE (S256), dynamic client registration and read and write scopes", "Public OpenAPI specs for API v2 (138 operations) and v3 (35), plus llms.txt and a Markdown copy of every docs page", "API and MCP server available on every plan, including Free Forever", "Rate limits published per plan for the API (100 to 10,000 requests a minute per token) and for MCP", "security.txt valid until 1 September 2027, a disclosure policy with safe harbour, SOC 2 Type 2 and ISO 27001 stated" ], "weaknesses": [ "MCP calls are capped per rolling 24 hours without the Everything AI add-on, 100 on Free Forever and 300 on Unlimited, per Workspace and client", "Personal API tokens and REST OAuth tokens never expire and carry no scopes", "No API changelog or deprecation policy found, and the Developer Terms state no obligation to maintain the API", "No official SDK and no idempotency keys found, and no entry under a ClickUp namespace in the official MCP registry", "48 documented MCP tools, and the tools page lists Delete task while the MCP FAQ says no deletion tools exist" ], "agentNotes": [ "Connect to https://mcp.clickup.com/mcp with OAuth 2.1 and PKCE. API keys and REST OAuth tokens are refused on the MCP server", "Pass `workspace_id` on every MCP call when the user belongs to more than one Workspace, as ClickUp's own skills instruct", "Budget MCP calls. Each tool call counts against the rolling 24-hour cap, and `RATE_LIMIT_EXCEEDED` returns `retryAfter`", "On the REST API read `X-RateLimit-Remaining` and `X-RateLimit-Reset`, and page Get Tasks with `page` at 100 tasks a page", "Treat `team_id` in API v2 as the Workspace ID, and send dates as Unix milliseconds" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 60.9 } ], "editorialScores": { "ergonomics": 48, "maintenance": 54, "payments": 30, "reliability": 74, "schema": 74, "security": 64, "transparency": 52 }, "provenanceScore": 97 }, "connect": { "http": "curl https://api.clickup.com/api/v2/team -H \"Authorization: $CLICKUP_API_TOKEN\"", "claudeCode": "claude mcp add --transport http clickup https://mcp.clickup.com/mcp", "config": { "mcpServers": { "clickup": { "url": "https://mcp.clickup.com/mcp" } } } }, "letme": { "capability": "https://letme.dev/tasks.create", "tool": "https://letme.dev/clickup" }, "area": "business", "unitPrices": [ { "item": "Free Forever (API and MCP included)", "unit": "seat-month", "usd": 0, "note": "100 MCP calls per rolling 24 hours" }, { "item": "Unlimited", "unit": "seat-month", "usd": 7, "note": "billed yearly; $10 billed monthly" }, { "item": "Business", "unit": "seat-month", "usd": 12, "note": "billed yearly; $19 billed monthly" }, { "item": "Everything AI add-on", "unit": "seat-month", "usd": 28, "note": "as shown on 2026-10-08; lifts the MCP daily caps to the API limits" }, { "item": "AI Super Credits", "unit": "credit", "usd": 0.001, "note": "$10 per 10,000; MCP calls do not use them" } ], "provenance": { "legalEntity": "Mango Technologies, Inc. DBA ClickUp", "domain": "clickup.com", "domainRegistered": "2001-07-05", "endpointOnVendorDomain": true, "terms": "https://clickup.com/terms", "privacy": "https://clickup.com/terms/privacy", "statusPage": "https://status.clickup.com", "changelog": "https://feedback.clickup.com/changelog", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Terms of Service (effective 27 June 2025) and the privacy policy (effective 2 June 2026) name Mango Technologies, Inc. DBA ClickUp, 350 Tenth Ave, 5th floor, San Diego, CA 92101.", "The API answers at api.clickup.com and the MCP server at mcp.clickup.com, both clickup.com subdomains.", "clickup.com/.well-known/security.txt lists security@clickup.com and expires on 1 September 2027. It is not signed.", "The changelog link is the product changelog. No API changelog was found, and developer.clickup.com/changelog returns 404.", "RDAP for clickup.com gives a registration date of 2001-07-05." ], "score": 97 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/clickup.json", "live": { "slug": "clickup", "probe": { "target": "https://api.clickup.com", "method": "get", "lastAt": "2026-10-10T11:44:51.331342129Z", "lastOk": true, "lastStatus": 404, "lastMs": 45, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 38, "p95ms24h": 100, "samples24h": 247, "samples30d": 464, "days": [ { "date": "2026-10-08", "probes": 93, "ok": 93 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 121, "ok": 121 } ] }, "vendorStatus": { "page": "https://status.clickup.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-10T11:41:33.45932126Z" }, "githubStars": 2, "securityTxt": { "url": "https://clickup.com/.well-known/security.txt", "state": "valid", "expires": "2027-09-01T00:00:00.000Z", "checkedAt": "2026-10-09T15:40:11.309219622Z" }, "llmsTxt": { "url": "https://developer.clickup.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-09T14:01:36.464933847Z" }, "pages": [ { "url": "https://feedback.clickup.com/changelog", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:39:21.116236799Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "a2ab6d600540" }, { "url": "https://clickup.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:33:46.262897661Z", "changedAt": "2026-10-09T18:33:46.262897661Z", "fingerprint": "27682aa9fa74" }, { "url": "https://clickup.com/terms/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:33:50.292821899Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "af2e356a9bb6" }, { "url": "https://clickup.com/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:33:48.334296362Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "c6fe50dc7cfb" } ], "updatedAt": "2026-10-10T11:44:51.331342129Z" } }, "answer": "ClickUp scores 60.9 (C) on agent readiness against OpenProject's 57.4 (C), and leads in 2 of 7 scored categories. OpenProject leads on agent ergonomics, maintenance \u0026 community and transparency \u0026 trust.", "b": { "slug": "openproject", "name": "OpenProject", "vendor": "OpenProject GmbH", "vendorUrl": "https://www.openproject.org", "kind": "http-api", "category": "project-management", "summary": "OpenProject is open-source project management software for work packages, Gantt plans, boards and time tracking, sold as a cloud service and for self-hosting. Agents reach it through the APIv3 REST API, and paid plans add an MCP server.", "url": "https://www.anchorterminal.com/tools/openproject", "markdownUrl": "https://www.anchorterminal.com/tools/openproject.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/openproject.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/openproject.json", "repo": "https://github.com/opf/openproject", "license": "GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service", "transports": [ "http" ], "packages": [], "auth": "mixed", "authNotes": "Access is self-serve. A user creates a named personal API token in account settings and sends it as `Authorization: Bearer`, or as the Basic auth password with the user name `apikey`. The token carries that user's permissions, and no per-token scope or expiry was found. An administrator can register OAuth 2.0 applications for the authorisation code grant, PKCE or client credentials, with one scope per API (`api_v3`, `mcp`, `scim_v2`, `bcf_v2_1`). JWTs from a configured OIDC provider are also accepted. No app review or partner approval is described.", "pricing": "freemium", "pricingNotes": "The Community edition is free to self-host with the REST API included, and the cloud has a 14-day trial with no credit card, so an agent can start without a contract. Cloud plans are per user per month on a yearly term, Basic $7.25 (from 5 users, $8.50 on a monthly term), Professional $13.50 (from 25 users) and Premium $19.50 (from 100 users), with Corporate on request. Euro prices are 5.95, 10.95 and 15.95. API calls are not priced. The MCP server needs Professional or above. Community is not sold as a cloud plan (https://www.openproject.org/pricing/, checked 2026-10-08).", "priceSummary": "$7.25 / seat-mo", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API docs, the OpenAPI document or the pricing page (checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": 16352, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-08" }, "docsUrl": "https://www.openproject.org/docs/api/", "openapi": "https://www.openproject.org/docs/api/v3/spec.yml", "capabilities": [ "tasks.create", "tasks.update", "projects.manage", "tasks.comments", "projects.reporting", "events.webhooks-send" ], "tags": [ "official", "hosted", "self-hosted", "open-source", "rest", "openapi", "oauth", "mcp", "freemium", "free-trial", "webhooks", "status-page", "sla", "eu-hosting", "project-management" ], "lastRelease": "2026-10-01", "graded": true, "anchor": { "graded": true, "score": 57.4, "grade": "C", "agentReady": false, "rank": 612, "ranked": true, "rankOf": 954, "categoryRank": 11, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 70, "maintenance": 75, "payments": 30, "reliability": 52, "schema": 76, "security": 59, "transparency": 87 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-08" }, "negative": -5, "negativeNotes": [ "2026-06-08. 13 advisories rated critical were published against opf/openproject between January and June 2026, among them cache store poisoning leading to remote code execution (GHSA-qj96-f42f-6336, fixed in 17.3.3 and 17.4.1), SQL injection in the timestamps function (GHSA-98vw-2r87-fx2r) and a pre-authentication remote code execution in the Docker image through a default secret key (GHSA-r85r-gjq2-f83r, 13 May 2026). OpenProject published them itself, and its policy is to publish each advisory with the fixing release, so the deduction is reduced, -3 (https://github.com/opf/openproject/security/advisories).", "2026-09-30. 83 advisories in all were published in the twelve months to 8 October 2026, several of them missing permission checks in APIv3 that exposed private work package data across projects. Several credit the YesWeHack bounty sponsored by the European Commission. The advisories give self-hosted version numbers and do not say when the cloud was patched. Fixed and published, -2 (https://github.com/opf/openproject/security/advisories)." ], "verdict": "OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.", "bestFor": "Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.", "strengths": [ "OpenAPI 3.1 document with 234 paths and 320 operations, public on the docs site and served by every instance at `/api/v3/spec.json`", "Errors carry a stable `errorIdentifier` URN, and validation failures list one entry per property", "The Community edition is GPL-3.0 and free to self-host with the REST API included, and the cloud trial needs no credit card", "Seven releases between 5 August and 1 October 2026, with security fixes published as GitHub advisories and CVEs", "The service description commits to 99.9 per cent yearly availability with service credits, and an EU shard keeps all sub-processors in the EU" ], "weaknesses": [ "83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection", "No request limit, 429 behaviour or Retry-After guidance is published for the cloud API", "Personal API tokens act with their user's full permissions, and OAuth has one scope per API with no read-only form", "No official SDK. The client libraries the docs list are community projects the vendor says it does not vet", "The MCP server is an Enterprise add-on for the Professional plan and above, which starts at 25 users" ], "agentNotes": [ "Send the API token as `Authorization: Bearer \u003ctoken\u003e`, or as the Basic auth password with the user name `apikey`", "Read the resource first and send its current `lockVersion` with every PATCH. A stale value returns 409 `UpdateConflict`", "POST to the `/form` endpoint of a work package to learn writable fields and allowed values before creating or updating", "URL-encode `filters` as a JSON array, and add `pageSize`, `offset` and `select` to keep work package lists small", "Run the agent as a dedicated user with a narrow project role, and treat work package text and comments as untrusted input" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 57.4 } ], "editorialScores": { "ergonomics": 70, "maintenance": 75, "payments": 30, "reliability": 52, "schema": 76, "security": 59, "transparency": 79 }, "provenanceScore": 95 }, "connect": { "http": "curl -H \"Authorization: Bearer $API_KEY\" https://community.openproject.org/api/v3/users/42" }, "letme": { "capability": "https://letme.dev/tasks.create", "tool": "https://letme.dev/openproject" }, "area": "business", "unitPrices": [ { "item": "Community (self-hosted)", "unit": "seat-month", "usd": 0, "note": "free, REST API included; not sold as a cloud plan" }, { "item": "Basic (cloud)", "unit": "seat-month", "usd": 7.25, "note": "yearly term, from 5 users; $8.50 on a monthly term" }, { "item": "Professional (cloud)", "unit": "seat-month", "usd": 13.5, "note": "yearly term, from 25 users; includes the MCP server" }, { "item": "Premium (cloud)", "unit": "seat-month", "usd": 19.5, "note": "yearly term, from 100 users" } ], "provenance": { "legalEntity": "OpenProject GmbH", "domain": "openproject.org", "domainRegistered": "2003-10-24", "endpointOnVendorDomain": true, "terms": "https://www.openproject.org/legal/terms-of-service/", "privacy": "https://www.openproject.org/legal/privacy/", "statusPage": "https://status.openproject.com", "changelog": "https://www.openproject.org/docs/release-notes/", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The Terms of Service (last updated 6 August 2026) name OpenProject GmbH, Krausenstrasse 9, 10117 Berlin, Germany, and cover both the cloud and the on-premises Enterprise edition. The German version takes precedence.", "The privacy policy (version 30 July 2026) has a section on OpenProject Enterprise Cloud, where OpenProject GmbH is processor and the customer controller. The data processing agreement at https://www.openproject.org/legal/data-processing-agreement/ is part of the terms.", "Cloud instances answer at \u003cname\u003e.openproject.com or, on the EU shard, an openproject.eu host. Both are the vendor's domains, apart from the openproject.org site that carries the docs and legal pages. Self-hosted instances answer on the owner's domain.", "www.openproject.org/.well-known/security.txt is PGP-signed, names security@openproject.com and expires on 31 December 2026.", "RDAP for openproject.org gives a registration date of 2003-10-24 and InterNetX GmbH as registrar." ], "score": 95 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/openproject.json", "live": { "slug": "openproject", "vendorStatus": { "page": "https://status.openproject.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-10T11:09:37.304575101Z" }, "versions": [ { "registry": "github", "name": "opf/openproject", "version": "v17.9.1", "released": "2026-10-01", "seenAt": "2026-10-09T17:11:02.811144094Z" } ], "githubStars": 16363, "securityTxt": { "url": "https://openproject.org/.well-known/security.txt", "state": "valid", "expires": "2026-12-31T22:59:00.000Z", "checkedAt": "2026-10-09T15:39:25.844920276Z" }, "pages": [ { "url": "https://www.openproject.org/docs/release-notes/", "kind": "changelog", "status": 200, "checkedAt": "2026-10-09T18:52:47.086194924Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "9f50045aa233" }, { "url": "https://www.openproject.org/pricing/", "kind": "pricing", "status": 200, "checkedAt": "2026-10-09T18:52:53.124973082Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "b7ab69f9338c" }, { "url": "https://www.openproject.org/legal/privacy/", "kind": "privacy", "status": 200, "checkedAt": "2026-10-09T18:52:49.139595217Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "bbdaadfc07cd" }, { "url": "https://www.openproject.org/legal/terms-of-service/", "kind": "terms", "status": 200, "checkedAt": "2026-10-09T18:52:51.123838723Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0443c7288991" } ], "updatedAt": "2026-10-10T11:09:37.304575101Z" } }, "facts": [ { "a": "HTTP API", "b": "HTTP API", "name": "Kind" }, { "a": "Mango Technologies, Inc. DBA ClickUp", "b": "OpenProject GmbH", "name": "Vendor" }, { "a": "https://api.clickup.com", "b": "no (local only)", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "Proprietary service under ClickUp's Terms of Service and Developer Terms. The clickup-plugin repository on GitHub is MIT", "b": "GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service", "name": "Licence" }, { "a": "48", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "no", "name": "llms.txt" }, { "a": "2026-09-18", "b": "2026-10-01", "name": "Last release" }, { "a": "2025-06-27", "b": "2026-08-06", "name": "Terms last updated" }, { "a": "2026-06-02", "b": "no date given", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "yes", "b": "not found in the text", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not found in the text", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "not found in the text", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "16k stars", "name": "Popularity" } ], "faq": [ { "answer": "ClickUp scores 60.9 (C) on agent readiness against OpenProject's 57.4 (C), and leads in 2 of 7 scored categories. OpenProject leads on agent ergonomics, maintenance \u0026 community and transparency \u0026 trust.", "question": "Which is better for AI agents, ClickUp or OpenProject?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do ClickUp and OpenProject need an API key?" }, { "answer": "ClickUp has a hosted endpoint at https://api.clickup.com. No hosted endpoint is listed for OpenProject.", "question": "Can an agent call ClickUp and OpenProject without installing anything?" }, { "answer": "No open-source release is listed for ClickUp. OpenProject is open source (GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service).", "question": "Are ClickUp and OpenProject open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 74 against 52", "Security \u0026 auth, 64 against 59" ], "also": [ "A hosted endpoint, with nothing to install", "No incidents deducted, where OpenProject loses 5 points for them" ], "goodFor": "Teams already working in ClickUp that want an assistant to create and update tasks, comment, log time and read Docs through one OAuth connection.", "slug": "clickup", "watchFor": "MCP calls are capped per rolling 24 hours without the Everything AI add-on, 100 on Free Forever and 300 on Unlimited, per Workspace and client" }, { "aheadOn": [ "Agent ergonomics, 70 against 48", "Maintenance \u0026 community, 75 against 54", "Transparency \u0026 trust, 87 against 75" ], "also": [ "Open source" ], "goodFor": "Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.", "slug": "openproject", "watchFor": "83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection" } ], "job": { "capability": "tasks.create", "name": "Issues and tasks" }, "others": [ { "json": "https://www.anchorterminal.com/compare/asana-vs-clickup.json", "title": "Asana vs ClickUp", "url": "https://www.anchorterminal.com/compare/asana-vs-clickup" }, { "json": "https://www.anchorterminal.com/compare/asana-vs-openproject.json", "title": "Asana vs OpenProject", "url": "https://www.anchorterminal.com/compare/asana-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-clickup.json", "title": "Atlassian Rovo MCP Server vs ClickUp", "url": "https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-clickup" }, { "json": "https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-openproject.json", "title": "Atlassian Rovo MCP Server vs OpenProject", "url": "https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/basecamp-vs-clickup.json", "title": "Basecamp vs ClickUp", "url": "https://www.anchorterminal.com/compare/basecamp-vs-clickup" }, { "json": "https://www.anchorterminal.com/compare/basecamp-vs-openproject.json", "title": "Basecamp vs OpenProject", "url": "https://www.anchorterminal.com/compare/basecamp-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-linear-mcp.json", "title": "ClickUp vs Linear MCP", "url": "https://www.anchorterminal.com/compare/clickup-vs-linear-mcp" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-monday.json", "title": "ClickUp vs monday.com", "url": "https://www.anchorterminal.com/compare/clickup-vs-monday" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-plane.json", "title": "ClickUp vs Plane", "url": "https://www.anchorterminal.com/compare/clickup-vs-plane" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-redmine.json", "title": "ClickUp vs Redmine", "url": "https://www.anchorterminal.com/compare/clickup-vs-redmine" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-roma.json", "title": "ClickUp vs Roma", "url": "https://www.anchorterminal.com/compare/clickup-vs-roma" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-shortcut.json", "title": "ClickUp vs Shortcut", "url": "https://www.anchorterminal.com/compare/clickup-vs-shortcut" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-taiga.json", "title": "ClickUp vs Taiga", "url": "https://www.anchorterminal.com/compare/clickup-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-teamwork.json", "title": "ClickUp vs Teamwork.com", "url": "https://www.anchorterminal.com/compare/clickup-vs-teamwork" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-todoist.json", "title": "ClickUp vs Todoist", "url": "https://www.anchorterminal.com/compare/clickup-vs-todoist" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-trello.json", "title": "ClickUp vs Trello", "url": "https://www.anchorterminal.com/compare/clickup-vs-trello" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-wrike.json", "title": "ClickUp vs Wrike", "url": "https://www.anchorterminal.com/compare/clickup-vs-wrike" }, { "json": "https://www.anchorterminal.com/compare/clickup-vs-youtrack.json", "title": "ClickUp vs YouTrack", "url": "https://www.anchorterminal.com/compare/clickup-vs-youtrack" }, { "json": "https://www.anchorterminal.com/compare/linear-mcp-vs-openproject.json", "title": "Linear MCP vs OpenProject", "url": "https://www.anchorterminal.com/compare/linear-mcp-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/monday-vs-openproject.json", "title": "monday.com vs OpenProject", "url": "https://www.anchorterminal.com/compare/monday-vs-openproject" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-plane.json", "title": "OpenProject vs Plane", "url": "https://www.anchorterminal.com/compare/openproject-vs-plane" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-redmine.json", "title": "OpenProject vs Redmine", "url": "https://www.anchorterminal.com/compare/openproject-vs-redmine" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-roma.json", "title": "OpenProject vs Roma", "url": "https://www.anchorterminal.com/compare/openproject-vs-roma" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-shortcut.json", "title": "OpenProject vs Shortcut", "url": "https://www.anchorterminal.com/compare/openproject-vs-shortcut" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-taiga.json", "title": "OpenProject vs Taiga", "url": "https://www.anchorterminal.com/compare/openproject-vs-taiga" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-teamwork.json", "title": "OpenProject vs Teamwork.com", "url": "https://www.anchorterminal.com/compare/openproject-vs-teamwork" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-todoist.json", "title": "OpenProject vs Todoist", "url": "https://www.anchorterminal.com/compare/openproject-vs-todoist" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-trello.json", "title": "OpenProject vs Trello", "url": "https://www.anchorterminal.com/compare/openproject-vs-trello" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-wrike.json", "title": "OpenProject vs Wrike", "url": "https://www.anchorterminal.com/compare/openproject-vs-wrike" }, { "json": "https://www.anchorterminal.com/compare/openproject-vs-youtrack.json", "title": "OpenProject vs YouTrack", "url": "https://www.anchorterminal.com/compare/openproject-vs-youtrack" } ], "scores": [ { "by": 22, "clickup": 74, "edge": "clickup", "key": "reliability", "name": "Reliability", "openproject": 52, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 2, "clickup": 74, "edge": "openproject", "key": "schema", "name": "Schema \u0026 documentation", "openproject": 76, "weight": 13 }, { "by": 22, "clickup": 48, "edge": "openproject", "key": "ergonomics", "name": "Agent ergonomics", "openproject": 70, "weight": 13 }, { "by": 5, "clickup": 64, "edge": "clickup", "key": "security", "name": "Security \u0026 auth", "openproject": 59, "weight": 14 }, { "by": 0, "clickup": 30, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "openproject": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 21, "clickup": 54, "edge": "openproject", "key": "maintenance", "name": "Maintenance \u0026 community", "openproject": 75, "weight": 7 }, { "by": 12, "clickup": 75, "edge": "openproject", "key": "transparency", "name": "Transparency \u0026 trust", "openproject": 87, "weight": 7 } ], "summary": "ClickUp scores 60.9 (C) on agent readiness against OpenProject's 57.4 (C), and leads in 2 of 7 scored categories. OpenProject leads on agent ergonomics, maintenance \u0026 community and transparency \u0026 trust. Both do issues and tasks.", "verdicts": { "clickup": "The hosted MCP server uses OAuth 2.1 with PKCE, dynamic client registration and read and write scopes, and works on the Free Forever plan. Without the Everything AI add-on, MCP calls are capped at 100 to 25,000 per rolling 24 hours by plan. No API changelog, deprecation policy, official SDK or SLA was found.", "openproject": "OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/clickup-vs-openproject", "json": "https://www.anchorterminal.com/compare/clickup-vs-openproject.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/clickup-vs-openproject.md", "slim": "https://www.anchorterminal.com/compare/clickup-vs-openproject.min.md" }, "markdown": "ClickUp scores 60.9 (C) on agent readiness against OpenProject's 57.4 (C), and leads in 2 of 7 scored categories. OpenProject leads on agent ergonomics, maintenance \u0026 community and transparency \u0026 trust. Both do issues and tasks.\n\n- ClickUp: grade C, 60.9/100, rank #490 of 954. Markdown https://www.anchorterminal.com/tools/clickup.md · JSON https://www.anchorterminal.com/api/v1/tools/clickup.json\n- OpenProject: grade C, 57.4/100, rank #612 of 954. Markdown https://www.anchorterminal.com/tools/openproject.md · JSON https://www.anchorterminal.com/api/v1/tools/openproject.json\n- Best project and task management tools for AI agents: https://www.anchorterminal.com/best/project-management/index.md\n- All 135 projects comparisons: https://www.anchorterminal.com/compare/project-management/index.md\n\n## Which one, for what\n\n### ClickUp (C)\n\nGood for: Teams already working in ClickUp that want an assistant to create and update tasks, comment, log time and read Docs through one OAuth connection.\n\nAhead on:\n- Reliability, 74 against 52\n- Security \u0026 auth, 64 against 59\n\nAlso in its favour:\n- A hosted endpoint, with nothing to install\n- No incidents deducted, where OpenProject loses 5 points for them\n\nWatch for: MCP calls are capped per rolling 24 hours without the Everything AI add-on, 100 on Free Forever and 300 on Unlimited, per Workspace and client\n\n### OpenProject (C)\n\nGood for: Teams that want a self-hostable or EU-hosted project tool with Gantt, time tracking and budgets, and an agent working through a documented REST API.\n\nAhead on:\n- Agent ergonomics, 70 against 48\n- Maintenance \u0026 community, 75 against 54\n- Transparency \u0026 trust, 87 against 75\n\nAlso in its favour:\n- Open source\n\nWatch for: 83 advisories published against opf/openproject in the twelve months to 8 October 2026, 13 rated critical, among them remote code execution and SQL injection\n\n\n## Score by category\n\n| Category | Weight | ClickUp | OpenProject | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 74 | 52 | ClickUp +22 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 74 | 76 | OpenProject +2 |\n| Agent ergonomics | 13% (16.2 this run) | 48 | 70 | OpenProject +22 |\n| Security \u0026 auth | 14% (17.5 this run) | 64 | 59 | ClickUp +5 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 30 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 54 | 75 | OpenProject +21 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 75 | 87 | OpenProject +12 |\n| Negative events | ≤15 | 0 | -5 | |\n| **Total** | | **60.9 · C** | **57.4 · C** | |\n\n## Facts side by side\n\n| Fact | ClickUp | OpenProject |\n| --- | --- | --- |\n| Kind | HTTP API | HTTP API |\n| Vendor | Mango Technologies, Inc. DBA ClickUp | OpenProject GmbH |\n| Hosted endpoint | `https://api.clickup.com` | no (local only) |\n| Transports | HTTP, Streamable HTTP | HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | no | no |\n| Licence | Proprietary service under ClickUp's Terms of Service and Developer Terms. The clickup-plugin repository on GitHub is MIT | GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service |\n| Tools exposed | 48 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | no |\n| Last release | 2026-09-18 | 2026-10-01 |\n| Terms last updated | 2025-06-27 | 2026-08-06 |\n| Privacy policy last updated | 2026-06-02 | no date given |\n| Customer content may train models | not found in the text | not found in the text |\n| Terms restrict automated access | yes | not found in the text |\n| Terms restrict benchmarking | not found in the text | not found in the text |\n| Terms or service can change without notice | not found in the text | not found in the text |\n| Arbitration or class-action waiver | yes | not found in the text |\n| Popularity | none | 16k stars |\n\n## Verdicts\n\n**ClickUp.** The hosted MCP server uses OAuth 2.1 with PKCE, dynamic client registration and read and write scopes, and works on the Free Forever plan. Without the Everything AI add-on, MCP calls are capped at 100 to 25,000 per rolling 24 hours by plan. No API changelog, deprecation policy, official SDK or SLA was found.\n\n**OpenProject.** OpenProject's APIv3 has a public OpenAPI 3.1 document with 320 operations, stable error identifiers and optimistic locking, and the same API ships in the free GPL-3.0 Community edition. No request limits are published, API tokens carry their user's full permissions, and 83 security advisories were published in the last twelve months, 13 rated critical.\n\n## Before you call either\n\n### ClickUp\n\n1. Connect to https://mcp.clickup.com/mcp with OAuth 2.1 and PKCE. API keys and REST OAuth tokens are refused on the MCP server\n2. Pass `workspace_id` on every MCP call when the user belongs to more than one Workspace, as ClickUp's own skills instruct\n3. Budget MCP calls. Each tool call counts against the rolling 24-hour cap, and `RATE_LIMIT_EXCEEDED` returns `retryAfter`\n4. On the REST API read `X-RateLimit-Remaining` and `X-RateLimit-Reset`, and page Get Tasks with `page` at 100 tasks a page\n5. Treat `team_id` in API v2 as the Workspace ID, and send dates as Unix milliseconds\n\n### OpenProject\n\n1. Send the API token as `Authorization: Bearer \u003ctoken\u003e`, or as the Basic auth password with the user name `apikey`\n2. Read the resource first and send its current `lockVersion` with every PATCH. A stale value returns 409 `UpdateConflict`\n3. POST to the `/form` endpoint of a work package to learn writable fields and allowed values before creating or updating\n4. URL-encode `filters` as a JSON array, and add `pageSize`, `offset` and `select` to keep work package lists small\n5. Run the agent as a dedicated user with a narrow project role, and treat work package text and comments as untrusted input\n\n## Questions\n\n### Which is better for AI agents, ClickUp or OpenProject?\n\nClickUp scores 60.9 (C) on agent readiness against OpenProject's 57.4 (C), and leads in 2 of 7 scored categories. OpenProject leads on agent ergonomics, maintenance \u0026 community and transparency \u0026 trust.\n\n### Do ClickUp and OpenProject need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call ClickUp and OpenProject without installing anything?\n\nClickUp has a hosted endpoint at https://api.clickup.com. No hosted endpoint is listed for OpenProject.\n\n### Are ClickUp and OpenProject open source?\n\nNo open-source release is listed for ClickUp. OpenProject is open source (GPL-3.0 for the OpenProject source. Enterprise add-ons need a paid token, and OpenProject Enterprise cloud runs under OpenProject's Terms of Service).\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/clickup-vs-openproject.json, and with the fewest tokens: https://www.anchorterminal.com/compare/clickup-vs-openproject.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"clickup\", \"b\": \"openproject\"}`. From a terminal: `anchor compare clickup openproject`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/clickup.json and https://www.anchorterminal.com/api/v1/tools/openproject.json\n\n## Other comparisons with ClickUp or OpenProject\n\n- [Asana vs ClickUp](https://www.anchorterminal.com/compare/asana-vs-clickup.md)\n- [Asana vs OpenProject](https://www.anchorterminal.com/compare/asana-vs-openproject.md)\n- [Atlassian Rovo MCP Server vs ClickUp](https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-clickup.md)\n- [Atlassian Rovo MCP Server vs OpenProject](https://www.anchorterminal.com/compare/atlassian-rovo-mcp-vs-openproject.md)\n- [Basecamp vs ClickUp](https://www.anchorterminal.com/compare/basecamp-vs-clickup.md)\n- [Basecamp vs OpenProject](https://www.anchorterminal.com/compare/basecamp-vs-openproject.md)\n- [ClickUp vs Linear MCP](https://www.anchorterminal.com/compare/clickup-vs-linear-mcp.md)\n- [ClickUp vs monday.com](https://www.anchorterminal.com/compare/clickup-vs-monday.md)\n- [ClickUp vs Plane](https://www.anchorterminal.com/compare/clickup-vs-plane.md)\n- [ClickUp vs Redmine](https://www.anchorterminal.com/compare/clickup-vs-redmine.md)\n- [ClickUp vs Roma](https://www.anchorterminal.com/compare/clickup-vs-roma.md)\n- [ClickUp vs Shortcut](https://www.anchorterminal.com/compare/clickup-vs-shortcut.md)\n- [ClickUp vs Taiga](https://www.anchorterminal.com/compare/clickup-vs-taiga.md)\n- [ClickUp vs Teamwork.com](https://www.anchorterminal.com/compare/clickup-vs-teamwork.md)\n- [ClickUp vs Todoist](https://www.anchorterminal.com/compare/clickup-vs-todoist.md)\n- [ClickUp vs Trello](https://www.anchorterminal.com/compare/clickup-vs-trello.md)\n- [ClickUp vs Wrike](https://www.anchorterminal.com/compare/clickup-vs-wrike.md)\n- [ClickUp vs YouTrack](https://www.anchorterminal.com/compare/clickup-vs-youtrack.md)\n- [Linear MCP vs OpenProject](https://www.anchorterminal.com/compare/linear-mcp-vs-openproject.md)\n- [monday.com vs OpenProject](https://www.anchorterminal.com/compare/monday-vs-openproject.md)\n- [OpenProject vs Plane](https://www.anchorterminal.com/compare/openproject-vs-plane.md)\n- [OpenProject vs Redmine](https://www.anchorterminal.com/compare/openproject-vs-redmine.md)\n- [OpenProject vs Roma](https://www.anchorterminal.com/compare/openproject-vs-roma.md)\n- [OpenProject vs Shortcut](https://www.anchorterminal.com/compare/openproject-vs-shortcut.md)\n- [OpenProject vs Taiga](https://www.anchorterminal.com/compare/openproject-vs-taiga.md)\n- [OpenProject vs Teamwork.com](https://www.anchorterminal.com/compare/openproject-vs-teamwork.md)\n- [OpenProject vs Todoist](https://www.anchorterminal.com/compare/openproject-vs-todoist.md)\n- [OpenProject vs Trello](https://www.anchorterminal.com/compare/openproject-vs-trello.md)\n- [OpenProject vs Wrike](https://www.anchorterminal.com/compare/openproject-vs-wrike.md)\n- [OpenProject vs YouTrack](https://www.anchorterminal.com/compare/openproject-vs-youtrack.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-10", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "ClickUp vs OpenProject", "url": "" } ], "description": "ClickUp scores 60.9 (C) to OpenProject's 57.4 (C) for issues and tasks. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "ClickUp C 60.9", "OpenProject C 57.4", "scores" ], "h1": "ClickUp vs OpenProject", "image": "https://www.anchorterminal.com/assets/og/compare-clickup-vs-openproject.png", "path": "/compare/clickup-vs-openproject", "published": "2026-10-01", "section": "tools", "title": "ClickUp vs OpenProject for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-10-10", "url": "https://www.anchorterminal.com/compare/clickup-vs-openproject" }, "tokens": { "markdown": 2700, "slim": 730 }, "version": 1 }