Redmine vs YouTrack

Redmine

Redmine's REST API covers issues, projects, time entries and 20 other resources, and versions 6.1 and later add OAuth 2 with one scope per permission. The software is free under the GPL. No OpenAPI document exists, most errors return a bare status code, and 24 security advisories were published in twelve months, two rated critical.

YouTrack

Every instance serves an OpenAPI 3.0 document, a 23-tool MCP server with OAuth and PKCE, and field selection on each REST call, and the free plan covers ten users. No rate limits, 429 handling, error reference or SLA were found, and JetBrains disclosed two sets of critical vulnerabilities affecting YouTrack Cloud in 2026, both patched.

Redmine

1. Ask an administrator to tick Enable REST API under Administration, Settings, API. It is off by default and every call fails until then
2. Send the key in the X-Redmine-API-Key header, never as the key query parameter, and set Content-Type: application/json on every POST and PUT
3. Add status_id=* to issue lists. The default returns open issues only, 25 a page with a maximum of 100
4. Comment on an issue by sending notes in a PUT to /issues/<id>.json. There is no separate comment endpoint
5. A DELETE on a project through the API skips the confirmation the web page asks for, so run the agent as a non-administrator user

YouTrack

1. Send fields on every REST request. Without it the server returns only the database ID and $type of each entity
2. Page collections with $top and $skip. Most resources return 42 items by default
3. Call get_issue_fields_schema before create_issue or update_issue, because required custom fields differ by project
4. Connect MCP clients to https://<instance>.youtrack.cloud/mcp. OAuth needs an administrator to enable CIMD or register the client, since Dynamic Client Registration is not supported
5. Create permanent tokens with the YouTrack scope only, and add ?tools= to the MCP URL to limit the tools listed