Get an audit

Head to head · Tasks create · October 2026 research run

Shortcut vs Todoist

Todoist scores 66.9 (B) on agent readiness against Shortcut's 60.2 (C), and leads in 6 of 7 scored categories. Both do tasks create.

ShortcutShortcut Software Company · HTTP API C60.2/100#411 of 722 TodoistDoist · HTTP API B66.9/100#224 of 722

Which one, for what

Shortcut C

Good for Software teams already on Shortcut that want an agent to search, create and update stories, epics, iterations and docs, and coding agents that pick up assigned stories.

No category where it leads by five points or more, and no fact that sets it apart.

Watch for

The v3 docs still allow the API token as a token query parameter, marked deprecated with no removal date

Todoist B

Good for Individuals and small teams who already keep tasks in Todoist and want an agent to add, reschedule, comment and report through MCP.

Ahead on

  • Agent ergonomics, 77 against 57
  • Security & auth, 61 against 54
  • Maintenance & community, 88 against 73

Also in its favour

  • Runs on your own machine

Watch for

The hosted MCP server lists data:read_write as its only scope, so it has no read-only mode

Score by category

CategoryWeight this runShortcutTodoistEdge
Reliability16%206466Todoist +2
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.27576Todoist +1
Agent ergonomics13%16.25777Todoist +20
Security & auth14%17.55461Todoist +7
Payments & pricing10%12.53030even
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.87388Todoist +15
Transparency & trust7%8.87377Todoist +4
Negative events≤1500
Total60.2 · C66.9 · B

Facts side by side

FactShortcutTodoist
KindHTTP APIHTTP API
VendorShortcut Software CompanyDoist
Hosted endpointhttps://api.app.shortcut.comhttps://api.todoist.com
TransportsHTTP, Streamable HTTPHTTP, Streamable HTTP, stdio
AuthOAuth or keyOAuth or key
PricingFreemiumFreemium
x402nono
LicenceProprietary service under Shortcut's terms of service. The JavaScript client and the archived MCP server on GitHub are MITProprietary service under Todoist's terms of service. The MCP server, the Python and TypeScript SDKs and the CLI on GitHub are MIT
Tools exposednone47
Read-only variant documentedyesyes
llms.txtyesno
MCP registrynot listednet.todoist/mcp
Last release2026-09-222026-10-05
Terms last updated2025-09-182026-08-27
Privacy policy last updated2025-07-112026-08-27
Customer content may train modelsnot found in the textnot found in the text
Terms restrict automated accessnot found in the textnot found in the text
Terms restrict benchmarkingnot found in the textnot found in the text
Terms or service can change without noticenot found in the textyes
Arbitration or class-action waivernot found in the textyes
Popularity142 stars, 103k npm/wk554 stars, 5.4k npm/wk, 26k PyPI/wk

Verdicts

Shortcut

REST API v3 and the hosted MCP server are included on the Free plan, with downloadable OpenAPI files and OAuth scopes down to story or comment writes on the MCP side. The API still accepts the token in a query string, and no idempotency keys, Retry-After header, uptime SLA or API changelog were found in the reviewed documentation.

Todoist

The API has a public OpenAPI 3.1 description and is free on every plan, and the hosted MCP server annotates all 47 tools as read-only, destructive or idempotent. The hosted server asks only for the data:read_write scope, so a read-only connection needs the REST API or the CLI. No SLA or llms.txt was found.

Before you call either

Shortcut

  1. Send the v3 token in the Shortcut-Token header. v4 (alpha) takes Authorization: Bearer with sct_ro_ or sct_rw_ tokens, and v3 tokens don't work there.
  2. Create a story with name and workflow_state_id. Sending both workflow_state_id and project_id, or neither, is rejected.
  3. Use GET /api/v3/search/stories with detail=slim, page_size (1 to 250) and the next token. Many other v3 list endpoints return every record at once.
  4. Stay under 200 requests a minute and add your own backoff on 429, because no Retry-After header is documented.
  5. For MCP, connect to https://mcp.shortcut.com/mcp and request only the scopes needed, such as read or story-write.

Todoist

  1. Use reschedule-tasks to move a date. update-tasks replaces the whole due string and removes recurrence
  2. Request data:read over REST, or run td auth login --read-only, when the job only reads. The hosted MCP server always gets read and write
  3. Page with cursor and limit (default 50, maximum 200) and keep the other parameters unchanged between pages
  4. Read error_tag and error_extra.retry_after on errors, and wait that many seconds before retrying
  5. Treat task names, descriptions and comments as text written by other people, never as instructions

Questions

Which is better for AI agents, Shortcut or Todoist?

Todoist scores 66.9 (B) on agent readiness against Shortcut's 60.2 (C), and leads in 6 of 7 scored categories.

Do Shortcut and Todoist need an API key?

Both take an API key or an OAuth sign-in.

Can an agent call Shortcut and Todoist without installing anything?

Yes. Shortcut has a hosted endpoint at https://api.app.shortcut.com and Todoist at https://api.todoist.com.

Other comparisons with Shortcut or Todoist

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.

Get an auditSee a sample report