# ClickUp (slim)

> ClickUp is a work management platform for tasks, docs, chat and time tracking. Agents reach it through a hosted MCP server at mcp.clickup.com and a public REST API (v2 and v3), both available on every plan.

- Full: https://www.anchorterminal.com/tools/clickup.md (~7,750 tokens) · this version ~1,830 tokens · JSON https://www.anchorterminal.com/tools/clickup.json · canonical https://www.anchorterminal.com/tools/clickup
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-08

**C · 60.9/100 · rank #336 of 629 · #5 in Project & task management · not agent-ready · confidence medium**


Assessment: The hosted MCP server uses OAuth 2.1 with PKCE, dynamic client registration and read and write scopes, and works on the Free Forever plan. Without the Everything AI add-on, MCP calls are capped at 100 to 25,000 per rolling 24 hours by plan. No API changelog, deprecation policy, official SDK or SLA was found.

## Facts

- Kind: HTTP API · vendor: Mango Technologies, Inc. DBA ClickUp · category: Project & task management · legal entity: Mango Technologies, Inc. DBA ClickUp · provenance 97/100
- Endpoint: `https://api.clickup.com` (HTTP, Streamable HTTP)
- Auth: OAuth or key · pricing: Freemium · x402: no · licence: Proprietary service under ClickUp's Terms of Service and Developer Terms. The clickup-plugin repository on GitHub is MIT
- Probe metrics: not measured yet (probes haven't run)
- Surfaces graded: Hosted MCP server at https://mcp.clickup.com/mcp and the public REST API at https://api.clickup.com (v2 with 138 operations, v3 with 35)
- MCP tools: 48 documented. Search (3), tasks (5), bulk tasks (2), attachments (1), comments (3), tags (2), links and dependencies (4), moving tasks (2), time tracking (6), hierarchy (8), members (3), Chat (2), Docs (5), time in status (2)
- MCP authentication: OAuth 2.1 only, authorisation code with PKCE (S256), dynamic client registration, scopes read and write, resource indicators. No API keys
- API authentication: Personal token (`pk_`) in the Authorization header, or OAuth 2.0 authorisation code tokens per user. Neither expires. No scopes. Users choose which Workspaces to authorise
- API rate limits: Per token per minute. Free Forever, Unlimited and Business 100, Business Plus 1,000, Enterprise and Enterprise Plus 10,000. 429 with `X-RateLimit-Limit`, `X-RateLimit-Remaining`, `X-RateLimit-Reset`
- MCP rate limits: Without the Everything AI add-on, calls per rolling 24 hours per Workspace and client. Free Forever 100, Core or Unlimited 300, Business 1,000, Business Plus 2,500, Enterprise 5,000, Enterprise Plus 25,000. With the add-on, the API limits apply
- Pagination: API v2 uses `page` at 100 tasks a page. API v3 uses `limit` with `cursor` and `next_cursor`
- Webhooks: Created through the API per Workspace, Space, Folder, List or task, signed with HMAC SHA-256 in `X-Signature`. Five delivery attempts per event, suspension at 100 failures, failed events not resent
- Enterprise-only API: User and guest management endpoints, the Workspace audit log endpoint, and `admin_can_manage` on Update Space
- SDKs and plugins: No official SDK found. Official clickup-plugin repository (MIT, version 1.1.0) for Claude Code, Cursor and Agent Plugins clients, with three skills
- Certifications: SOC 1 Type 2, SOC 2 Type 2, SOC 3, ISO 27001, 27017, 27018, 27701 and 42001 per clickup.com/security. Reports on request from sales
- Status: status.clickup.com on incident.io, 22 components including Public API, Tasks, Search and Docs
- Sub-processors: List updated 28 September 2026 with purposes and locations. Hosting on AWS in the USA, Ireland, Germany, Australia and Singapore
- Prices: Free Forever (API and MCP included) free per seat per month; Unlimited $7 per seat per month; Business $12 per seat per month; Everything AI add-on $28 per seat per month; AI Super Credits $0.001 per credit

- Scores: Reliability 74, Performance pending, Schema & documentation 74, Agent ergonomics 48, Security & auth 64, Payments & pricing 30, Task success pending, Maintenance & community 54, Transparency & trust 75 · total over the 7 assessed categories
- Why: Reliability, Graded on the hosted MCP server and the public REST API, with the hosted lines. · Schema & documentation, OpenAPI 3.1 spec for API v2 with 138 operations and an OpenAPI 3.0 spec for v3 with 35, both public (25). · Agent ergonomics, 48 documented MCP tools (5). · Security & auth, The MCP server takes only OAuth 2.1 with PKCE (S256), dynamic client registration and resource indicators, with two scopes, read and write. · Payments & pricing, No x402, MPP or L402 (0). · Maintenance & community, The MCP docs page was updated on 7 October 2026 and product Release Notes 4.08 are dated 18 September 2026 (30). · Transparency & trust, Closed service under Terms of Service effective 27 June 2025 and Developer Terms last updated 16 July 2024, naming Mango Technologies, Inc.
- Sources: 27, open questions: 9, both in the full twin
- Capabilities: tasks.create, tasks.update, projects.manage, tasks.comments, projects.reporting, work.docs, work.chat
- JSON: https://www.anchorterminal.com/api/v1/tools/clickup.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/clickup.svg` or a link to https://www.anchorterminal.com/tools/clickup from a page on clickup.com or one of its subdomains, or the README of github.com/clickup/clickup-plugin, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Connect to https://mcp.clickup.com/mcp with OAuth 2.1 and PKCE. API keys and REST OAuth tokens are refused on the MCP server
2. Pass `workspace_id` on every MCP call when the user belongs to more than one Workspace, as ClickUp's own skills instruct
3. Budget MCP calls. Each tool call counts against the rolling 24-hour cap, and `RATE_LIMIT_EXCEEDED` returns `retryAfter`
4. On the REST API read `X-RateLimit-Remaining` and `X-RateLimit-Reset`, and page Get Tasks with `page` at 100 tasks a page
5. Treat `team_id` in API v2 as the Workspace ID, and send dates as Unix milliseconds

## Connect

```bash
curl https://api.clickup.com/api/v2/team -H "Authorization: $CLICKUP_API_TOKEN"
```

```bash
claude mcp add --transport http clickup https://mcp.clickup.com/mcp
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/clickup

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| monday.com | BB | 76.4 | tasks.create, tasks.update, projects.manage, tasks.comments, projects.reporting, work.docs | https://www.anchorterminal.com/tools/monday.min.md |
| Asana | BB | 70.1 | tasks.create, tasks.update, projects.manage, tasks.comments, projects.reporting | https://www.anchorterminal.com/tools/asana.min.md |
| Todoist | B | 66.9 | tasks.create, tasks.update, projects.manage, tasks.comments, projects.reporting | https://www.anchorterminal.com/tools/todoist.min.md |
| Wrike | C | 60.1 | tasks.create, tasks.update, projects.manage, tasks.comments, projects.reporting | https://www.anchorterminal.com/tools/wrike.min.md |
| Trello | C | 61.1 | tasks.create, tasks.update, projects.manage, tasks.comments | https://www.anchorterminal.com/tools/trello.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)