← 返回 Skills 市场
pvoo

ClickUp MCP

作者 pvoo · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
3834
总下载
4
收藏
21
当前安装
1
版本数
在 OpenClaw 中安装
/install clickup-mcp
功能描述
Manage ClickUp tasks, docs, time tracking, comments, chat, and search via official MCP. OAuth authentication required.
使用说明 (SKILL.md)

ClickUp MCP (Official)

Access ClickUp via the official MCP server. Full workspace search, task management, time tracking, comments, chat, and docs.

Setup

Option 1: Direct OAuth (Supported Clients Only)

ClickUp MCP only allows OAuth from allowlisted clients:

  • Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, ChatGPT
# Claude Code
claude mcp add clickup --transport http https://mcp.clickup.com/mcp
# Then /mcp in session to authorize

Option 2: Claude Code → mcporter (Recommended)

Use Claude Code to OAuth, then extract token for mcporter:

Step 1: Authorize via Claude Code

claude mcp add clickup --transport http https://mcp.clickup.com/mcp
claude
# In Claude Code, run: /mcp
# Complete OAuth in browser

Step 2: Extract token

jq -r '.mcpOAuth | to_entries | .[] | select(.key | startswith("clickup")) | .value.accessToken' ~/.claude/.credentials.json

Step 3: Add to environment

# Add to ~/.clawdbot/.env
CLICKUP_TOKEN=eyJhbGciOiJkaXIi...

Step 4: Configure mcporter

Add to config/mcporter.json:

{
  "mcpServers": {
    "clickup": {
      "baseUrl": "https://mcp.clickup.com/mcp",
      "description": "Official ClickUp MCP",
      "headers": {
        "Authorization": "Bearer ${CLICKUP_TOKEN}"
      }
    }
  }
}

Step 5: Test

mcporter list clickup
mcporter call 'clickup.clickup_search(keywords: "test", count: 3)'

Token Refresh

Tokens are long-lived (~10 years). If expired:

  1. Re-run /mcp in Claude Code
  2. Re-extract token from ~/.claude/.credentials.json
  3. Update CLICKUP_TOKEN in .env

Available Tools (32)

Search

Tool Description
clickup_search Universal search across tasks, docs, dashboards, chat, files

Tasks

Tool Description
clickup_create_task Create task with name, description, status, assignees, due date, priority
clickup_get_task Get task details (with optional subtasks)
clickup_update_task Update any task field
clickup_attach_task_file Attach file to task (URL or base64)
clickup_add_tag_to_task Add tag to task
clickup_remove_tag_from_task Remove tag from task

Comments

Tool Description
clickup_get_task_comments Get all comments on task
clickup_create_task_comment Add comment (supports @mentions)

Time Tracking

Tool Description
clickup_start_time_tracking Start timer on task
clickup_stop_time_tracking Stop active timer
clickup_add_time_entry Log time manually
clickup_get_task_time_entries Get time entries for task
clickup_get_current_time_entry Check active timer

Workspace & Hierarchy

Tool Description
clickup_get_workspace_hierarchy Get full structure (Spaces, Folders, Lists)
clickup_create_list Create list in Space
clickup_create_list_in_folder Create list in Folder
clickup_get_list Get list details
clickup_update_list Update list settings
clickup_create_folder Create folder in Space
clickup_get_folder Get folder details
clickup_update_folder Update folder settings

Members

Tool Description
clickup_get_workspace_members List all workspace members
clickup_find_member_by_name Find member by name/email
clickup_resolve_assignees Get user IDs from names

Chat

Tool Description
clickup_get_chat_channels List all Chat channels
clickup_send_chat_message Send message to channel

Docs

Tool Description
clickup_create_document Create new Doc
clickup_list_document_pages Get Doc structure
clickup_get_document_pages Get page content
clickup_create_document_page Add page to Doc
clickup_update_document_page Edit page content

Usage Examples

Search Workspace

mcporter call 'clickup.clickup_search(
  keywords: "Q4 marketing",
  count: 10
)'

Create Task

mcporter call 'clickup.clickup_create_task(
  name: "Review PR #42",
  list_id: "901506994423",
  description: "Check the new feature",
  status: "to do"
)'

Update Task

mcporter call 'clickup.clickup_update_task(
  task_id: "abc123",
  status: "in progress"
)'

Add Comment

mcporter call 'clickup.clickup_create_task_comment(
  task_id: "abc123",
  comment_text: "@Mark can you review this?"
)'

Time Tracking

# Start timer
mcporter call 'clickup.clickup_start_time_tracking(
  task_id: "abc123",
  description: "Working on feature"
)'

# Stop timer
mcporter call 'clickup.clickup_stop_time_tracking()'

# Log time manually (duration in ms, e.g., 2h = 7200000)
mcporter call 'clickup.clickup_add_time_entry(
  task_id: "abc123",
  start: "2026-01-06 10:00",
  duration: "2h",
  description: "Code review"
)'

Get Workspace Structure

mcporter call 'clickup.clickup_get_workspace_hierarchy(limit: 10)'

Chat

# List channels
mcporter call 'clickup.clickup_get_chat_channels()'

# Send message
mcporter call 'clickup.clickup_send_chat_message(
  channel_id: "channel-123",
  content: "Team standup in 5 minutes!"
)'

Limitations

  • No delete operations — Safety measure; use ClickUp UI
  • No custom fields — Not exposed in official MCP
  • No views management — Not available
  • OAuth required — Must use allowlisted client (Claude Code workaround available)
  • Rate limits — Same as ClickUp API (~100 req/min)

Resources

安全使用建议
Before installing or using this skill: (1) Verify the skill's source and trustworthiness — the registry metadata mismatches the SKILL.md. (2) Do NOT extract tokens from other applications' credential stores unless you fully control and trust that environment; extracting from ~/.claude/.credentials.json exposes another client's secrets and is a red flag. (3) If you must use this connector, create a ClickUp OAuth token specifically for this integration (with the minimal scopes needed), store it securely (use a secrets manager rather than a long-lived plain-text ~/.env file), and rotate it after testing. (4) Confirm how mcporter is obtained and verify its integrity before installation. (5) Ask the publisher to correct the registry metadata to list required binaries and env vars explicitly, provide provenance for mcporter, and remove any directions that instruct harvesting credentials from other apps. If you cannot verify provenance or are uncomfortable with token extraction instructions, do not install or run this skill.
功能分析
Type: OpenClaw Skill Name: clickup-mcp Version: 1.0.0 The skill bundle is designed to integrate with ClickUp via its official MCP server. It requires the `mcporter` binary and a `CLICKUP_TOKEN` environment variable. The `SKILL.md` provides clear setup instructions for the user, including how to extract an OAuth token from `~/.claude/.credentials.json` using `jq` for local configuration. This `jq` command, while accessing a sensitive file, is presented as a user-executed setup step to obtain a token for their environment, not as an instruction for the AI agent to perform unauthorized access or exfiltration. All network interactions are directed to the legitimate ClickUp MCP domain (`https://mcp.clickup.com/mcp`), and the available tools align with the stated purpose of managing ClickUp resources. There is no evidence of malicious execution, data exfiltration by the agent, persistence mechanisms, or prompt injection attempts against the agent with harmful objectives.
能力评估
Purpose & Capability
The skill's capabilities (search, tasks, comments, time tracking, docs) align with what a ClickUp MCP integration would need. However, the SKILL.md metadata declares a required binary (mcporter) and env var (CLICKUP_TOKEN) while the registry fields show no required bins or env — this metadata mismatch is an incoherence that should be clarified.
Instruction Scope
The instructions explicitly tell the operator to read ~/.claude/.credentials.json and extract a ClickUp access token using jq, then place that token into ~/.clawdbot/.env and into a local config (config/mcporter.json). Asking the agent (or user) to read another client's credential file and extract tokens is scope creep and a privacy/credential exposure risk; it goes beyond simply telling you how to call the ClickUp MCP API.
Install Mechanism
This is instruction-only (no install spec), which is lower risk than arbitrary downloads. That said, the skill depends on an external tool (mcporter) but provides no install guidance or provenance for that tool — the lack of an install spec plus reliance on mcporter is an operational gap the registry should document.
Credentials
Functionally it makes sense that a ClickUp integration needs a ClickUp token, but the SKILL.md requests a long‑lived token (stated ~10 years) and instructs extracting it from another application's credentials file. The registry does not declare CLICKUP_TOKEN as a required credential, increasing the inconsistency. Asking for tokens with such longevity and telling users to harvest them from other clients is disproportionate and risky.
Persistence & Privilege
The skill does not force permanent inclusion (always: false) and does not request elevated platform privileges. However, it instructs writing the token into ~/.clawdbot/.env and editing config/mcporter.json — modifying local config is expected for a connector, but combined with the token-extraction workflow it increases persistence of a sensitive credential and expands blast radius if the token is compromised.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install clickup-mcp
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /clickup-mcp 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release - Official ClickUp MCP with OAuth workaround via Claude Code
元数据
Slug clickup-mcp
版本 1.0.0
许可证
累计安装 22
当前安装数 21
历史版本数 1
常见问题

ClickUp MCP 是什么?

Manage ClickUp tasks, docs, time tracking, comments, chat, and search via official MCP. OAuth authentication required. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 3834 次。

如何安装 ClickUp MCP?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install clickup-mcp」即可一键安装,无需额外配置。

ClickUp MCP 是免费的吗?

是的,ClickUp MCP 完全免费(开源免费),可自由下载、安装和使用。

ClickUp MCP 支持哪些平台?

ClickUp MCP 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 ClickUp MCP?

由 pvoo(@pvoo)开发并维护,当前版本 v1.0.0。

💬 留言讨论