Clickupmcpserver — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Clickupmcpserver (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server that provides AI assistants with access to ClickUp's project management capabilities. Deploy on Google Cloud Run for a scalable, serverless solution.
#### Workspace Management
clickup_list_workspaces - List all workspaces/teamsclickup_list_spaces - List spaces in a workspaceclickup_list_folders - List folders in a spaceclickup_list_lists - List all lists#### Task Operations
clickup_create_task - Create new tasksclickup_get_task - Get task detailsclickup_update_task - Update existing tasksclickup_delete_task - Delete tasksclickup_list_tasks - List and filter tasks#### Collaboration
clickup_add_comment - Add comments to tasksclickup_get_comments - Get task commentsclickup_get_members - List team members#### Project Management
clickup_create_list - Create new listsclickup_add_time_entry - Log time entriesclickup_get_time_entries - Retrieve time tracking datagcloud)npm install.env file:cp .env.example .env
# Edit .env and add your CLICKUP_API_KEYnpm run devcurl http://localhost:8080/healthnpm run buildexport GCP_PROJECT_ID="your-project-id"
export CLICKUP_API_KEY="your-clickup-api-key"
export MCP_API_KEY="optional-mcp-api-key" # For securing the MCP endpoint./deploy.shThe script will:
docker build -t gcr.io/YOUR_PROJECT_ID/mcp-server-clickup .gcloud auth configure-docker
docker push gcr.io/YOUR_PROJECT_ID/mcp-server-clickupecho -n "your-clickup-api-key" | gcloud secrets create clickup-api-key --data-file=-
echo -n "your-mcp-api-key" | gcloud secrets create mcp-api-key --data-file=-gcloud run deploy mcp-server-clickup \
--image gcr.io/YOUR_PROJECT_ID/mcp-server-clickup \
--region us-central1 \
--platform managed \
--allow-unauthenticated \
--set-secrets=CLICKUP_API_KEY=clickup-api-key:latest,MCP_API_KEY=mcp-api-key:latestAfter deployment, configure your MCP client to connect to the Cloud Run service:
{
"mcpServers": {
"clickup": {
"url": "https://mcp-server-clickup-xxxxx.run.app/mcp/sse",
"apiKey": "your-mcp-api-key"
}
}
}The server supports two levels of authentication:
If MCP_API_KEY is set, clients must include it in the Authorization header:
Authorization: Bearer your-mcp-api-keyThe included cloudbuild.yaml enables automatic deployment on git push:
View logs and metrics in Google Cloud Console:
For local debugging:
NODE_ENV=development npm run devMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.