Back to Browse

Tasklist Port MCP Server

Developer ToolsModerate5.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

Todoist tasks, projects, labels and sections as MCP tools.

About

Todoist tasks, projects, labels and sections as MCP tools.

Security Report

5.7
Moderate5.7Moderate Risk

tasklist-port is a clean, narrowly scoped Todoist REST client. It authenticates with TODOIST_API_TOKEN from the environment, validates tool arguments with zod, and URL-encodes path parameters, with no shell execution, dynamic code evaluation, or hardcoded secrets. The main points to be aware of are that TODOIST_API_BASE_URL can redirect the bearer token to any host, and that the delete tool is destructive with no confirmation step. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

TODOIST_API_TOKENRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-tasklist-port": {
      "env": {
        "TODOIST_API_TOKEN": "your-todoist-api-token-here"
      },
      "args": [
        "-y",
        "@reneturcios/tasklist-port"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

tasklist-port

Todoist tasks as MCP tools, talking to the Todoist REST API v1. tasklist-port is a clean-room rebuild of the core surface of the Todoist MCP server, under a new name: fresh code, no copied branding.

Tools (core subset, 12)

list_tasks, get_task, create_task, update_task, close_task, reopen_task, delete_task, list_projects, get_project, create_project, list_labels, list_sections.

Not in this subset: comments, shared labels, collaborators/sharing, reminders, activity log, completed-items history, project collaborators admin, user/productivity stats, Sync API incremental sync, backups, templates import/export, quick-add parsing endpoint.

Setup

Create an API token in Todoist (Settings → Integrations → Developer) and set it:

export TODOIST_API_TOKEN=0123456789abcdef...

Optionally override the API base with TODOIST_API_BASE_URL (default https://api.todoist.com/api/v1). Without the token, every tool call fails with an error naming the missing variable. Note: Todoist list endpoints return either a bare array or a {results:[...]} envelope depending on version — tasklist-port returns the parsed payload as-is.

CLI

npx @reneturcios/tasklist-port list_tasks '{"project_id":"p1"}'
npx @reneturcios/tasklist-port mcp        # stdio MCP server

Each tool name is a subcommand taking one JSON object argument.

MCP client config

{
  "mcpServers": {
    "tasklist-port": {
      "command": "npx",
      "args": ["-y", "@reneturcios/tasklist-port", "mcp"],
      "env": { "TODOIST_API_TOKEN": "0123456789abcdef..." }
    }
  }
}

Docker

docker run -i -e TODOIST_API_TOKEN ghcr.io/cloudcorprecords/tasklist-port

Development

npm install
npm run build
npm test

License

MIT

Reviews

No reviews yet

Be the first to review this server!