ClickUp MCP server: setup & sharing

Tasks, docs, and spaces for remote teammates — writes need your approval.

Run on your machine

Start the server on your host machine. Tools not listed in --allow are completely hidden from the agent.

Terminal · Host machine

npx -y @mcpwire/cli share \
  --name clickup \
  --allow "get_workspace_seats,get_workspaces,get_spaces,get_space,get_lists,get_folderless_lists,get_list,get_tasks,get_task_details,get_task_comments,get_list_comments,get_threaded_comments,get_chat_view_comments,get_doc_content,get_docs_from_workspace,get_doc_pages,search_docs" \
  --redact-secrets \
  -- npx -y clickup-mcp-server@1.12.0

Exposes 17 default tools with pattern-based secret redaction. Optionally set an expiry with --ttl 30m, prompt for approvals with --confirm, or limit calls with --max-calls 20.

Connect your teammate’s agent

MCPWire prints a unique wire://... ticket in your terminal. Send it privately to your teammate to paste into their MCP client:

Claude Desktop · Cursor · Windsurf config

{
  "mcpServers": {
    "clickup": {
      "command": "npx",
      "args": [
        "-y",
        "@mcpwire/cli",
        "join",
        "wire://<TICKET_FROM_HOST>"
      ]
    }
  }
}

Replace <TICKET_FROM_HOST> with the active session ticket. The agent can only discover and call the tools exposed above.

Scoped tool permissions

MCPWire acts as a Layer 7 JSON-RPC firewall. Requests for blocked tools are dropped on the wire before ever touching your machine.

Tool	Default Policy	Notes
`get_workspace_seats`	Allowed	Reports workspace seat usage.
`get_workspaces`	Allowed	Lists workspaces.
`get_spaces`	Allowed	Lists spaces.
`get_space`	Allowed	Reads space details.
`get_lists`	Allowed	Lists lists in a folder.
`get_folderless_lists`	Allowed	Lists lists without folders.
`get_list`	Allowed	Reads list details.
`get_tasks`	Allowed	Lists tasks with filters.
`get_task_details`	Allowed	Reads task details.
`get_task_comments`	Allowed	Reads task comments.
`get_list_comments`	Allowed	Reads list comments.
`get_threaded_comments`	Allowed	Reads comment threads.
`get_chat_view_comments`	Allowed	Reads chat view comments.
`get_doc_content`	Allowed	Reads a ClickUp doc.
`get_docs_from_workspace`	Allowed	Lists workspace docs.
`get_doc_pages`	Allowed	Reads doc page structure.
`search_docs`	Allowed	Searches docs.
`create_task`	Blocked (High risk)	Creates tasks.
`update_task`	Blocked (High risk)	Updates task fields, status, and assignees.
`create_list`	Blocked (High risk)	Creates lists.
`update_list`	Blocked (High risk)	Edits lists.
`delete_list`	Blocked (High risk)	Deletes lists.
`create_task_comment`	Blocked (High risk)	Posts comments as your identity.
`delete_comment`	Blocked (High risk)	Deletes comments.
`create_checklist_item`	Blocked (High risk)	Adds checklist items.

Test and verify

Try these recommended prompts to confirm the agent receives expected outputs and that restricted actions fail safely.

Try ClickUp

Create a ClickUp personal API token and set CLICKUP_API_TOKEN in the host environment. ClickUp has no official stdio server, so this entry uses a maintained community server; the token’s workspace scope is the security boundary.

Ask the agent to list workspaces with get_workspaces, then read tasks with get_tasks or a doc with get_doc_content. Task contents, comments, and docs flow to the guest while the session is open. Task, list, and comment writes stay outside the default allowlist; the server registers about 55 tools, and anything not listed here requires explicit approval.

The generated command above contains the catalog’s explicit default allowlist. Check the guest’s tool list before making calls and use the server’s argument schema for required fields. See the CLI guide for guest configuration and session controls for approvals, redaction, and expiry.

Review the session in your browser: Add --record session.wirelog to your host command. Drop the resulting file into the Session Replay Viewer to inspect timestamps, latency, blocked attempts, and secret scrubbing.

← All server guides Open in command builder