Todoist MCP Server: Tools, Setup and Security

The Todoist MCP server lets an AI app read and manage your Todoist tasks, projects, labels, comments and reminders. Doist, the company behind Todoist, publishes it as open source and also runs a hosted version at https://ai.todoist.net/mcp. You sign in with OAuth the first time you connect.

Checked against: Doist's todoist-mcp README on 28 October 2026. eSEOspace did not install or test this server.

At a glance

What it can do

The README points to the src/tools folder for the full list. Tool names in the code's tool-names file include:

• Tasks: add-tasks, update-tasks, complete-tasks, uncomplete-tasks, find-tasks, find-tasks-by-date, find-completed-tasks and reschedule-tasks.
• Projects and sections: add-projects, update-projects, find-projects, project-move, add-sections and find-sections.
• Comments, labels, filters and reminders: add, update and find tools for each.
• Collaboration: find-project-collaborators and manage-assignments.
• Insights: get-productivity-stats, get-project-health, analyze-project-health and get-workspace-insights.
• General: get-overview, fetch-object, delete-object, reorder-objects and user-info.
• Templates: export-project-template and import-project-template.

The server also includes search and fetch tools that follow OpenAI's MCP format. The README says it supports MCP Apps, which render task lists as small interactive widgets in chat.

Doist's design goal is "a small set of tools that enable complete workflows, rather than just atomic actions." That usually means fewer tool calls per request.

How to connect it

For Claude Code, Doist recommends its plugin:

/plugin marketplace add doist/todoist-mcp
/plugin install todoist@doist

Or add the server by hand:

claude mcp add --transport http todoist https://ai.todoist.net/mcp

Then launch claude, run /mcp and select todoist to sign in. In Claude Desktop, Doist says to open Settings → Connectors → Add custom connector and enter the URL.

For VS Code:

{
  "servers": {
    "todoist": {
      "type": "http",
      "url": "https://ai.todoist.net/mcp"
    }
  }
}

Cursor and other clients use the mcp-remote bridge, for example npx -y mcp-remote https://ai.todoist.net/mcp. You can also run the server locally with npx @doist/todoist-mcp.

Security notes

Todoist holds personal and work to-dos, which often include names, dates and private notes.

• Destructive tool. delete-object carries destructiveHint: true in the code. Clients can use that hint to ask before running it. See MCP tool annotations.
• Test safely. The README warns developers to use a test account or a temporary project when running write operations, to avoid changing real data.
• API keys for local use. Local tool runs read TODOIST_API_KEY from a .env file. Keep that file out of version control. Our page on secret leakage covers this.
• Open source helps review. Because the code is public, your team can read exactly what each tool does before you approve it.

More is in the MCP security hub.

Alternatives

• ClickUp MCP server for larger teams with docs and chat.
• Asana MCP server for project-based team work.
• Notion MCP server if your tasks live in Notion databases.

Next step

Todoist's server is a low-risk way to try MCP on your own task list before connecting shared business systems. If you want to build something similar for your own product, eSEOspace offers MCP development. Browse more profiles in the MCP server directory.

Frequently asked questions