clickup-mcp
Enables management of ClickUp tasks, docs, and time tracking through OAuth authentication and official MCP integration.
Install this skill
or
76/100
Security score
The clickup-mcp skill was audited on Feb 9, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 51
Template literal with variable interpolation in command context
SourceSKILL.md
| 51 | ```json |
low line 39
Access to hidden dotfiles in home directory
SourceSKILL.md
| 39 | jq -r '.mcpOAuth | to_entries | .[] | select(.key | startswith("clickup")) | .value.accessToken' ~/.claude/.credentials.json |
low line 44
Access to hidden dotfiles in home directory
SourceSKILL.md
| 44 | # Add to ~/.clawdbot/.env |
medium line 75
Access to hidden dotfiles in home directory
SourceSKILL.md
| 75 | 2. Re-extract token from `~/.claude/.credentials.json` |
low line 44
Access to .env file
SourceSKILL.md
| 44 | # Add to ~/.clawdbot/.env |
medium line 76
Access to .env file
SourceSKILL.md
| 76 | 3. Update `CLICKUP_TOKEN` in `.env` |
low line 4
External URL reference
SourceSKILL.md
| 4 | homepage: https://clickup.com |
low line 21
External URL reference
SourceSKILL.md
| 21 | claude mcp add clickup --transport http https://mcp.clickup.com/mcp |
low line 31
External URL reference
SourceSKILL.md
| 31 | claude mcp add clickup --transport http https://mcp.clickup.com/mcp |
low line 55
External URL reference
SourceSKILL.md
| 55 | "baseUrl": "https://mcp.clickup.com/mcp", |
low line 244
External URL reference
SourceSKILL.md
| 244 | - [ClickUp API Reference](https://clickup.com/api) |
low line 245
External URL reference
SourceSKILL.md
| 245 | - [Feedback / Allowlist Request](https://feedback.clickup.com) |
Scanned on Feb 9, 2026
View Security DashboardGitHub Stars 2.2K
Rate this skill
Categoryproject management
UpdatedApril 4, 2026
claude-codecursorgithub-copilotchatgptvscodeapiproject-manageroperations-managercustomer-success-managerclickupproject managementoperationssales
openclaw/skills