@taazkareem/clickup-mcp-server

Name: @taazkareem/clickup-mcp-server
Author: Talib Kareem

MCPcommunity

v0.14.4Talib KareemProprietaryUpdated 3mo agonpm GitHub

ClickUp MCP Server - Powering AI Agents with full ClickUp task, document, and chat management capabilities.

<h1 align="center">ClickUp MCP Server — Premium</h1> <p align="center"> <img src="https://raw.githubusercontent.com/taazkareem/clickup-mcp-server/main/assets/images/clickupmcpneonlogoblue.jpg" alt="ClickUp MCP Server Premium Logo" width="100%"> </p> <p align="center"> <a href="https://www.npmjs.com/package/@taazkareem/clickup-mcp-server"><img…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →

3mo agoLast update

Package

AuthorTalib Kareem

LicenseProprietary

Version0.14.4

Sourcenpm

npm@taazkareem/clickup-mcp-server

GitHubtaazkareem/clickup-mcp-server

Trust Status

40/100Caution

✓Listed in Forge index+10/10

—Publisher identity verified+0/20

→ Publisher: run `forge publish` from the package repo to claim ownership

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

—npm Trusted Publishing (Sigstore)+0/5

→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo

—npm maintainer match+0/5

→ Earned once your identity is verified above and that login is an npm maintainer of this package

✓CVE scan · clean+30/30

—Static analysis · clean+0/20

→ Suspicious install scripts or obfuscated code detected

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusCommunity-indexed

PublisherUnverified

SignatureUnsigned

Domain—

Provenance—

Dependencies60 resolved · 1 with advisories

Tool surface—

Security scan⚠ Warnings (11)v0.14.4 · 8d ago

MODERATE@hono/node-server@1.19.17Node.js Adapter for Hono: Path traversal in `serve-static` on Windows via encoded backslash (`%5C`) · transitive

CODE…ld/tools/attachment.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…/clickup/audit-logs.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…ld/tools/audit-logs.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODEbuild/middleware/auth.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…rvices/clickup/base.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…ask/bulk-operations.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…rvices/clickup/bulk.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODEbuild/utils/cache.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…ld/tools/categories.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…rvices/clickup/chat.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

EvalsNone

IndexedMay 24, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

Keywords

clickupmcpaitasksproject-managementmodel-context-protocolmcp-serverclaudeclaude-desktopgeminigemini-clicursorcursor-iden8nclinewindsurfzedsupermavenclickup-serverclickup-mcp-servertask-managementproductivityautomationworkflowteam-collaborationartificial-intelligenceproject-trackingtask-trackingproject-planningclickup-integrationclickup-apiclickup-automationtask-organizationproject-organization