io.github.taazkareem/clickup

Name: io.github.taazkareem/clickup
Rating: 40 (1 reviews)
Author: io.github.taazkareem

MCPcommunity

v0.12.12io.github.taazkareemUnknownUpdated 4mo agonpm GitHub

Premium AI integration. Tasks, lists, docs, folders, time. 50+ tools. Instant setup.

ClickUp MCP Server — Premium Properly Connect ClickUp to AI Agents and Agentic Workflows A high-performance Model Context Protocol (MCP) server for managing tasks, checklists, sprints, comments, tags, spaces, lists, folders, files, docs, chat, and time using natural language. ⭐️ Proven Performance: 460+ Stars (from previous public repo) & thousands of weekly NPM downloads. The industry-standard…

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →

4mo agoLast update

Package

Authorio.github.taazkareem

LicenseUnknown

Version0.12.12

Sourcemcp-registry

npm@taazkareem/clickup-mcp-server

GitHubtaazkareem/clickup-mcp-server

Trust Status

40/100Caution

✓Listed in Forge index+10/10

—Publisher identity verified+0/25

→ Publisher: run `forge publish` from the package repo to claim ownership

—Ed25519 publish signature+0/10

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

✓CVE scan · clean+30/30

—Static analysis · clean+0/20

→ Suspicious install scripts or obfuscated code detected

—npm provenance (Sigstore)+0/5

→ Publish from GitHub Actions with the --provenance flag

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusCommunity-indexed

PublisherUnverified

SignatureUnsigned

Domain—

Provenance—

Dependencies✓ 60 resolved+ · none vulnerable

Tool surface—

Security scan⚠ Warnings (10)v0.14.4 · 20d ago

CODE…ld/tools/attachment.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…/clickup/audit-logs.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…ld/tools/audit-logs.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODEbuild/middleware/auth.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…rvices/clickup/base.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…ask/bulk-operations.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…rvices/clickup/bulk.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODEbuild/utils/cache.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…ld/tools/categories.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

CODE…rvices/clickup/chat.jsjavascript-obfuscator artifact (_0x identifiers) (in minified file)

EvalsNone

IndexedJun 13, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts — it cannot prove the absence of malicious code.

About

Keywords

mcp