TickTick MCP Server

A security-hardened Model Context Protocol (MCP) server for TickTick that enables managing your tasks directly through any MCP-compatible client.

Works With Any MCP Client

This server works with any MCP-compatible client:

Claude Desktop
Cursor
Cline
Continue
Any MCP-compatible IDE or tool

Quick Start

1. Get TickTick API Credentials

Go to TickTick Developer Center
Create a new app with redirect URI: http://localhost:8080/callback
Copy your Client ID and Client Secret

2. Authenticate (One-Time Setup)

Run this command and enter your credentials when prompted:

uvx ticktick-mcp-server auth

This opens your browser to authorize with TickTick. Your tokens are securely saved to ~/.config/ticktick-mcp/credentials.json.

3. Configure Your MCP Client

Add to your MCP client config:

{
  "mcpServers": {
    "ticktick": {
      "command": "uvx",
      "args": ["ticktick-mcp-server", "run"],
      "env": {
        "TICKTICK_CLIENT_ID": "your-client-id-here",
        "TICKTICK_CLIENT_SECRET": "your-client-secret-here"
      }
    }
  }
}

Config file locations

Client	macOS	Windows
Claude Desktop	`~/Library/Application Support/Claude/claude_desktop_config.json`	`%APPDATA%\Claude\claude_desktop_config.json`
Cursor	`~/.cursor/mcp.json`	`%USERPROFILE%\.cursor\mcp.json`

4. Restart Your Client

That's it! Now you can:

"Show me all my TickTick projects"
"What tasks are due today?"
"Create a task to buy groceries in my Shopping list"

Alternative Installation

Using pip

pip install ticktick-mcp-server
ticktick-mcp-server auth

Dida365 (滴答清单) Support

For the China version of TickTick, add these environment variables to your MCP config:

{
  "mcpServers": {
    "ticktick": {
      "command": "uvx",
      "args": ["ticktick-mcp-server", "run"],
      "env": {
        "TICKTICK_CLIENT_ID": "your-client-id",
        "TICKTICK_CLIENT_SECRET": "your-client-secret",
        "TICKTICK_BASE_URL": "https://api.dida365.com/open/v1",
        "TICKTICK_AUTH_URL": "https://dida365.com/oauth/authorize",
        "TICKTICK_TOKEN_URL": "https://dida365.com/oauth/token"
      }
    }
  }
}

Available Tools

Projects

Tool	Description
`get_projects`	List all projects
`get_project`	Get project details
`create_project`	Create a new project
`delete_project`	Delete a project

Tasks

Tool	Description
`get_task`	Get task details
`create_task`	Create a new task
`update_task`	Update a task
`complete_task`	Mark task complete
`delete_task`	Delete a task
`get_all_tasks`	Get all tasks
`search_tasks`	Search tasks

Date Filters

Tool	Description
`get_tasks_due_today`	Tasks due today
`get_tasks_due_tomorrow`	Tasks due tomorrow
`get_tasks_due_this_week`	Tasks due this week
`get_overdue_tasks`	Overdue tasks

GTD Workflow

Tool	Description
`get_engaged_tasks`	High priority + overdue
`get_next_tasks`	Medium priority + due tomorrow
`batch_create_tasks`	Create multiple tasks

Example Prompts

"Show me all my TickTick projects"
"What tasks do I have due today?"
"Create a high priority task 'Finish report' in my Work project"
"Mark 'Buy groceries' as complete"
"Show me everything that's overdue"
"Break down 'Plan vacation' into 5 subtasks"

Credential Storage

Tokens are stored securely in:

macOS/Linux: ~/.config/ticktick-mcp/credentials.json
Windows: %APPDATA%/ticktick-mcp/credentials.json

To re-authenticate, run uvx ticktick-mcp-server auth again.

Why This Fork?

This is a security-hardened fork of jacepark12/ticktick-mcp with 9 vulnerabilities fixed:

Severity	Issue	Status
Critical	CSRF in OAuth callback	Fixed
High	Insecure credential file permissions	Fixed
High	OAuth server binds to all interfaces	Fixed
High	No explicit TLS verification	Fixed
Medium	Sensitive data in error messages	Fixed
Medium	No rate limiting on OAuth	Fixed
Medium	Bare except catches signals	Fixed
Medium	Path traversal in IDs	Fixed
Medium	Race conditions in state	Fixed

License

MIT License - see LICENSE file for details.

Credits

Fork of jacepark12/ticktick-mcp.

TickTick MCP Server