Todoist
by Todoist
Triage your inbox, plan your week, create projects and complete tasks from your AI assistant. 27 tools listed, OAuth sign-in, one combined read-and-write scope, works on every Todoist plan.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Todoist via MCP
https://ai.todoist.net/mcpWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Todoist Tools & Capabilities (27)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
- Deleting a task is permanent. Todoist documents no undo and no restore for a deleted task. The connector exposes a delete tool and no inverse. Backup import is the only documented recovery, it is a paid-plan feature, and backups are daily — so same-day work can be unrecoverable. This is the single most important sentence on the page.
- The consent screen cannot narrow the connection. One scope,
data:read_write, with reading and writing fused into the same grant. A read-only Todoist connection is not something you can approve here, even thoughdata:readexists on the platform and Doist's own CLI uses it. - The directory listing understates the surface by twenty tools. Doist's source registers 47; Anthropic's listing names 27. Labels, filters, reminders, templates, analytics, reordering and attachments are entirely absent from the listing, as are
reschedule-tasksanduncomplete-tasks. - Todoist's own capability table contradicts the tool list. Todoist's Claude connector article lists managing sections, labels, comments and filters under what Claude "doesn't support", while the same directory listing names
add-sections,update-sections,add-commentsandupdate-comments. We cannot reconcile these from published sources. Treat the tool list as the ceiling and the help article as the vendor's own expectation, and verify against your account. - It cannot put a new project in a workspace folder. Todoist states this directly in two separate articles: create the project, then move it into the folder by hand.
- Changing a date destroys recurrence. Doist's server instructions say
update-tasksreplaces the whole due string, which wipes the repeat pattern on a recurring task. The tool that preserves it,reschedule-tasks, is one of the twenty absent from Anthropic's listing. - Template imports write immediately and cannot be undone. Doist's own server instructions say so.
import-project-templateis in the source and not in the directory listing. - History is plan-gated. Todoist documents one week of activity history on Beginner and full history on Pro and Business. An assistant asked what you finished last month will simply have less to read on a free account.
- Structural caps apply on every plan. Todoist documents 300 active tasks per project, 20 sections per project, 500 total active projects and 500 labels per account, and states these apply to Pro and Business too with no option to raise them. A bulk operation driven conversationally can reach them.
- Rate limits are per user, not per connector. Todoist documents 1,000 partial sync requests and 100 full sync requests per user per 15-minute period, with a 15-second processing timeout on a standard request. Todoist does not state how MCP tool calls map onto these counters, so treat the figures as platform-wide rather than connector-specific.
- The delete scopes are unexplained. Todoist's platform documents
data:deleteandproject:deleteas scopes separate fromdata:read_write. The MCP descriptor advertises neither, yet the connector ships a delete tool. We did not authenticate and make no claim about how the server resolves this. Read the consent screen. - There is no public tool catalogue. A
GETtohttps://ai.todoist.net/mcpreturns HTTP 405 withAllow: POST, and the host root,robots.txtand.well-known/mcp.jsonall return 404. The names-only tool section is a limit of the server, not of our effort. - We did not read the live tools and never called one. Our only contact with the server was an anonymous handshake that returned HTTP 401, plus reads of its two
.well-knowndocuments. Everything above about tool behaviour comes from Todoist's documentation, Doist's published source, or Anthropic's directory listing.
Frequently asked questions
Which Todoist plan do you need for the MCP server?
Every plan, including the free Beginner tier. Todoist's help documentation names no plan requirement for the connector itself. What your plan changes is how much history the connector can read: Todoist documents one week of activity history on Beginner and full history on Pro and Business, so a Beginner account cannot answer questions about last month.
Can the Todoist MCP server permanently delete my tasks?
Yes, and a deleted task cannot be restored. Todoist states plainly that once a task is deleted it cannot be restored to your project, and that there is no undo option for a task deletion. The only recovery path Todoist documents is importing a copy from a backup, which is a Pro and Business feature.
Why does the Todoist connector sign you in at a different domain than the server?
The server and the login live on different hosts by design. The connector endpoint is ai.todoist.net, but its OAuth descriptor names https://todoist.com as the authorization server. So the sign-in page you approve is on Todoist's own brand domain, even though the MCP host is not.
Can you give the Todoist connector read-only access?
Not through this server. Its descriptor advertises one scope, data:read_write, which fuses reading and writing into a single grant. Todoist's platform does publish a separate read-only data:read scope, and its own command-line tool offers a read-only login, but the MCP resource does not request that narrower scope.
Why did asking Claude to change a date break a recurring Todoist task?
Changing the date replaces the whole due string, which destroys the repeat schedule. Todoist's guidance is to say reschedule rather than change the date, because the reschedule path keeps the recurrence intact. If the recurrence is already lost, Todoist says to reopen the task and set the repeat in the date field again.
Why can't Claude find your completed recurring tasks in Todoist?
Recurring tasks never enter your completed list. Todoist explains that completing a recurring task reschedules it to the next occurrence instead of marking it done, and records the event in your activity log. Todoist's fix is to name the activity log in your request, which returns every completion in the period.
How many tasks can the Todoist MCP server create in one request?
Twenty-five. Todoist documents that the MCP server supports up to 25 tasks per call and recommends telling the assistant to add them all together. Todoist warns that creating tasks one at a time can exhaust the assistant's tool-call budget before a long list is finished.
Why does the Todoist connector show as Requested and never finish connecting?
A Claude workspace administrator has not approved it yet. Todoist documents that on Claude Team and Enterprise plans an Owner or Primary Owner must approve a connector request before a member's connection completes. Todoist notes there is nothing to approve on the Todoist side, so the block is entirely on the Claude account.
Sources
- Anonymous MCP
initializeagainsthttps://ai.todoist.net/mcp— HTTP 401 withWWW-Authenticate: Bearer resource_metadata="https://ai.todoist.net/.well-known/oauth-protected-resource/mcp", our own observation, 2026-08-18. This challenge is what establishes the OAuth posture. A plainGETto the same URL returns HTTP 405 withAllow: POST, andGET /returns 404, so no unauthenticated tool catalogue is served. · retrieved 2026-08-18 - Todoist's RFC 9728 protected-resource descriptor — — HTTP 200, retrieved 2026-08-18. Names
authorization_servers: ["https://todoist.com"]andscopes_supported: ["data:read_write"]. The same document is served at the path-less form. This is the source for the single combined scope and for the authorization server being the brand domain. · retrieved 2026-08-18 - Authorization-server metadata — — HTTP 200, retrieved 2026-08-18.
issuer: https://todoist.com, aregistration_endpoint(dynamic client registration),authorization_codeandrefresh_tokengrants, andcode_challenge_methods_supported: ["S256"]— S256 only, noplain. Advertises thirteen scopes includingdata:read,data:deleteandproject:delete.ai.todoist.netserves no authorization-server document of its own (HTTP 404). · retrieved 2026-08-18 - Use Claude with Todoist (connector) (HTTP 200, retrieved 2026-08-18). Source for the Claude setup steps, the Team/Enterprise approval prerequisite, the supported/unsupported capability table, the workspace-folder limitation, the 25-task batch ceiling, the recurring-task warning and four of the FAQ questions. · retrieved 2026-08-18
- Use ChatGPT with Todoist MCP (HTTP 200, retrieved 2026-08-18). Source for the ChatGPT Developer Mode requirement, the endpoint as Todoist publishes it, the activity-log answer for recurring completions, and the plan-gated history statement. · retrieved 2026-08-18
- Use Claude Code with Todoist CLI and MCP (HTTP 200, retrieved 2026-08-18). Source for the plugin commands, the duplicate-entry warning, the 25-task batch guidance and the reschedule-versus-change-date tip. · retrieved 2026-08-18
- Introduction to tasks (HTTP 200, retrieved 2026-08-18). Source for the statement that a deleted task cannot be restored and that there is no undo, with backup import named as the only recovery. · retrieved 2026-08-18
- Introduction to projects (HTTP 200, retrieved 2026-08-18). Source for project archiving being reversible, unlike task deletion. · retrieved 2026-08-18
- Download or restore backups (HTTP 200, retrieved 2026-08-18). Source for backups being a paid-plan feature, kept as up to 21 daily ZIP files. · retrieved 2026-08-18
- Usage limits in Todoist (HTTP 200, retrieved 2026-08-18). Source for 300 active tasks per project, 20 sections per project, 500 active projects, 500 labels, and the one-week versus full activity history split between Beginner and Pro. · retrieved 2026-08-18
- Todoist API documentation (HTTP 200, retrieved 2026-08-18). Source for the permission-scope table including the
data:readdefinition, and for the rate limits of 1,000 partial and 100 full sync requests per user per 15 minutes with a 15-second standard-request timeout. · retrieved 2026-08-18 @doist/todoist-mcpserver source (package version 12.6.0, main branch, pushed 2026-08-18, retrieved 2026-08-18, MIT licensed). ThedocumentationURL Anthropic publishes,https://github.com/Doist/todoist-ai, redirects here. Source for the 47-tool registry, the 27-versus-47 diff, the eight entity typesdelete-objectaccepts, the complete three-hint annotations on all 47 tools, the typed accessor shapes offetch,fetch-objectandsearch, the OpenAI-specification rationale, the universal-deletion design note, the local-server security warning and the server's own instruction text. · retrieved 2026-08-18- Todoist CLI (retrieved 2026-08-18). Source for
td auth login --read-onlyrequesting thedata:readscope and blocking write commands, which demonstrates a read-only grant is available at the platform level. · retrieved 2026-08-18 robots.txtfortodoist.com(HTTP 200, retrieved 2026-08-18). Allows/help/, disallows only app and API paths, and carries noContent-Signaldirective, so fetching and synthesis are both unrestricted. The host'ssitemap.xmlis how the three MCP help articles were located; no sub-URL was guessed. · retrieved 2026-08-18- Anthropic Connectors Directory entry, including the 27 tool names, permissions and tier (from the committed directory snapshot dated 2026-08-16, re-read 2026-08-18) · retrieved 2026-08-16
- Todoist support — · Privacy
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Productivity
- Developer
- Todoist
- Tools
- 27
- Domain
- ai.todoist.net
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.