What it is
Doist hosts the Todoist MCP server at https://ai.todoist.net/mcp over Streamable HTTP, with OAuth sign-in, and lists it in the official MCP registry as net.todoist/mcp. Claude Code users can install it as a plugin; Claude Desktop and VS Code add the URL directly, and Cursor and other clients connect through mcp-remote.
The same code is published on npm as @doist/todoist-mcp (version 13.6.2 was tagged on 23 October 2026). It runs locally with a TODOIST_API_KEY over stdio or an optional local HTTP server, and its tools can be imported as a library, for example with Vercel's AI SDK. The repo is MIT licensed.
Doist aims for tools that cover whole workflows, such as finding tasks by date or adding tasks in bulk, rather than one tool per API call. The tools directory now holds 47, including OpenAI-style search and fetch tools and MCP Apps widgets that render task lists inline in supporting clients.
Install
https://ai.todoist.net/mcpOur review
Todoist's server is what a small vendor taking MCP seriously looks like. It is hosted with OAuth, open source under MIT, listed in the official registry, documented for Claude Desktop, Claude Code, Cursor and VS Code, and released at a pace few vendors match: three versions between 16 and 23 October 2026.
The README still promises 'a small set of tools', but src/tools now holds 47, from bulk add-tasks and reschedule-tasks to project-health analysis, productivity stats and project-template import and export. Many are shaped around a job rather than an endpoint (one call to find everything due on a date, one to add a batch), which models handle better than a thin wrapper. The count still means a real context cost in every session, and the README lists none of them, pointing readers at the source directory instead.
The one serious incident was in the self-hosted path. In July 2026 Doist published a critical advisory: the optional local HTTP server accepted browser requests with attacker-controlled Host and Origin headers, so a malicious website could use DNS rebinding to write and delete Todoist data through it. Version 10.3.3 fixed it, the stdio mode was never reachable from a browser, and the advisory names only the local server. Old local HTTP installs are the thing to check.
Team features exist (assignments, collaborators, workspace insights), but Todoist remains a personal list that grew a team layer. For cross-team planning with portfolios and dependencies, Asana's and Linear's servers have more product underneath them, even if Todoist's is the better-built server.
Where it earns its place
A freelance consultant who runs their week from Todoist and Claude Desktop
Turn call notes into dated tasks without retyping them
Add https://ai.todoist.net/mcp as a custom connector, sign in with OAuth, and ask Claude to file tasks from the notes; add-tasks creates them in bulk and find-tasks-by-date checks what the week now holds. There is no cost beyond the existing Todoist plan.
A developer building a task assistant into their own product
Reuse Doist's Todoist tools instead of writing API wrappers
npm install @doist/todoist-mcp and pass tools such as findTasksByDate and addTasks to Vercel's AI SDK with a TodoistApi client. That saves writing and testing dozens of wrappers, at the price of tracking a package now on its thirteenth major version.
A team lead on a Todoist Business workspace
Draft a weekly project status note
get-project-health, get-workspace-insights and find-completed-tasks give the model enough to summarise progress and overdue work. Task text from shared projects goes straight into the model, so anything a collaborator writes is untrusted input.
Before you commit
- Setup
- Claude Code: /plugin install todoist@doist, or claude mcp add --transport http todoist https://ai.todoist.net/mcp; Claude Desktop and VS Code take the URL directly; Cursor and others use npx -y mcp-remote with the same URL. OAuth runs in the browser on first use, so the first tool call is a couple of minutes away.
- Integrations
- 47 tools covering tasks, projects, sections, labels, filters, reminders, comments, assignments, templates, activity and productivity stats, plus search and fetch in OpenAI's format. Most create, update, complete or delete, so this is a read-write server.
- Data and privacy
- The hosted server runs on Doist's own infrastructure, so tasks pass only between Doist and your model provider. The local HTTP mode runs every tool with one TODOIST_API_KEY and, before 10.3.3, could be driven by a malicious website through DNS rebinding (critical advisory GHSA-833v-v58w-294h).
- Cost at scale
- Free; it uses your existing Todoist plan. Todoist publishes Sync API limits of 1,000 partial and 100 full syncs per user every 15 minutes, with up to 100 commands batched into one request, which personal agent use is unlikely to reach.
- Limits
- The README calls the project early-stage and documents no tools; 47 definitions are a real context load. Major versions arrive often (13.x by October 2026), so pin the npm version for library use.
What's good
- Hosted with OAuth, plus an official Claude Code plugin
- Listed in the official MCP registry
- Tools reusable as a library with Vercel's AI SDK
- Three releases in the week to 23 October 2026
What's not
- No tool list in the README; 47 tools to discover
- Critical DNS-rebinding flaw in local HTTP mode before 10.3.3
- Personal task focus, light on cross-team planning
- Cursor and several other clients need the mcp-remote bridge
Best for
Todoist users who want an assistant to plan their day and capture tasks from conversations.
Alternatives
Todoist MCP: common questions
- Is Todoist MCP worth it?
- A properly maintained vendor server, hosted with OAuth and released almost weekly; its one serious flaw so far sat in the local HTTP mode and is patched. We rate it 4.1 out of 5.
- How much does Todoist MCP cost?
- Free and open source (MIT); uses your Todoist account and plan.
- What are the downsides of Todoist MCP?
- No tool list in the README; 47 tools to discover; critical DNS-rebinding flaw in local HTTP mode before 10.3.3; personal task focus, light on cross-team planning; cursor and several other clients need the mcp-remote bridge.
- Who is Todoist MCP best for?
- Todoist users who want an assistant to plan their day and capture tasks from conversations.
- How much does Todoist MCP cost for a team or in production?
- Free; it uses your existing Todoist plan. Todoist publishes Sync API limits of 1,000 partial and 100 full syncs per user every 15 minutes, with up to 100 commands batched into one request, which personal agent use is unlikely to reach.
- Is Todoist MCP safe for company data?
- The hosted server runs on Doist's own infrastructure, so tasks pass only between Doist and your model provider. The local HTTP mode runs every tool with one TODOIST_API_KEY and, before 10.3.3, could be driven by a malicious website through DNS rebinding (critical advisory GHSA-833v-v58w-294h).
- What are the best Todoist MCP alternatives?
- The closest alternatives we have reviewed are Asana MCP, Notion MCP and Linear MCP.
Answers checked Oct 23, 2026.
Make Todoist MCP? Show this rating on your site
