A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API
Nothing to run from here
Clickup Intelligence is installed from its publisher's own source and answers where it runs, so this marketplace is not in the path of a single call. There is no address here to send one to, and a panel that pretended otherwise would be showing you an answer we made up. Install it and call it from your own client — the Installation tab has the entry for each one.
93/100
trust score
1
downloads a day
local
runs on your machine
106
downloads in 30d
What it does
Advanced project management intelligence and workflow optimization for ClickUp - AI-powered analytics, smart planning, and automation
Quickstart
# 1 — add it to Claude Code
claude mcp add --scope user clickup-intelligence-mcp '--' npx -y @chykalophia/clickup-intelligence-mcp-server
# 2 — ask your agent for something these tools do
# clickup_analyze_project_health, clickup_plan_smart_sprint, clickup_analyze_team_velocity and 177 more
Clickup Intelligence costs nothing on mcprush: there is no plan to choose here, no cap to set and nothing mcprush can bill you for.
Publishernot claimed
CHAll 1 server
@chykalophia1 server
1 category
Collected from a public index. Nobody has claimed this account, so nothing here was written by its author — claim it if it is yours.
Installation
Where are you running it?
Every route below installs the same thing and ends at the same approval screen. This one runs on your machine: your client starts Clickup Intelligence as a process under your own user, with your files and your network, so the tool surface below is what it can do to your computer rather than to a server somewhere else. Its scan result is on the Security tab — read the surface before you approve it.
Claude Codedeclared by this listing
This is a public server: you run it yourself and this marketplace is not in the path. You need Node.js — the current LTS (24) is the safe choice; npx comes with it. Claude Code registers it in one command; --scope user makes it available in every project. The '--' is in quotes so that PowerShell passes it on.
claude mcp add --scope user clickup-intelligence-mcp '--' npx -y @chykalophia/clickup-intelligence-mcp-serverReconnect, or start a new session, and the tools appear in the model’s tool list.
Free on mcprush, and it runs from its publisher’s own package: this marketplace is not in the path, so there is no key of ours to hold and no card to add.
What it writes
One config entry your client uses to start the process locally. A local server runs with your file system and your network, which is why it is priced without metering.
What you approve
180 tools, with what each one reads, writes and reaches shown before you agree — the same list on every route above. Read the tool surface.
Tool surface
What the model actually sees. Descriptions are diffed on every release — see version history.
🏥 AI PROJECT HEALTH ANALYZER - Comprehensive real-time project health analysis with risk assessment, velocity trends, and actionable recommendations. Provides executive dashboard with letter grades (A-F) and specific improvement suggestions.
No parameter schema on file.
🚀 AI SMART SPRINT PLANNER - Advanced AI-powered sprint planning with velocity analysis, capacity modeling, and task optimization. Combines historical data, team capacity, and business priorities for optimal sprint plans.
No parameter schema on file.
📈 VELOCITY ANALYSIS - Analyzes historical sprint data to predict team velocity with confidence intervals. Includes seasonal adjustments, team composition impact, and trend analysis.
No parameter schema on file.
⚡ CAPACITY MODELING - Advanced team capacity modeling with availability factors, focus factors, and skill-based adjustments. Provides individual and team capacity analysis.
No parameter schema on file.
🎯 SPRINT OPTIMIZATION - Multi-objective optimization for task selection using constraint satisfaction algorithms. Balances business value, capacity, dependencies, and risk factors.
No parameter schema on file.
🔄 AI TASK DECOMPOSITION ENGINE - Intelligently decompose complex tasks into smaller, manageable subtasks with AI-powered analysis. Features complexity assessment, effort estimation, dependency identification, and template-based decomposition patterns.
No parameter schema on file.
🧠 TASK COMPLEXITY ANALYZER - Analyze task complexity across multiple dimensions (technical, business, integration, uncertainty) to determine if decomposition is needed. Provides detailed reasoning and recommendations.
No parameter schema on file.
📋 DECOMPOSITION TEMPLATES - Get available task decomposition templates for common development patterns (API development, UI features, database changes, bug fixes, research tasks).
No parameter schema on file.
⚖️ TEAM WORKLOAD ANALYZER - Comprehensive analysis of team workload distribution, capacity utilization, and resource bottlenecks. Identifies optimization opportunities and provides actionable recommendations for balanced team productivity.
No parameter schema on file.
🎯 TASK ASSIGNMENT OPTIMIZER - AI-powered task assignment optimization that balances workload, maximizes skill matching, and promotes team development. Uses constraint satisfaction algorithms for optimal resource allocation.
No parameter schema on file.
🚨 BURNOUT RISK ANALYZER - Advanced burnout risk assessment using workload patterns, performance metrics, and early warning indicators. Provides personalized prevention strategies and intervention recommendations.
No parameter schema on file.
📈 CAPACITY FORECASTING - Predictive capacity analysis for future resource planning. Identifies potential bottlenecks, resource needs, and hiring recommendations based on historical trends and growth projections.
No parameter schema on file.
🔄 WORKFLOW PATTERN ANALYZER - Identify recurring workflow patterns, bottlenecks, and optimization opportunities. Analyzes team workflows to discover inefficiencies and automation potential.
No parameter schema on file.
🤖 AUTOMATION RECOMMENDER - Generate AI-powered automation recommendations based on workflow analysis. Identifies repetitive tasks and suggests automation solutions with implementation guidance.
No parameter schema on file.
🔗 INTEGRATION OPTIMIZER - Recommend optimal third-party integrations and workflow connections. Analyzes current setup and suggests integrations to maximize productivity and reduce manual work.
No parameter schema on file.
🚀 REAL-TIME PROCESSING ENGINE - Start the real-time data processing engine for live ClickUp integration. Enables WebSocket connections, event streaming, and real-time analytics with <2s latency.
No parameter schema on file.
📡 WEBHOOK PROCESSOR - Process incoming ClickUp webhook events in real-time. Validates signatures, processes events through stream pipeline, and broadcasts to connected clients.
No parameter schema on file.
⚙️ PROCESSING RULE ENGINE - Add custom processing rules for real-time event handling. Define conditions and actions for automated responses to ClickUp events.
No parameter schema on file.
📊 REAL-TIME METRICS - Get comprehensive metrics from the real-time processing engine including latency, throughput, cache hit rates, and SLA compliance.
No parameter schema on file.
💾 CACHED DATA ACCESS - Retrieve cached task data from the real-time processing engine for instant access without API calls.
No parameter schema on file.
🛑 STOP REAL-TIME ENGINE - Gracefully stop the real-time processing engine and return final metrics.
No parameter schema on file.
Retrieve chat channels in a workspace with cursor pagination and optional filtering by channel type, follower status, and activity.
No parameter schema on file.
Create a new chat channel in a workspace with specified name, description, topic, members, and visibility.
No parameter schema on file.
Create a chat channel on a specific space, folder, or list for contextual discussions. The channel name is derived from the location.
No parameter schema on file.
Create a direct message channel with up to 15 users. Provide no user IDs to create a self-DM.
No parameter schema on file.
Retrieve detailed information about a specific chat channel by its ID.
No parameter schema on file.
Update a chat channel
No parameter schema on file.
Retrieve followers of a chat channel who receive notifications about channel activity (cursor-paginated).
No parameter schema on file.
Retrieve members of a chat channel (cursor-paginated).
No parameter schema on file.
Retrieve messages from a chat channel with cursor pagination.
No parameter schema on file.
Send a message to a chat channel. Mentions can be embedded in markdown content.
No parameter schema on file.
Update the content, assignee, or resolved state of an existing chat message.
No parameter schema on file.
Delete a chat message. This action cannot be undone.
No parameter schema on file.
Retrieve replies to a specific chat message (cursor-paginated).
No parameter schema on file.
Create a reply to a specific chat message.
No parameter schema on file.
Retrieve reactions on a specific chat message (cursor-paginated).
No parameter schema on file.
Add a reaction to a chat message using an emoji name (e.g.
No parameter schema on file.
Remove a reaction from a chat message by emoji name.
No parameter schema on file.
Retrieve users tagged/mentioned in a specific chat message (cursor-paginated).
No parameter schema on file.
Search for chat channels by name within a workspace (client-side filtering over the channel list).
No parameter schema on file.
RAW API TEST: Create a comment bypassing ALL MCP processing to isolate duplication issue. Returns raw ClickUp API response.
No parameter schema on file.
Get comments for a ClickUp task. Returns comment details including text, author, and timestamps with enhanced markdown styling.
No parameter schema on file.
Create a new comment on a ClickUp task using structured array format. Supports optional assignee and notification settings. Supports @mentions via tag blocks ({type:
No parameter schema on file.
Get comments for a ClickUp chat view. Returns comment details with pagination support.
No parameter schema on file.
Create a new comment in a ClickUp chat view. Supports notification settings. Supports GitHub Flavored Markdown in comment text, or structured comment blocks for @mentions. Provide either comment_text or comment.
No parameter schema on file.
Get comments for a ClickUp list. Returns comment details with pagination support.
No parameter schema on file.
Create a new comment on a ClickUp list. Supports optional assignee and notification settings. Supports GitHub Flavored Markdown in comment text, or structured comment blocks for @mentions. Provide either comment_text or comment.
No parameter schema on file.
Update an existing ClickUp comment
No parameter schema on file.
Delete a comment from ClickUp.
No parameter schema on file.
Get threaded comments (replies) for a parent comment. Returns comment details with pagination support.
No parameter schema on file.
Create a new threaded comment (reply) to a parent comment. Supports notification settings. Supports GitHub Flavored Markdown in comment text, or structured comment blocks for @mentions. Provide either comment_text or comment.
No parameter schema on file.
Get time entries for a team with filtering options. Supports filtering by date range, user, task, and project.
No parameter schema on file.
Create a new time entry for time tracking. Can be used for manual time logging or creating timer-based entries.
No parameter schema on file.
Update an existing time entry. Can modify description, times, billable status, and associated task.
No parameter schema on file.
Delete a time entry from ClickUp. This action cannot be undone.
No parameter schema on file.
Get a single time entry by its ID.
No parameter schema on file.
Get the change history of a time entry. Useful for auditing who edited tracked time.
No parameter schema on file.
Get all tags that have been used on time entries in a Workspace.
No parameter schema on file.
Add tags to one or more time entries in bulk.
No parameter schema on file.
Get the currently running time entry (timer) for the authenticated user, or for a specific user via assignee. The ClickUp API returns at most one running timer per user.
No parameter schema on file.
Start a timer for the authenticated user. Optionally associate with a task and set description, billable status, and tags.
No parameter schema on file.
Stop the running timer for the authenticated user. Returns the stopped time entry.
No parameter schema on file.
Get time tracking summary and analytics. Provides aggregated time data with breakdowns by user and task.
No parameter schema on file.
Create a new time entry and immediately start the timer. Convenient for starting time tracking in one step.
No parameter schema on file.
Format a duration from milliseconds to human-readable format. Useful for displaying time tracking data.
No parameter schema on file.
Upload a file to a ClickUp task as an attachment. Provide the file as base64 data (file_data), a local file path (file_path), or a URL to fetch (file_url). Files stored in the cloud must be fetched first; ClickUp only accepts the binary upload.
No parameter schema on file.
List attachments for a task or a File custom field using the ClickUp v3 API. Results are cursor-paginated; pass next_cursor from a previous response to fetch the next page.
No parameter schema on file.
Create multiple tasks in a ClickUp list in a single operation. More efficient than creating tasks individually.
No parameter schema on file.
Update multiple tasks in ClickUp in a single operation. More efficient than updating tasks individually.
No parameter schema on file.
⚠️ DESTRUCTIVE: Delete multiple tasks from ClickUp in a single operation. This action cannot be undone and will permanently remove all specified tasks.
No parameter schema on file.
⚠️ DESTRUCTIVE: Delete a subtask from ClickUp. This action cannot be undone and will permanently remove the subtask.
No parameter schema on file.
Merge multiple tasks into a single task using ClickUp
No parameter schema on file.
Create a new checklist in a ClickUp task. Returns the created checklist details.
No parameter schema on file.
Update an existing ClickUp checklist
No parameter schema on file.
Delete a checklist from a ClickUp task. Removes the checklist and all its items.
No parameter schema on file.
Create a new item in a ClickUp checklist. Supports optional assignee and resolved status (resolved is applied via a follow-up update, since the create endpoint does not accept it). Returns the full parent checklist including all items.
No parameter schema on file.
Update an existing ClickUp checklist item
No parameter schema on file.
Delete an item from a ClickUp checklist.
No parameter schema on file.
No parameter schema on file.
Set a custom field value on a ClickUp task. ${VALUE_FORMAT_GUIDE}
No parameter schema on file.
Remove a custom field value from a ClickUp task. This clears the field value but keeps the field definition.
No parameter schema on file.
Get a custom field value from a ClickUp task. Returns the current value and field information.
No parameter schema on file.
Set multiple custom field values on a ClickUp task in a single operation. More efficient than setting values individually. ${VALUE_FORMAT_GUIDE}
No parameter schema on file.
Get all custom field values for a ClickUp task. Returns all field values with their definitions.
No parameter schema on file.
Validate a custom field value against its field type and configuration. Useful for checking values before setting them. ${VALUE_FORMAT_GUIDE}
No parameter schema on file.
Create a dependency between two tasks. Provide exactly one of depends_on (this task is WAITING ON the other task) or dependency_of (this task is BLOCKING the other task).
No parameter schema on file.
Get a task
No parameter schema on file.
Delete a dependency between two tasks. Provide exactly one of depends_on or dependency_of to identify which dependency to remove.
No parameter schema on file.
Link two tasks together (a non-blocking
No parameter schema on file.
Remove a link between two tasks. Returns the updated task.
No parameter schema on file.
Build a dependency graph for a task by traversing related tasks (computed client-side from task data; issues one Get Task request per task in the graph).
No parameter schema on file.
Check for circular or duplicate dependencies around a task, optionally including proposed new dependencies (computed client-side from task data).
No parameter schema on file.
Create or delete multiple dependencies in one call (executed as individual API requests; results are reported per item).
No parameter schema on file.
Get the content of a specific ClickUp doc. Returns combined content from all pages in the doc.
No parameter schema on file.
Search for docs in a ClickUp workspace by name (matched client-side; the ClickUp API has no full-text doc search). Use
No parameter schema on file.
Get all docs from a ClickUp workspace. Supports pagination and filtering for deleted/archived docs.
No parameter schema on file.
Get the pages of a specific ClickUp doc. Returns page content in the requested format (markdown or plain text).
No parameter schema on file.
List the page hierarchy of a ClickUp doc (page IDs and names, without content). Much cheaper than clickup_get_doc_pages for large docs.
No parameter schema on file.
Get detailed information about a specific ClickUp document including metadata.
No parameter schema on file.
Create a new document in a ClickUp workspace. Placement inside the hierarchy (space, folder, list) is set via the parent fields. If content is supplied, it is added as the first page. Note: the ClickUp public API has no doc update/delete, page delete, sharing, or template endpoints.
No parameter schema on file.
Create a new page in a ClickUp document. Supports markdown and plain text content, an optional sub_title, and nesting under a parent page.
No parameter schema on file.
Update an existing page in a ClickUp document. Can update name, sub_title, and content. content_edit_mode controls whether content replaces, appends to, or prepends to the existing page content.
No parameter schema on file.
Get goals for a team with optional filtering. Returns goal details including progress, targets, and team members.
No parameter schema on file.
Create a new goal with targets and deadlines. Supports team collaboration with multiple owners.
No parameter schema on file.
Update an existing goal. Can modify name, description, due date, owners, and color.
No parameter schema on file.
Delete a goal from ClickUp. This action cannot be undone and will remove all associated targets.
No parameter schema on file.
Get detailed information about a specific goal including all targets and progress data.
No parameter schema on file.
Create a target (key result) for a goal. Supports different target types: number, currency, boolean, percentage, and automatic (tracked via linked tasks/lists).
No parameter schema on file.
Update an existing goal target (key result). Sets the current progress value and an optional note.
No parameter schema on file.
Delete a target (key result) from a goal. This action cannot be undone.
No parameter schema on file.
Get comprehensive goal analytics and summary for a team. Includes progress statistics, status breakdown, and upcoming deadlines.
No parameter schema on file.
Create a number-based goal with a target. Convenient helper for creating numeric goals like task counts or metrics.
No parameter schema on file.
Create a currency-based goal with a monetary target. Convenient helper for creating revenue or budget goals.
No parameter schema on file.
Format goal progress information for human-readable display. Useful for reporting and dashboards.
No parameter schema on file.
Get lists from a ClickUp folder or space. For a space, returns both folderless lists and lists inside the space\
No parameter schema on file.
Get folders from a ClickUp space. Returns folder details including the lists inside each folder.
No parameter schema on file.
Get details about a specific ClickUp folder including its name, statuses, and lists.
No parameter schema on file.
Create a new folder in a ClickUp space with the specified name.
No parameter schema on file.
Update an existing ClickUp folder
No parameter schema on file.
Delete a folder from ClickUp. Removes the folder and its contents.
No parameter schema on file.
Get lists that are not in any folder within a ClickUp space.
No parameter schema on file.
Create a new list in a ClickUp folder or space with the specified name.
No parameter schema on file.
Create a new list directly in a ClickUp space without placing it in a folder.
No parameter schema on file.
Get details about a specific ClickUp list including its name and content.
No parameter schema on file.
Update an existing ClickUp list. All fields are optional; only provided fields are changed.
No parameter schema on file.
Get the members (users) who have access to a specific ClickUp list.
No parameter schema on file.
⚠️ DESTRUCTIVE: Delete a list from ClickUp. This action cannot be undone and will permanently remove the list and all its tasks.
No parameter schema on file.
Create a new list in a ClickUp folder using an existing template.
No parameter schema on file.
Create a new list in a ClickUp space using an existing template.
No parameter schema on file.
Create a new folder (with its nested lists and tasks) in a ClickUp space using an existing folder template.
No parameter schema on file.
Get the folder templates available in a ClickUp workspace. Use the returned template IDs with clickup_create_folder_from_template.
No parameter schema on file.
Get spaces from a ClickUp workspace. Returns space details including name, settings, and features.
No parameter schema on file.
Get details about a specific ClickUp space. Returns space name, settings, features, and metadata.
No parameter schema on file.
Create a new space in a ClickUp workspace. Optionally configure multiple assignees and features (due dates, time tracking, tags, time estimates, checklists, custom fields).
No parameter schema on file.
Update an existing ClickUp space
No parameter schema on file.
⚠️ DESTRUCTIVE: Delete a space from ClickUp. This action cannot be undone and will permanently remove the space and ALL of its contents, including folders, lists, and tasks.
No parameter schema on file.
Get the task tags defined in a ClickUp space. Returns tag names and foreground/background colors.
No parameter schema on file.
Create a new task tag in a ClickUp space with an optional foreground and background color.
No parameter schema on file.
Edit an existing task tag in a ClickUp space. Update the tag
No parameter schema on file.
⚠️ DESTRUCTIVE: Delete a task tag from a ClickUp space. The tag is removed from the space and from all tasks that use it.
No parameter schema on file.
Get tasks from a ClickUp list. Returns task details including name, description, assignees, and status.
No parameter schema on file.
Get detailed information about a specific ClickUp task. Returns comprehensive task data including description, assignees, status, and dates.
No parameter schema on file.
Create a new task in a ClickUp list with specified properties like name, description, assignees, status, and dates. Supports GitHub Flavored Markdown in description field.
No parameter schema on file.
Update an existing ClickUp task
No parameter schema on file.
⚠️ DESTRUCTIVE: Delete a task from ClickUp. This action cannot be undone and will permanently remove the task and all its data.
No parameter schema on file.
Add an existing task to a ClickUp list.
No parameter schema on file.
Remove a task from a ClickUp list without deleting the task.
No parameter schema on file.
Get a ClickUp task
No parameter schema on file.
Get time-in-status data for multiple ClickUp tasks in one call (2–100 task IDs). Returns an object keyed by task_id with { current_status, status_history }. Requires the workspace\
No parameter schema on file.
Search tasks across an entire ClickUp workspace (team) with filters for statuses, assignees, tags, lists, spaces, and date ranges. Results are paginated (100 tasks per page).
No parameter schema on file.
Add a tag to an existing ClickUp task. The tag must already exist in the space.
No parameter schema on file.
Remove a tag from a ClickUp task without deleting the tag itself.
No parameter schema on file.
Create a new task in a ClickUp list from a saved task template. Template contents such as checklists and subtasks are included.
No parameter schema on file.
Create a new view in a ClickUp Workspace (team), space, folder, or list. Supports the API view types: list, board, calendar, table, timeline, workload, activity, map, conversation (chat), and gantt.
No parameter schema on file.
Get all views for a Workspace (team), space, folder, or list. The API returns all views; the optional type filter is applied client-side.
No parameter schema on file.
Get detailed information about a specific view by its ID.
No parameter schema on file.
Update an existing view
No parameter schema on file.
Delete a view from ClickUp. This action cannot be undone.
No parameter schema on file.
Set or update filters for a view. Filters determine which tasks are visible in the view. Each condition uses {field, op, values} with ClickUp operator tokens (EQ, ANY, ALL, NOT ANY, ...).
No parameter schema on file.
Set or update the grouping configuration for a view. Grouping organizes tasks into sections; collapsed is an array of collapsed group IDs.
No parameter schema on file.
Set or update sorting configuration for a view. Sorting determines the order of tasks.
No parameter schema on file.
Update view display settings such as show_task_locations, show_subtasks, show_assignees, show_images, collapse_empty_columns, and the me_* filters. Provided settings are merged with the current ones.
No parameter schema on file.
Get tasks that are visible in a specific view, respecting the view
No parameter schema on file.
Create a duplicate of an existing view with a new name. The API has no duplicate endpoint, so the source view
No parameter schema on file.
Get the Custom Fields accessible in a Workspace (team), space, folder, or list (Get Accessible Custom Fields endpoint). Note: built-in fields such as status, assignee, dueDate, and priority are not included.
No parameter schema on file.
Create a new webhook in a ClickUp workspace. Webhooks allow real-time notifications when events occur. The response includes the webhook secret (returned only at creation) — store it for signature verification.
No parameter schema on file.
Get all webhooks for a workspace, including per-webhook health info (status, fail_count). Optional status/event type filters are applied client-side (the ClickUp API does not support filtering).
No parameter schema on file.
Get detailed information about a specific webhook by its ID, including health info (status, fail_count). The ClickUp API has no single-webhook endpoint, so this looks the webhook up in the workspace list.
No parameter schema on file.
Update an existing webhook
No parameter schema on file.
Delete a webhook from ClickUp. This will stop all notifications to the webhook endpoint.
No parameter schema on file.
Validate the HMAC-SHA256 signature of a webhook payload to ensure authenticity. The payload must be the raw request body string exactly as received; the signature is the bare hex digest from ClickUp
No parameter schema on file.
Get information about seats (user licenses) in a ClickUp workspace. Returns details about seat allocation and availability.
No parameter schema on file.
Get a list of all ClickUp workspaces accessible to the authenticated user. Returns workspace IDs, names, and metadata.
No parameter schema on file.
Get details about the currently authenticated ClickUp user (whoami). Returns the user ID, username, email, and profile information. Useful for resolving
No parameter schema on file.
Get the User Groups (ClickUp
No parameter schema on file.
Get the current pricing plan of a ClickUp workspace. Returns the plan ID and name (e.g. Free Forever, Unlimited, Business).
No parameter schema on file.
Get the Custom Roles defined in a ClickUp workspace. Useful for resolving the custom_role IDs referenced on workspace members.
No parameter schema on file.
🚀 EFFICIENT: Find chat channels across workspaces without hierarchical navigation. More efficient than get_workspaces → get_spaces → get_views.
No parameter schema on file.
📊 ANALYZER: Analyze your planned workflow and get efficiency suggestions. Helps you choose the most efficient tool sequence.
No parameter schema on file.
📊 OVERVIEW: Get a comprehensive workspace overview in a single call. More efficient than multiple navigation calls.
No parameter schema on file.
Free
$0 forever
- Every tool, no call limit
- No card, and mcprush charges nothing for it
- Source published under MIT
- Runs on your machine — nothing of it reaches our gateway
- Nothing to cap, because mcprush bills nothing
What counts against your monthly calls
| Tool | Unit | Calls used | Out of the allowance |
|---|
Nothing here is billable: mcprush charges nothing to install Clickup Intelligence or to call it, at any volume.
Call allowance · this installenforced at the gateway
Monthly allowance, in calls
—
—
Alert at 80% · then the tool returns a normal MCP error
Used this month: —
ATrust score 93 / 100
Release 5.0.1 · scanned 14 Oct 2026
Two independent axes, because powerful and malicious are different questions. The grade is threat only. The capability level is blast radius, and it is never a penalty on the grade — it is priced as one subtract-only term in the score, where you can see it.
Threat score100
Client score93
Findings1 threat · 0 capability
Capabilityhigh
Coveragesource
Verificationrepo
Surface digestf817bc0da5d7cebb538a871a588413c3da1c433d8a7017a3e4733060df023fe1
Score vectorthreat 100 → client 93
| Term | Level | What it prices | Points |
|---|---|---|---|
| capability-exposure | high | capability blast radius (high) — client exposure if the model is manipulated | −6 |
| verification-discount | repo | publisher verification (public source) — no provenance, but the source is public and inspectable | −1 |
| coverage-honesty | source | inspection depth (source) — how much of the target the scan could see | −0 |
score = clamp(round(threatScore − E_cap − E_ver − E_cov), 0, 100). No model, no opinion, no network call at scoring time: the same methodology version against the same bytes always produces this number, and every line above is a field of the report rather than a summary of it.
What the scan could actually read
A grade is only as meaningful as its coverage, so the scanner publishes its own depth before it publishes its result.
Tool surfaceread
Implementation sourceread
Package metadataread
Live transportnot available
Tools were statically extracted from the published source (21 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Capability — what it could do if the model were manipulated
Tags derived from each tool’s schema and the implementation, not from what the tool calls itself. high is the level these add up to.
| Tool | Capability tags | Why the tag was assigned |
|---|---|---|
| clickup_analyze_project_health | no tags | |
| clickup_plan_smart_sprint | no tags | |
| clickup_analyze_team_velocity | no tags | |
| clickup_model_team_capacity | no tags | |
| clickup_optimize_sprint_tasks | no tags | |
| clickup_decompose_task | no tags | |
| clickup_analyze_task_complexity | no tags | |
| clickup_get_decomposition_templates | no tags | |
| clickup_analyze_team_workload | no tags | |
| clickup_optimize_task_assignment | no tags | |
| clickup_analyze_burnout_risk | no tags | |
| clickup_forecast_team_capacity | no tags | |
| clickup_analyze_workflow_patterns | no tags | |
| clickup_recommend_automations | no tags | |
| clickup_optimize_integrations | no tags | |
| clickup_start_realtime_engine | no tags | |
| clickup_process_webhook | external-sink | external-sink: keyword "webhook" |
| clickup_add_processing_rule | no tags | |
| clickup_get_realtime_metrics | no tags | |
| clickup_get_cached_task | no tags | |
| clickup_stop_realtime_engine | no tags |
Toxic-flow graph
The lethal trifecta, checked as a graph rather than as a checklist: untrusted input, a sensitive source and an external sink have to meet before there is a path worth worrying about.
The public result for this release does not print the flow graph, so there is nothing to show here. That is not the same as "no paths were found": what the scan did read is above, under coverage.
Supply chain and provenance
Integrityfirst-seen
Surface digestf817bc0da5d7cebb
Scanned2026-10-14
This is the first scan of this surface here, so there is nothing yet to compare it against.
Every result on this tab comes from one deterministic pass over the published package — offline, rule by rule, and auditable line by line above. Same methodology version, same bytes, same score.
Release history
Always latest — the install command names no version, so it installs the newest release when it runs; the current release on file is 5.0.1. Pin a release below and the command asks for exactly that one.
5.0.1
undated
latestNo release note was published with this version.
—
no reviews yet
Who can review
One review per account, from a signed-in account that does not publish this listing. Nothing else is asked — you can say what you think before you install it. Publishers can reply once per review, and a review can be edited or deleted by whoever wrote it.
Sign in to write one
Any signed-in account that does not publish Clickup Intelligence can review it, once — before installing it or after. A review from an account that has installed it is marked as one.
No reviews yet
Nobody has reviewed this listing. The rating on the card is the mean of the reviews written here and nothing else, so there is no rating until somebody writes the first — which takes a signed-in account that does not publish it, and nothing else.