ClickUp API

All-in-one project management REST API (v2/v3) enabling agents to manage tasks, spaces, lists, docs, goals, and time tracking across teams in a unified platform.

Evaluated Mar 07, 2026 (0d ago) vcurrent
Homepage ↗ Developer Tools tasks projects spaces lists docs time-tracking rest freemium all-in-one
⚙ Agent Friendliness
57
/ 100
Can an agent use this?
🔒 Security
79
/ 100
Is it safe for agents?
⚡ Reliability
74
/ 100
Does it work consistently?

Score Breakdown

⚙ Agent Friendliness

MCP Quality
--
Documentation
76
Error Messages
74
Auth Simplicity
76
Rate Limits
80

🔒 Security

TLS Enforcement
100
Auth Strength
76
Scope Granularity
62
Dep. Hygiene
78
Secret Handling
78

OAuth lacks scope granularity which is a notable weakness for least-privilege agent design. Personal API tokens are user-scoped with full workspace access. SOC2 Type II certified. EU data residency available on Business and Enterprise plans.

⚡ Reliability

Uptime/SLA
84
Version Stability
72
Breaking Changes
68
Error Recovery
74
AF Security Reliability

Best When

An agent needs to interact with a team's all-in-one work hub covering tasks, docs, time tracking, and goals without integrating multiple separate tools.

Avoid When

The agent workflow requires strict API stability guarantees or deep integrations with developer-specific tools like pull requests and deployment pipelines.

Use Cases

  • Create and update tasks with custom fields, priorities, and due dates as an agent processes work items from an automated pipeline
  • Query tasks across spaces, folders, and lists using filtered endpoints to build dynamic work queues for agent orchestration
  • Log time entries programmatically to track how long automated agents spend on specific tasks or projects
  • Create and update ClickUp Docs to publish agent-generated documentation, reports, or structured knowledge alongside project tasks
  • Use ClickUp as a lightweight orchestration layer — agents poll for tasks in a specific list, execute work, and update task status and fields upon completion

Not For

  • Agents requiring enterprise-grade compliance features (FedRAMP, HIPAA) — ClickUp's compliance certifications are less mature than Jira for regulated industries
  • Workloads that need a dedicated issue tracker with deep developer toolchain integrations — ClickUp's breadth can feel shallow compared to specialized tools
  • Teams needing a stable, slowly-evolving API — ClickUp's API has historically had breaking changes and inconsistencies across versions

Interface

REST API
Yes
GraphQL
No
gRPC
No
MCP Server
No
SDK
No
Webhooks
Yes

Authentication

Methods: bearer_token
OAuth: Yes Scopes: No

Two auth methods: (1) Personal API tokens (bearer tokens) tied to a user account for direct automation; (2) OAuth 2.0 for third-party integrations where users authorize access. ClickUp's OAuth does not currently support granular scopes — the token grants access to all workspaces the user can access. Tokens are passed in the Authorization header.

Pricing

Model: freemium
Free tier: Yes
Requires CC: No

API access is included on all plans including Free Forever. No additional charge for API usage. Webhook delivery and storage limits differ by plan.

Agent Metadata

Pagination
offset
Idempotent
No
Retry Guidance
Not documented

Known Gotchas

  • The v2 and v3 APIs coexist and have different endpoint structures and response shapes; agents must consistently target one version or implement version-aware response parsing.
  • OAuth tokens have no scope granularity — a token grants access to everything the user can see; agents should use dedicated service accounts with minimal workspace access to limit blast radius.
  • Custom fields require knowing the field UUID, which must be fetched per list before constructing create or update payloads; field UUIDs are not stable across workspace copies or templates.
  • The 100 req/min rate limit resets per minute on a rolling window; agents running batch operations may exhaust the limit mid-batch and must implement backoff without a predictable reset time.
  • Webhook payloads for task updates include the event type but not a full snapshot of the changed fields; agents tracking field-level changes must fetch the task after receiving the webhook to determine what changed.

Alternatives

Full Evaluation Report

Comprehensive deep-dive: security analysis, reliability audit, agent experience review, cost modeling, competitive positioning, and improvement roadmap for ClickUp API.

AI-powered analysis · PDF + markdown · Delivered within 30 minutes

$99

Package Brief

Quick verdict, integration guide, cost projections, gotchas with workarounds, and alternatives comparison.

Delivered within 10 minutes

$3

Score Monitoring

Get alerted when this package's AF, security, or reliability scores change significantly. Stay ahead of regressions.

Continuous monitoring

$3/mo

Scores are editorial opinions as of 2026-03-07.

6470
Packages Evaluated
26150
Need Evaluation
173
Need Re-evaluation
Community Powered