Todoist REST API
Todoist is a task management platform with a REST API v2 and a lower-level Sync API. Agents can create, read, update, and close tasks, manage projects and sections, assign labels, set due dates, and receive webhook events on task state changes.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
API token per user. OAuth2 for apps. SOC2 Type II. Task data may contain sensitive personal information. Webhook HMAC validation. No granular API scopes.
⚡ Reliability
Best When
An agent needs to create or manage actionable tasks for a human, particularly in a GTD-style personal productivity workflow.
Avoid When
You need rich project planning features like task dependencies, resource management, or timeline views.
Use Cases
- • Capturing agent-generated tasks into a human's task inbox
- • Marking tasks complete after automated workflow execution
- • Creating project structures and populating them with tasks programmatically
- • Monitoring task completion to trigger downstream agent actions
- • Syncing tasks from external systems (email, Slack, calendar) into Todoist
Not For
- • Complex project management with dependencies and Gantt charts
- • Team collaboration at scale (better tools exist for that)
- • Storing large structured data — tasks have limited metadata
Interface
Authentication
OAuth 2.0 recommended for multi-user apps; personal API token for single-user agent use. OAuth scopes exist but are coarse (data:read, data:read_write, data:delete). API tokens available from settings for direct agent use.
Pricing
Free tier is functional for basic agent task creation. Pro unlocks reminders, filters, and labels which are useful for agent-created tasks. API access is available on all tiers.
Agent Metadata
Known Gotchas
- ⚠ REST API v2 and Sync API have overlapping but different capabilities — choose one and be consistent
- ⚠ No idempotency keys on REST API; duplicate task creation is possible on network retry
- ⚠ Due dates use a natural language parser that can misinterpret dates in edge cases
- ⚠ Webhooks require HTTPS endpoint with valid certificate — local dev requires tunneling
- ⚠ Task IDs are string-encoded integers; do not treat as numeric
- ⚠ Completed tasks are not returned by default in task list endpoints — require explicit filter
- ⚠ Rate limit is per user token, not per app — shared tokens across agents will exhaust limits quickly
Alternatives
Full Evaluation Report
Detailed scoring breakdown, competitive positioning, security analysis, and improvement recommendations for Todoist REST API.
Scores are editorial opinions as of 2026-03-06.