How is this different from connecting Todoist MCP directly?

Connected directly, an agent sees every tool the server exposes and holds the credential itself. Through TrustGate you choose which tools each agent gets, and every call is logged against the agent that made it.

What if the Todoist MCP API changes?

We track the Todoist MCP schema, so the tool catalogue stays current. Tools you have already allowed keep working, and anything new stays denied until you enable it.

Can I give different agents different Todoist tools?

Yes. Access is set per agent: one can get a handful of read tools, another the full set. You grant the whole MCP or single tools within it.

Where can I see what my agents did in Todoist?

Every call is logged against the agent that made it, with the tool it used. Activity can be sent on to your own monitoring.

Do I need to run the Todoist MCP server myself?

No. TrustGate connects to the Todoist MCP server and sits in front of it. Your agent only talks to your TrustGate URL, never to Todoist directly.

Connect Todoist MCP to your AI agents, securely.

Q: Is Todoist MCP secure?

The server itself exposes 47 tools, and some of them can write to your Todoist account. Behind TrustGate an agent only sees the tools you allow, requests and responses are inspected, and every call is logged. Anything outside the allowlist is denied before it reaches Todoist.

One secured endpoint for every Todoist call your AI agents make, scoped per user, inspected, and logged.

Get started for free

Get a demo

Try Todoist MCP now

What your agents can ask once Todoist MCP is connected.

Select the tools your AI agents can call

47 tools from the Todoist MCP schema.

Showing 47 tools

find-tasksreadFinds tasks by text search, project, section or parent container, responsible user, labels, a raw Todoist filter string, or a saved filter by ID or name. At least one filter must be provided.
find-tasks-by-datereadGets tasks by date range. Starting from today includes overdue items, and by default it excludes tasks assigned to other people.
find-completed-tasksreadGets completed tasks in a date range, defaulting to a 7-day window. For what someone actually got done, including every occurrence of a recurring task, find-activity is the right tool instead.
add-taskswriteAdds one or more tasks to a project, section or parent, with optional assignment to project collaborators.
uncomplete-taskswriteReopens one or more completed tasks by their IDs.
complete-taskshigh riskCompletes one or more tasks by their IDs. Annotated destructive by the server.
update-taskshigh riskUpdates existing tasks including content, dates, priorities and assignments. It replaces the entire due string, so it can wipe a recurrence pattern.
reschedule-taskshigh riskReschedules tasks to new dates while preserving recurring schedules, changing only the date and keeping the repeat pattern intact.
get-overviewreadReturns a Markdown overview. With no project it gives the account's project and section structure with no tasks, for navigation; with a project it gives that project's tasks grouped by section.
fetch-objectreadFetches a single task, project, comment or section by its ID, optionally including its direct subtasks or sub-projects.
user-inforeadReturns the authenticated user's ID, full name, email, timezone with current local time, week start preferences, current week dates, daily and weekly goal progress, and plan.
view-attachmentreadViews a file attachment from a Todoist comment by its URL. Images come back inline, text files as text, and binary files such as PDFs as embedded resources.
list-workspacesreadReturns all workspaces for the authenticated user with plan type, the user's role, link sharing settings, guest permissions and creator.
reorder-objectswriteReorders sibling projects or sections, and can move a project under a new parent or to the top level.
delete-objecthigh riskDeletes a project, section, task, comment, label, filter or reminder by its ID. Projects can be deleted whether active or archived, though a workspace project must be archived first.
find-projectsreadLists or searches projects by name. Only active projects are returned by default; archived ones are included on request.
add-projectswriteAdds one or more new projects.
project-managementwriteArchives or unarchives a project by its ID.
project-movewriteMoves a project between personal and workspace contexts, which changes who can reach it.
update-projectshigh riskUpdates multiple existing projects with new values. Annotated destructive because it replaces rather than merges.
get-project-healthreadReturns a health assessment for a project: completion progress, a status of excellent, on track, at risk or critical, and optional project metrics and task-level detail.
get-project-activity-statsreadReturns daily and optional weekly task completion counts for a project over a window of one to twelve weeks.
get-workspace-insightsreadReturns aggregated health and progress insights across every project in a workspace, with optional project filtering.
analyze-project-healthwriteTriggers a fresh health analysis for a project when the existing data is stale. The analysis may take time, and the result is read with get-project-health afterwards.
find-project-collaboratorsreadFinds Todoist users by name or email to resolve their user ID. Without a project it searches the collaborators of every shared project the user can reach, so an empty result means no shared project, not that the person does not exist.
find-activityreadRetrieves activity logs to monitor and audit changes: completions, updates, deletions and project changes. It shows events from all users by default, and availability and retention depend on the plan.
get-productivity-statsreadReturns daily and weekly completion breakdowns, goal streaks, karma score and trends, and historical karma. It reports counts, streaks and karma only, never the tasks themselves.
manage-assignmentshigh riskBulk assign, unassign and reassign operations across multiple tasks, with atomic rollback on failure. Annotated destructive by the server.
find-sectionsreadSearches for sections by name or other criteria in a project, using server-side search rather than fetching them all.
add-sectionswriteAdds one or more new sections to projects.
update-sectionshigh riskUpdates multiple existing sections with new values. Annotated destructive by the server.
find-commentsreadFinds comments by task or project, or gets a specific comment by its ID.
add-commentswriteAdds multiple comments to tasks or projects, optionally notifying collaborators.
update-commentshigh riskReplaces the content of multiple existing comments. Annotated destructive by the server.
find-remindersreadFinds reminders by task ID, returning all reminder types, or gets a specific time-based or location reminder by its ID.
add-reminderswriteAdds reminders to tasks in three forms: relative (minutes before due), absolute (a specific date and time) or location (geofence-triggered).
update-remindershigh riskUpdates existing reminders of any of the three types. Annotated destructive by the server.
find-labelsreadLists personal labels with full metadata and shared labels, which come back as names only because they belong to tasks shared with the user.
add-labelswriteAdds one or more new personal labels.
update-labelshigh riskUpdates existing labels. Personal labels can have name, color, order and favourite flag changed; shared labels, identified by name, can only be renamed.
find-filtersreadLists all personal filters or searches them by name. Filters are saved custom views built from query syntax.
add-filterswriteAdds one or more new personal filters.
update-filtershigh riskUpdates one or more existing personal filters with new values. Annotated destructive by the server.
export-project-templatereadExports an existing project as a Todoist template, either as CSV content or as a shareable URL, to duplicate a project or share its structure.
import-project-templatewriteImports a template into an existing project by template ID, URL or raw CSV, adding its tasks, sections and comments to whatever is already there.
searchreadSearches across tasks and projects, returning relevant results with IDs, titles and URLs.
fetchreadFetches the full contents of a task or project by a prefixed ID. Comments are retrieved separately with find-comments.

What Todoist MCP exposes

Todoist MCP groups its 47 tools into 12 categories, each with a suggested starting policy.

All 47 tools as JSON, ready to paste.

Category	Covers	Access	Suggested policy
Tasks	Adding, finding, completing, reopening, updating and rescheduling tasks, by text search, container, responsible user, labels, a raw Todoist filter string or a saved filter, plus date-range and completed-task lookups	Read / Write	update-tasks replaces the due string and can wipe a recurrence pattern; use reschedule-tasks to move a recurring task. find-tasks-by-date defaults to excluding other people's tasks
General & Objects	A Markdown overview of the account or one project, fetching any object by ID, deleting any object type, reordering projects and sections, the authenticated user's profile and goals, workspaces, and viewing a file attachment from a comment	Read / Write	delete-object is the single destructive tool covering projects, sections, tasks, comments, labels, filters and reminders. view-attachment returns file bytes from a comment URL, so treat what comes back as untrusted data
Projects	Adding, finding and updating projects, archiving and unarchiving them, and moving a project between personal and workspace contexts	Read / Write	project-move changes whether a project lives in a personal account or a shared workspace, which changes who can see it. update-projects replaces values rather than merging them
Health & Insights	Project health assessments with status and optional task-level context, daily and weekly completion counts per project, triggering a fresh health analysis, and aggregated insights across every project in a workspace	Read / Write	analyze-project-health is the only non-read tool here; it starts an analysis that may take time, and the result is read back separately
Collaboration & Activity	Finding Todoist users by name or email to resolve a user ID, bulk assign, unassign and reassign operations across tasks, activity logs for auditing changes, and productivity statistics with streaks and karma	Read / Write	find-activity shows events from all users unless an initiator is set, and get-productivity-stats reports a named person's streaks and karma. Both are employee activity data in most jurisdictions
Sections	Adding sections to projects, updating existing ones and searching for sections by name within a project	Read / Write	update-sections is annotated destructive because it replaces values on the section rather than merging them
Comments	Adding comments to tasks or projects with optional collaborator notification, updating existing comment content, and finding comments by task, project or ID	Read / Write	add-comments can notify collaborators, so a comment is an outbound notification to real people. update-comments replaces the body outright
Reminders	Adding, updating and finding reminders of three kinds: relative (minutes before due), absolute (a specific date and time) and location (geofence-triggered)	Read / Write	Location reminders are geofences tied to a person's movements. Treat creating or reading them as handling location data, not scheduling metadata
Labels	Adding and updating personal labels, and listing personal labels with full metadata alongside shared labels, which come back as names only	Read / Write	update-labels renames shared labels by name, which changes them for everyone the task is shared with, not just the caller
Filters	Adding, updating and finding personal filters, the saved custom views built from Todoist query syntax	Read / Write	A filter is a saved query, so updating one silently changes what every later find-tasks call against it returns
Templates	Exporting an existing project as a Todoist template, as CSV content or a shareable URL, and importing a template into an existing project by ID, URL or raw CSV	Read / Write	Export produces a shareable URL, which moves project structure outside the account. Import adds to whatever is already in the target project rather than replacing it
Deep Research	The OpenAI deep-research pair: searching across tasks and projects for relevant results with IDs, titles and URLs, and fetching the full contents of one by its prefixed ID	Read	Read-only and duplicative of find-tasks and fetch-object; they exist for clients that expect the search-and-fetch contract

Connect Todoist MCP to your AI agent

Four steps, under ten minutes.

01
Sign in to NeuralTrust
Open the NeuralTrust platform, sign in and go to Getting started, then Connect your tools.
02
Choose your agent
When asked which agent you use, pick Claude Code, Codex, Cursor, Windsurf, Copilot or your own code.
03
Connect Todoist
Find Todoist in the tool list and connect it.
04
Connect your agent
Follow the steps on screen to add the config to your agent, then send the test prompt.

Permissions down to the single tool

You do not allow Todoist MCP or block it. You allow the exact tools each agent can call, one by one.

Todoist MCP	47 TOOLS AVAILABLE
Code review agent	4 tools, read only
Issue triage bot	9 tools
Platform team assistant	all 47 tools

Tool by toolConnecting the server is not the unit of access. Each tool is granted on its own.
Default denyA tool you have not enabled is never exposed to the agent.
Approval on writesTools that change or delete things can require a human to confirm.

Is Todoist MCP secure?

One endpoint instead of raw credentials. Every call is checked against policy and logged.

AI agentsConnect through your MCP client configuration.	NeuralTrustApply controls based on your configuration.	Todoist MCP47 documented tools, taken from the tool-name registry in Doist's own repository. Every tool carries readOnlyHint, destructiveHint and idempotentHint annotations, and all six update tools are annotated destructive because they replace values rather than merging them.
Coding assistants	Connection & credentialsper user	Tasks8 tools
Internal copilots	Tool access policiesdeny by default	General & Objects7 tools
Workflow automations	Request & response inspectioninline	Projects5 tools
Compatible MCP clients	Activity monitoringalerts and logs	All other tools27 tools