// SCAN REPORT

Todoist MCP Server

32 tools. 21 can modify or destroy data without limits.

5 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

21 can modify or destroy data

11 read-only

32 tools total

Community server · catalogue entry verified 12/06/2026

How to control Todoist MCP Server ↓

TOOL MAP

What Todoist MCP Server exposes to your agents

Read (11) Write / Execute (16) Destructive / Financial (5)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Todoist MCP Server tools

Destructive · High delete_comment The tool description explicitly states it performs permanent deletion that cannot be undone, which is the defining characteristic of the Destructive category. Destructive · High delete_label This tool permanently deletes data (a label) that cannot be undone. Destructive · High delete_project The tool irreversibly deletes data (project, tasks, sections, comments) and cannot be undone. Destructive · High delete_section This tool irreversibly deletes data (a section) and cannot be undone.

21 of Todoist MCP Server's 32 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Todoist MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Todoist MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_comment": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "close_task": {
    "limits": [
      {
        "counter": "close_task_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "get_label": {
    "limits": [
      {
        "counter": "get_label_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Todoist MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON TODOIST →

Free to start. No card required.

FULL CATALOGUE

All 32 Todoist MCP Server tools

DESTRUCTIVE 5 tools

Destructive delete_comment Permanently delete a comment by its unique identifier. This action will remove the comment from its associated Destructive delete_label PERMANENTLY delete a personal label by its ID. WARNING: This action is IRREVERSIBLE and will automatically rem Destructive delete_project Permanently delete a Todoist project by its unique identifier. This action will remove the project and all ass Destructive delete_section Permanently delete a Todoist section by its unique identifier. This action will remove the section and move an Destructive delete_task Permanently delete a Todoist task by its unique identifier. This action will remove the task and all associate

WRITE 16 tools

Write close_task Mark a Todoist task as completed. This action moves the task to the completed state while preserving all task Write create_label Create a new personal label with customizable properties including name, color, display order, and favorite st Write create_project Create a new Todoist project with customizable settings. Allows you to set up a project with specific name, hi Write create_project_comment Add a comment to a specific Todoist project. Supports rich text content and optional file attachments. Returns Write create_section Create a new section within a Todoist project to organize tasks. Sections help categorize and group related ta Write create_task Create a new Todoist task with comprehensive configuration options. Supports setting task content, detailed de Write create_task_comment Add a comment to a specific Todoist task. Supports rich text content and optional file attachments. Returns th Write move_tasks_to_parent Move multiple tasks to become subtasks of another task within Todoist. This creates a hierarchical relationshi Write move_tasks_to_project Move multiple tasks to a different project within Todoist. This will move the tasks from their current locatio Write move_tasks_to_section Move multiple tasks to a different section within Todoist. This will move the tasks from their current locatio Write reopen_task Reopen a previously completed Todoist task, returning it to active status. This action restores the task to it Write update_comment Update the content of an existing comment in Todoist. This allows you to modify the text content of comments o Write update_label Modify the properties of an existing personal label. Allows you to change the label Write update_project Modify the properties of an existing Todoist project. Allows you to change the project Write update_section Modify the name of an existing Todoist section. Currently, only the section name can be updated. The section w Write update_task Modify the properties of an existing Todoist task. Allows you to change task content, description, labels, pri

READ 11 tools

Read get_label Retrieve a specific personal label by its unique ID with complete metadata including name, color, order, and f Read get_labels Retrieve all personal labels accessible to the authenticated user with their complete metadata including name, Read get_project Access detailed information for a specific Todoist project using its unique identifier. Provides complete proj Read get_project_comments Retrieve all comments associated with a specific Todoist project. Returns a comprehensive list of project-leve Read get_projects Retrieve all Todoist projects accessible to the authenticated user. Returns a comprehensive list of projects i Read get_section Access detailed information for a specific Todoist section using its unique identifier. Provides complete sect Read get_sections Retrieve all sections within a specific Todoist project. Returns a comprehensive list of sections with their m Read get_task Access detailed information for a specific Todoist task using its unique identifier. Provides complete task me Read get_task_comments Retrieve all comments associated with a specific Todoist task. Returns a comprehensive list of comments with t Read get_tasks Retrieve Todoist tasks with flexible filtering options. Can filter by project, section, labels, or use custom Read get_tasks_by_filter Retrieve Todoist tasks using advanced filter syntax. Supports powerful filter queries using Todoist

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Todoist MCP Server

Can an AI agent delete data through the Todoist MCP Server MCP server? +

Yes. The Todoist MCP Server server exposes 5 destructive tools including delete_comment, delete_label, delete_project. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Todoist MCP Server? +

The Todoist MCP Server server has 16 write tools including close_task, create_label, create_project. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Todoist MCP Server.

How many tools does the Todoist MCP Server MCP server expose? +

32 tools across 3 categories: Destructive, Read, Write. 11 are read-only. 21 can modify, create, or delete data.

How do I enforce a policy on Todoist MCP Server? +

Register the Todoist MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Todoist MCP Server tool call.

Deterministic rules across all 32 Todoist MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON TODOIST →

Free to start. No card required.

32 Todoist MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.