// SCAN REPORT

Things App MCP

16 tools. 8 can modify or destroy data without limits.

8 write tools that can modify data. Rate limits recommended.

Last updated:

8 can modify or destroy data
8 read-only
16 tools total

Community server · catalogue entry verified 29/06/2026

How to control Things App MCP ↓

TOOL MAP

What Things App MCP exposes to your agents

Read (8) Write / Execute (8) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
High Risk

The most dangerous Things App MCP tools

Execute · Low search This tool triggers an external application action (opening the search screen in Things 3) via the Things URL scheme, rather than purely retrieving data programmatically. Execute · Low show This tool performs a UI action (navigating/displaying a view) in an external application via the Things URL scheme or AppleScript. Write · Medium add-json The add-json tool creates new projects and to-dos in the Things 3 application. Write · Low add-project This tool creates new project records in the Things 3 application, which is a reversible write operation.

8 of Things App MCP's 16 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Things App MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and Things App MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations
{
  "add-json": {
    "limits": [
      {
        "counter": "add-json_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "get-areas": {
    "limits": [
      {
        "counter": "get-areas_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Things App MCP — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON THINGS APP →

Instant setup, no code required.

FULL CATALOGUE

All 16 Things App MCP tools

EXECUTE 2 tools
Execute search Open the search screen in Things with an optional search query. Execute show Navigate to and show a list, project, area, tag, or to-do in Things. Built-in list IDs: inbox, today, anytime,
WRITE 6 tools
Write add-json Create complex projects and to-dos using the Things JSON command. Supports nested projects with headings, chec Write add-project Create a new project in Things. Supports setting title, notes, when/deadline dates, tags, area assignment, and Write add-todo Create a new to-do in Things. Supports setting title, notes, when/deadline dates, tags, checklist items, and a Write reschedule-distant-todos Among today Write update-project Update an existing project in Things. Requires the project ID and your Things auth-token. Write update-todo Update an existing to-do in Things. Requires the to-do ID and your Things auth-token. Supports changing title,
READ 8 tools
Read get-areas Get all areas from Things. Uses AppleScript/JXA (macOS only). Read get-project-by-id Get a specific project by its ID. Uses AppleScript/JXA (macOS only). Read get-projects Get all projects from Things. Uses AppleScript/JXA (macOS only). Read get-recent-todos Get recently modified to-dos. Uses AppleScript/JXA (macOS only). Read get-tags Get all tags from Things. Uses AppleScript/JXA (macOS only). Read get-todo-by-id Get a specific to-do by its ID. Uses AppleScript/JXA (macOS only). Read get-todos Get to-dos from Things by list, project, area, or tag. Specify exactly one source. Uses AppleScript/JXA (macOS Read search-todos Search for to-dos by title or notes content. Uses AppleScript/JXA (macOS only).
FAQ

Questions about Things App MCP

How do I prevent bulk modifications through Things App MCP? +

The Things App MCP server has 6 write tools including add-json, add-project, add-todo. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Things App MCP.

How many tools does the Things App MCP server expose? +

16 tools across 2 categories: Read, Write. 8 are read-only. 8 can modify, create, or delete data.

How do I enforce a policy on Things App MCP? +

Register the Things App MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Things App MCP tool call.

Deterministic rules across all 16 Things App MCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON THINGS APP →

Instant setup, no code required.

16 Things App MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.