// SCAN REPORT

TickTick MCP Server

60 tools. 37 can modify or destroy data without limits.

8 destructive tools with no built-in limits. Policy required.

Last updated: 4 Jul 2026

37 can modify or destroy data

23 read-only

60 tools total

Community server · catalogue entry verified 04/07/2026

How to control TickTick MCP Server ↓

TOOL MAP

What TickTick MCP Server exposes to your agents

Read (23) Write / Execute (28) Destructive / Financial (8)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous TickTick MCP Server tools

Destructive · Medium ticktick_logout Clearing all authentication tokens is irreversible in the sense that the tokens are permanently destroyed and the session cannot be restored without re-authentication. Destructive · High ticktick_batch_delete_tasks This tool irreversibly removes data (tasks) from the user's TickTick account. Destructive · Medium ticktick_delete_focus_record The tool performs an irreversible delete operation on a focus record. Destructive · High ticktick_delete_folder Deleting a folder in a task management system irreversibly removes data structures and potentially all contained items.

37 of TickTick MCP Server's 60 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control TickTick MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and TickTick MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "ticktick_batch_delete_tasks": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "ticktick_archive_project": {
    "limits": [
      {
        "counter": "ticktick_archive_project_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "ticktick_auth_status": {
    "limits": [
      {
        "counter": "ticktick_auth_status_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register TickTick MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON TICKTICK →

Instant setup, no code required.

FULL CATALOGUE

All 60 TickTick MCP Server tools

DESTRUCTIVE 8 tools

Destructive ticktick_batch_delete_tasks Delete multiple tasks in a single request. Destructive ticktick_delete_focus_record Delete a focus record. Destructive ticktick_delete_folder Delete a project folder. Destructive ticktick_delete_habit Delete a habit. Destructive ticktick_delete_project Delete a project and all its tasks. Destructive ticktick_delete_tag Delete a tag. Destructive ticktick_delete_task Delete a task permanently. Destructive ticktick_logout Clear all authentication tokens (logout).

EXECUTE 4 tools

Execute ticktick_login Login with username/password for v2 API access. Execute ticktick_start_pomodoro Start a Pomodoro focus session. Execute ticktick_start_stopwatch Start a stopwatch focus session. Execute ticktick_stop_focus Stop the current focus session.

WRITE 24 tools

Write ticktick_archive_project Archive a project. Write ticktick_authorize ticktick_authorize Write ticktick_authorize_oauth Complete OAuth2 authorization with the code from callback URL. Write ticktick_batch_create_tasks Create multiple tasks in a single request. Write ticktick_checkin_habit Record a habit check-in. Write ticktick_complete_task Mark a task as complete. Write ticktick_configure_oauth ticktick_configure_oauth Write ticktick_create_folder Create a new project folder. Write ticktick_create_habit Create a new habit to track. Write ticktick_create_project Create a new project/list. Write ticktick_create_subtask Create a subtask under a parent task. Write ticktick_create_tag Create a new tag. Write ticktick_create_task Create a new task in TickTick. Write ticktick_merge_tags Merge one tag into another. Write ticktick_move_task Move a task to a different project/list. Write ticktick_rename_tag Rename a tag. Write ticktick_schedule_time ticktick_schedule_time Write ticktick_uncomplete_task Reopen a completed task (mark as incomplete). Write ticktick_update_focus_settings Update Pomodoro/focus settings. Write ticktick_update_folder Rename a project folder. Write ticktick_update_habit Update an existing habit's properties. Write ticktick_update_project Update an existing project's properties. Write ticktick_update_tag Update a tag's properties (color, etc.). Write ticktick_update_task Update an existing task.

READ 23 tools

OTHER 1 tools

Other ticktick_configure ticktick_configure

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about TickTick MCP Server

Can an AI agent delete data through the TickTick MCP Server MCP server? +

Yes. The TickTick MCP Server server exposes 8 destructive tools including ticktick_batch_delete_tasks, ticktick_delete_focus_record, ticktick_delete_folder. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through TickTick MCP Server? +

The TickTick MCP Server server has 24 write tools including ticktick_archive_project, ticktick_authorize, ticktick_authorize_oauth. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach TickTick MCP Server.

How many tools does the TickTick MCP Server MCP server expose? +

60 tools across 4 categories: Destructive, Execute, Read, Write. 23 are read-only. 37 can modify, create, or delete data.

How do I enforce a policy on TickTick MCP Server? +

Register the TickTick MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every TickTick MCP Server tool call.

Deterministic rules across all 60 TickTick MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON TICKTICK →

Instant setup, no code required.

60 TickTick MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.