Can an AI agent use ClickUp?
As of 16 Oct 2026, an AI agent can't use ClickUp on its own: Visible reCAPTCHA on the sign-up form.
- Find: Docs for agents: llms.txt, an OpenAPI and an MCP server; a docs page for each core task.
- Access: Can't sign up.
- Use: Work not reached.
- Pay: Payment not reached.
- Leave: Leaving not reached.
To reach L2 · Gets in: let an agent sign up on its own.
With an account set up by a person: not measured yet.
What the levels meanDriven 16 Oct 2026Same level in 4 drives in a rowRules of 15 Oct 2026Claim this page
Written by our agents from this drive. How we write.
Who gets in
- Agents on a serverStopped by a CAPTCHA on the sign-up form.
- Signed agentsNot checked: its robots.txt asks crawlers to stay off the sign-up page.
- Agents in a person's browserNot measured yet.
Sign-up page checked 16 Oct 2026. Signed agents: the ones Cloudflare verifies. Where agents come from
What an agent can do in ClickUp.
On its own
- Read all the developer documentation and API reference on its own.
What it can't, and why
- Create an accountA visible CAPTCHA appears on the sign-up form
- Get an API key or use the chat/task/doc featuresAll of these require a signed-in account, which could not be created
- Buy a paid planUpgrading happens inside the app, which needs an account the agent could not create
Can an AI agent sign up for ClickUp on its own?
No. Sign-up: needs a human. The only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox ("I'm not a robot") when the form is submitted. We do not solve CAPTCHAs; a handoff was asked, so no account was made. Google sign-in is offered but we has no Google account for this drive.
Does ClickUp have an MCP server, and can an agent connect to it?
Yes. ClickUp has an official MCP server. The server is hosted, lists 40 tools and signs an agent in with OAuth.
A new agent can't get in on its own: in the drive of 16 Oct 2026, our agent stopped at sign up (it needs a person). Through the MCP server, 1 of our agent's 16 attempts worked.
What the drive found
APIOpenAPIMCP · official–CLI–SDKllms.txtWebhooks–SandboxNot reached in this drive: the API key, deleting the account and paying. Every checkpoint, in detail
For the team behind ClickUp.
Where agents stop in ClickUp today, and the fixes that get them further, highest impact first.
The fixes, highest impact first
- Let verified agents sign up without CAPTCHAStep-by-step guide
- Offer an agent sign-up via the MCP serverStep-by-step guide
- Add an API to create scoped tokensStep-by-step guide
3 more fixes
- Support CIMD for MCP client registration Step-by-step guide
- Add a billing API or agent payment rail Step-by-step guide
- Let signed agents read the help center Step-by-step guide
- Claim it free and reply next to the result.
- A Drive, $49: your private report, with where agents stop, the evidence and the fixes that move your level.
- Fixed something? Order a Drive ($49) any time, or the Monthly drive ($29/month).
Details
Your API, MCP server or CLI is the product? An Audit ($299) also checks every documented route, MCP tool and CLI command against your docs. Compare plans.
Already claimed it? Open it in your dashboard.
Rather not be driven? Block AgentDrivesAgent in robots.txt or write to us. We stop driving it ourselves; this page stays, with its date.
Embed the badge on your site
Behind the level.
Our agent couldn't get into ClickUp, so the work, its reliability and the crash test aren't measured. The part scores are what it could judge from the outside.
Part scores · the docs · level history
Part scores
Agent-ready setup
- llms.txt: found
- OpenAPI: found
- MCP server: found
- CLI: not found
Not measured in this drive: Holds up, Docs match (part of an Audit).
The docs
444 of 680 pages read. Complete.
- A getting-started page
- An auth page
- Errors listed with their codes
- Newest page updated 15 Oct 2026
- A page for 10 of 10 core tasks
- Code examples on some pages
Read on 16 Oct 2026.
Level history
- 1 Oct 20262 drivesL1Needs a person
- 6 Oct 2026L1Needs a person
- 16 Oct 2026L1Needs a person
For agents and builders.
The drive as data, every checkpoint and all 94 attempts.
How an agent connects · 4 tips
/api/tools/clickup.json/tools/clickup.mdMCP get_tool {"slug":"clickup"}
- Docs: use developer.clickup.com/llms.txt and the .md pages; OpenAPI v2/v3 JSON/YAML are linked from docs/open-api-spec.md.
- Getting in needs a person: the sign-up form shows a visible reCAPTCHA, and the API token is made in Settings > Apps.
- Once a person has an account, the remote MCP server (mcp.clickup.com/mcp, OAuth with DCR and PKCE) or a personal pk_ token in the Authorization header (no Bearer prefix) gives task, doc and chat access.
- The API returns 400 OAUTH_017 without an Authorization header and 401 OAUTH_025 for a bad token; rate-limit headers are X-RateLimit-*.
Every checkpoint, in detail · 9 checkpoints
- DocsHeadlessdeveloper.clickup.com: llms.txt, markdown pages (Accept: text/markdown and .md URLs), OpenAPI v2 (3.1.0, 83 paths) and v3 (3.0.0, 23 paths), MCP setup and tools pages. help.clickup.com answered our signed agent with a Cloudflare challenge (403).
- Sign upNeeds a humanThe only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox ("I'm not a robot") when the form is submitted. We do not solve CAPTCHAs; a handoff was asked, so no account was made. Google sign-in is offered but we has no Google account for this drive.
- VerifyNot reachedNot reached: no account (visible reCAPTCHA v2 at sign-up).
- KeyNot reachedNot reached. Docs: the personal token (pk_) is made only in the web app (Settings > Apps); OAuth apps are created there too; the MCP server uses OAuth with DCR, whose consent needs a ClickUp login.
- First callNot reachedNot reached: every API and MCP call needs a token (unauthenticated GET /api/v2/user -> 400 OAUTH_017; MCP -> 401 Bearer).
- First actionNot reachedNot reached: no account.
- PayNot reachedNo 402, no MPP/x402/Stripe Projects listing, no billing API or MCP billing tool; we paid nothing. Pricing: Free Forever "No credit card required", Unlimited $10/user/month monthly, "We accept all major credit cards!". Upgrading happens inside the app, which we could not reach without an account, so the checkout and its processor were not seen; is graded from the pricing page's self-serve card plans.
- CancelNot reachedNothing to cancel: the drive started no plan. ClickUp's help article "Downgrade your plan" (seen via web search; help.clickup.com itself served our agent a Cloudflare challenge) says an owner or admin downgrades to Free Forever on the Billing page in the web app.
- DeleteNot reachedNo account was made (sign-up stopped at the visible reCAPTCHA). The DCR client registration at mcp.clickup.com returned a signed, stateless client_id and stores no account.
The attempt log · 94 attempts
| Capability | Route | Result | Evidence |
|---|---|---|---|
| docs: Read llms.txt, docs, OpenAPI | api | done ✓ | developer.clickup.com/llms.txt 200 (38 KB, docs index); OpenAPI v2 openapi 3.1.0 (83 paths/138 ops), v3 openapi 3.0.0 (23 paths/35 ops) from docs/open-api-spec.md; docs_pass verdict complete |
| MCP server/discover: POST server/discover to https://mcp.clickup.com/mcp | mcp | done ✓ | HTTP 401 WWW-Authenticate Bearer resource_metadata=https://mcp.clickup.com/.well-known/oauth-protected-resource/mcp; PRM 200 JSON; AS metadata 200 with registration_endpoint (DCR), no client_id_metadata_document_supported, code grant S256, mcp_authorization_spec_version "2026-07-28" |
| cards and preferences: server card, AI catalog, A2A cards, aipref, markdown | api | done ✓ | mcp.clickup.com/mcp/server-card 404 JSON; clickup.com/.well-known/ai-catalog.json, agent-card.json, agent.json, mcp/server-card.json, ucp, /auth.md all 403 text/html; robots.txt has no Content-Usage/Content-signal; no Content-Usage header on /; developer.clickup.com/docs/authentication with Accept: text/markdown -> 200 text/markdown, Vary: Accept; .md URL 200 text/markdown |
| pay probes: 402 / registries / well-known / checkout (from pay_probe.json) | api | done ✓ | pay_probe.json: no 402 challenges, no MPP/Bazaar/Stripe Projects listings, no docs mentions; pricing: Free Forever $0 "No credit card required"; pay_tx.json: nothing paid (no 402 on own endpoint). clickup.com/.well-known/ucp 403 html; api.clickup.com/.well-known/oauth-protected-resource 404 |
| sign up: Sign up at app.clickup.com/signup with name, email the agent's inbox, password | browser | blocked | After filling the form and clicking "Sign up with Email", a visible reCAPTCHA v2 checkbox ("I'm not a robot") appeared above the button (shot 003.png). |
| no-account API: Call API without account | api | skipped | GET https://api.clickup.com/api/v2/user without Authorization -> HTTP 400 {"err":"Authorization header required","ECODE":"OAUTH_017"}; with a made-up pk_ token -> {"err":"Token invalid","ECODE":"OAUTH_025"} |
| way in: Runs locally, no account | none | skipped | No local/self-hosted edition offered (none in docs) |
| way in: Try first, claim later | none | skipped | No claimable resource offered |
| way in: Pay per call | none | skipped | pay_probe/pay_tx: no 402 on any ClickUp endpoint, nothing paid |
| way in: Sign-up by API | none | skipped | No sign-up API in docs or OpenAPI (v2/v3 have no user/workspace create) |
| way in: Registration through auth.md | none | skipped | clickup.com/auth.md 403 html; AS metadata has no agent_auth block |
| way in: Sign in with AgentID | none | skipped | No Sign in with AgentID on signup/login pages; not in AgentID registry listing |
| way in: Email and code | none | skipped | Not offered: sign-up form is email + password only |
| way in: Email link | none | skipped | Not offered: login is password, Google or SSO |
| way in: Continue with GitHub | none | skipped | No Continue with GitHub on app.clickup.com/signup or /login |
| way in: Continue with Google | none | skipped | "Weiter mit Google" offered on signup; pw sso google: we has no Google account on this drive |
| way in: Stripe Projects | none | skipped | Not in Stripe Projects catalog (pay_probe registries empty) |
| way in: CLI code login | none | skipped | No official CLI, no device_authorization_endpoint in MCP AS metadata |
| way in: Added by an admin | none | skipped | "Continue with SSO" on login: company SAML SSO needs a person/organization |
| MCP OAuth sign-in: Register MCP client via DCR and open the consent | api | blocked | POST https://mcp.clickup.com/oauth/register -> 201-type JSON with client_id (DCR works, no CIMD advertised); GET /oauth/authorize (PKCE S256, resource) -> 302 to https://app.clickup.com/api?client_id=WPMTT9M4BKB7OAFHU7PTKN5X3JH4SMNU... (ClickUp login/consent) |
| verify: verify | none | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| credentials: credentials | none | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| The first call: The first call | none | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| The first action: The first action | none | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| scoped API key headless: Create a scoped key/token via API | none | blocked | docs/authentication.md: personal token pk_ only via Settings > Apps in the web app ("You'll need to sign in to your ClickUp account in order to generate or regenerate a token"); OAuth apps created in Settings > Apps by Workspace owners; no API/CLI to create a key; OpenAPI v2 has only POST /v2/oauth/token (code exchange) |
| Create a task: Create a task via API/MCP | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Update a task (status, assignees, due date, name, description): Update a task (status, assignees, due date, name, description) via API/MCP | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Delete a task: Delete a task via API/MCP | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Organize work in Lists, Folders, and Spaces (hierarchy): Organize work in Lists, Folders, and Spaces (hierarchy) via API/MCP | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| View tasks as Board, Calendar, Gantt, Table, Timeline, Workload, or List views: View tasks as Board, Calendar, Gantt, Table, Timeline, Workload, or List views via API/MCP | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Write and edit collaborative Docs: Write and edit collaborative Docs via API/MCP | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Chat with teammates in Channels and DMs: Chat with teammates in Channels and DMs via API/MCP | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Comment on tasks and reply in threads, @mention teammates: Comment on tasks and reply in threads, @mention teammates via API/MCP | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Track time against a task (start/stop timer or manual entry): Track time against a task (start/stop timer or manual entry) via API/MCP | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Set Goals with measurable Targets and track progress: Set Goals with measurable Targets and track progress via API/MCP | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Docs claim: Create a task: POST /v2/list/{list_id}/task | api | blocked | documented in OpenAPI as CreateTask; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Create a task: Create Task | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Update a task (status, assignees, due date, name, description): PUT /v2/task/{task_id} | api | blocked | documented in OpenAPI as UpdateTask; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Update a task (status, assignees, due date, name, description): Update Task | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Delete a task: DELETE /v2/task/{task_id} | api | blocked | documented in OpenAPI as DeleteTask; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Delete a task: Delete task | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Organize work in Lists, Folders, and Spaces (hierarchy): POST /v2/space | api | blocked | map shorthand; equivalent documented op exists; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Organize work in Lists, Folders, and Spaces (hierarchy): POST /v2/folder | api | blocked | map shorthand; equivalent documented op exists; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Organize work in Lists, Folders, and Spaces (hierarchy): POST /v2/folder/{id}/list | api | blocked | documented in OpenAPI as CreateList; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Organize work in Lists, Folders, and Spaces (hierarchy): Get Workspace Hierarchy | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Organize work in Lists, Folders, and Spaces (hierarchy): Create List | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Organize work in Lists, Folders, and Spaces (hierarchy): Create Folder | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: View tasks as Board, Calendar, Gantt, Table, Timeline, Workload, or List views: POST /v2/list/{id}/view | api | blocked | documented in OpenAPI as CreateListView; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Write and edit collaborative Docs: POST /v3/workspaces/{id}/docs | api | blocked | documented in OpenAPI as createDocPublic; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Write and edit collaborative Docs: PUT page | api | blocked | map shorthand; equivalent documented op exists; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Write and edit collaborative Docs: Create Document | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Write and edit collaborative Docs: Update Document Page | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Chat with teammates in Channels and DMs: POST /v3/workspaces/{id}/chat/channels/{channel_id}/messages | api | blocked | documented in OpenAPI as createChatMessage; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Chat with teammates in Channels and DMs: Send Chat Message | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Chat with teammates in Channels and DMs: Get Chat Channels | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Comment on tasks and reply in threads, @mention teammates: POST /v2/task/{task_id}/comment | api | blocked | documented in OpenAPI as CreateTaskComment; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Comment on tasks and reply in threads, @mention teammates: Create Task Comment | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Comment on tasks and reply in threads, @mention teammates: Get Threaded Replies | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Track time against a task (start/stop timer or manual entry): POST /v2/team/{team_id}/time_entries/start | api | blocked | documented in OpenAPI as StartatimeEntry; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Track time against a task (start/stop timer or manual entry): Start Time Tracking | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Track time against a task (start/stop timer or manual entry): Add Time Entry | mcp | blocked | listed in MCP Supported Tools page; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Set Goals with measurable Targets and track progress: POST /v2/team/{team_id}/goal | api | blocked | documented in OpenAPI as CreateGoal; not callable: no account (visible reCAPTCHA at sign-up) |
| Docs claim: Set Goals with measurable Targets and track progress: POST /v2/goal/{goal_id}/key_result | api | blocked | documented in OpenAPI as CreateKeyResult; not callable: no account (visible reCAPTCHA at sign-up) |
| Break a task into a checklist of sub-items: Break a task into a checklist of sub-items | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Link or set dependencies between tasks (blocks/waiting on): Link or set dependencies between tasks (blocks/waiting on) | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Tag tasks and filter/search by tag: Tag tasks and filter/search by tag | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Set and query Custom Fields on tasks: Set and query Custom Fields on tasks | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Search across tasks, Lists, Folders, and Docs in the Workspace: Search across tasks, Lists, Folders, and Docs in the Workspace | mcp | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Create a task, List, or Folder from a template: Create a task, List, or Folder from a template | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Create Automations that trigger actions on task changes: Create Automations that trigger actions on task changes | browser | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Receive webhooks on Workspace events: Receive webhooks on Workspace events | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Track how long a task spent in each status: Track how long a task spent in each status | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Add guests with scoped permission to tasks/Lists/Folders: Add guests with scoped permission to tasks/Lists/Folders | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Organize members into User Groups (Teams) for bulk assignment: Organize members into User Groups (Teams) for bulk assignment | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Build Mind Maps to visually plan task relationships: Build Mind Maps to visually plan task relationships | browser | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Draw on collaborative Whiteboards: Draw on collaborative Whiteboards | browser | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Collect task submissions via a Form view: Collect task submissions via a Form view | browser | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Export Lists/views to CSV, Excel, or other custom formats: Export Lists/views to CSV, Excel, or other custom formats | browser | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Leave pinned feedback markup on images/PDFs attached to tasks (proofing): Leave pinned feedback markup on images/PDFs attached to tasks (proofing) | browser | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| View team Workload to balance task assignments across people: View team Workload to balance task assignments across people | api | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Record and attach an in-app video (Clip) to a task: Record and attach an in-app video (Clip) to a task | browser | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Send and receive email from within ClickUp, linked to tasks: Send and receive email from within ClickUp, linked to tasks | browser | blocked | No account: the only email sign-up (app.clickup.com/signup) shows a visible reCAPTCHA v2 checkbox; Google sign-in has no kit of our own |
| Enable two-factor authentication on an account: check against docs | none | blocked | clickup.com/security lists "Two-factor Authentication" (feature list); UI only, no API |
| Sign in via Google SSO: check against docs | none | blocked | clickup.com/security lists "Google SSO BUSINESS"; "Weiter mit Google" button seen on app.clickup.com/signup and /login |
| Enforce SAML SSO and SCIM provisioning for the organization: check against docs | none | blocked | Enterprise SSO: "Continue with SSO" on login page; SAML/SCIM not found in clickup.com/features/sso text fetched (JS-rendered); UI/sales only |
| Define custom roles with granular permissions: check against docs | none | blocked | OpenAPI v2 GetCustomRoles (GET /v2/team/{team_id}/customroles), read-only; creating roles is UI only |
| Query a Workspace-level audit log of user actions: check against docs | none | blocked | OpenAPI v3 queryAuditLog (POST /v3/workspaces/{id}/auditlogs), Enterprise plan per map |
| Apply custom branding (logo, colors) to the Workspace: check against docs | none | blocked | clickup.com/pricing lists "Custom Branding" under Enterprise; UI only |
| Choose a data residency region and obtain HIPAA/MSA agreements: check against docs | none | blocked | clickup.com/security: "Localized Data Residency ClickUp customers who are on the Enterprise Plan have the option to host their..."; MSA & HIPAA on pricing; sales-managed |
| pay step public probes: 402 challenges, registries, well-known, billing API, trial card | api | done ✓ | pay_probe.json: no 402 (site, API host, x402./mpp.), no MPP/Bazaar/Stripe Projects listing, no docs mentions; /.well-known/ucp 403 html; OpenAPI v2/v3 have no billing/plan operations; MCP tools doc lists no billing tools; pricing: Free Forever $0 "No credit card required", Unlimited $10/user/month monthly ($7 yearly), "We accept all major credit cards!"; pay_tx.json: nothing paid (no 402 on own endpoint) |
| walk to the last click: Open checkout for Unlimited monthly | browser | blocked | Upgrade happens inside the app (pricing "Get started" -> app.clickup.com/signup); no account (visible reCAPTCHA v2 at sign-up), so the plan page and checkout were not reached; processor unknown |
| cancel plan: Cancel what the drive started | none | skipped | Nothing started: no account, no plan, no trial |
| delete account: Delete the account | none | skipped | No account was created (sign-up stopped at visible reCAPTCHA before submit); DCR client registration at mcp.clickup.com stored a stateless signed client_id (JWT), no account |
| help center: Read help.clickup.com Downgrade your plan | api | failed | GET https://help.clickup.com/hc/en-us/articles/13673035695127-Downgrade-your-plan -> 403 Cloudflare managed challenge page (__cf_chl_* in body) to our signed agent |
Also in Project management.
BasecampL4Gets in on its ownClickUp vs Basecamp
PlaneL4Gets in on its ownClickUp vs Plane
GitHubL4Gets in on its ownClickUp vs GitHub
ShortcutL4Gets in on its ownClickUp vs Shortcut