1. Conduid
  2. Cloud
  3. Things Cloud MCP
MCP server · Cloud

Things Cloud MCP

by · github.com/wbopan/things-cloud-mcp

MCP server for Things 3 via Things Cloud API

Unclaimed MIT golangmcpthings3
InstallView source
39Low

Scored 2 days ago · breakdown

About Things Cloud MCP

Things Cloud MCP is an MCP server published by wbopan in the Cloud category: mCP server for Things 3 via Things Cloud API.

The repository has 39 stars and 21 forks, with the last commit 18 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/wbopan/things-cloud-mcp

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Ask AI

✦

Ask AI about Things Cloud MCP

Powered by Claude · Grounded in docs

I know everything about Things Cloud MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 7 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.

1 check has not been run yet.

Releases

v1.4.4v1.4.4 · 20 Aug 2026Bug fixes Rebuild mixed-generation Things histories by deterministically mapping legacy UUID-style identifiers to their canonical Base58 identifiers. Normalize legacy task, project, heading, area, tag, checklist, recurrence, and delegate…
v1.4.3v1.4.3 · 20 Aug 2026Bug fixes Support legacy `Tombstone` deletion records found in older Things Cloud histories, preventing full account rebuilds from failing with `unsupported kind "Tombstone"`. Route both `Tombstone` and `Tombstone2` through in-memory and…
v1.4.2v1.4.2 · 17 Aug 2026Bug fixes Match Things app visibility by excluding pending tasks whose heading or project is completed, canceled, or trashed from active, Today, Upcoming, overview, and diagnostic counts. Reject task and heading creation or moves into…
v1.3.2v1.3.2 · 15 Apr 2026Fixes 15 — Filter untitled tasks from list results. `things_find_tasks`, `things_show_project` (children), `things_find_projects`, and `things_overview` would return shells of tasks created and abandoned with no title. They are now skipped…
v1.3.1v1.3.1 · 5 Apr 2026Fix: Ephemeral port exhaustion causing 502 errors `http.Server` had no timeout settings, so idle keep-alive connections from Caddy accumulated indefinitely (~28K ESTABLISHED connections), exhausting the ephemeral port range and causing…

README

Things Cloud MCP

An MCP server that connects AI assistants to Things 3 via Things Cloud.

Public endpoint: https://thingscloudmcp.com

Add this URL to your MCP client and start managing Things 3 tasks with AI. Multi-user — each user authenticates with their own Things Cloud credentials.

Features

  • Streamable HTTP transport with OAuth 2.1 and Basic authentication
  • Multi-user support with per-user operation serialization and credential-bound sessions
  • 23 tools for reading and managing tasks, projects, headings, areas, tags, and checklists
  • Real-time sync with Things 3 apps on Mac, iPhone, and iPad
  • MCP output schemas and structured content for every tool
  • Fail-closed cursor/schema validation, uncertain-write reconciliation without automatic retry, and explicit confirmation for permanent deletion

Self-hosting

If you prefer to host your own instance:

go build -o things-mcp .
./things-mcp

The server listens on port 8080 by default (set PORT to override). Optionally set JWT_SECRET for stable tokens across restarts. Things passwords stored for OAuth are encrypted with AES-GCM; set a durable high-entropy CREDENTIALS_SECRET, or persist the generated DATA_DIR/credentials.key alongside oauth.db. Refresh tokens are stored as hashes.

  • OAuth clients (Claude.ai, ChatGPT) authenticate via the built-in OAuth 2.1 flow
  • CLI clients (Claude Code, Cursor, Windsurf) use Basic auth headers

Deploy to Fly.io

The included Dockerfile stores OAuth state and generated keys under /data. To deploy on Fly.io, create a fly.toml for the app and mount the volume at /data:

brew install flyctl
fly auth login

fly launch --no-deploy                   # generate and review fly.toml
fly volumes create data --size 1         # 1 GB persistent volume for tokens and JWT secret
fly secrets set JWT_SECRET=$(openssl rand -hex 32)
fly secrets set CREDENTIALS_SECRET=$(openssl rand -hex 32)
fly deploy

Important: The persistent volume is required. Without it, OAuth state and any generated credential-encryption key are stored on ephemeral disk. Losing the encryption key makes persisted credentials intentionally unreadable. Back up oauth.db and the matching key together before deployment or migration.

This project writes through a reverse-engineered, unofficial Things Cloud protocol. Keep a restorable Things for Mac backup and use a disposable account for write validation. Production health checks should remain read-only unless a real write is explicitly intended.

Your endpoint will normally be https://<app-name>.fly.dev; verify current Fly configuration and pricing before deployment.

Built with things-cloud-sdk and mcp-go.

README fetched from the repository 7 hours ago. The original is authoritative.

Questions

About Things Cloud MCP

How do I install Things Cloud MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Things Cloud MCP safe to use with an AI agent?

Its trust score is 39 out of 100 (low). It passes 5 of the 5 static security checks run so far. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Things Cloud MCP still maintained?

Yes — the latest release is v1.4.4 (20 Aug 2026), and the last commit was 18 days ago. The repository has 39 stars and 19 open issues.