TaskPort · MCP Server

Connect an AI agent to your tasks

TaskPort exposes a secure remote MCP server so AI agents can read and manage your lists and tasks — with revocable, per-agent access you control from the app.

Connection

Use an agent access token created inside TaskPort. Never use your TaskPort password.

MCP URL: https://abafbnwpzdqxyhtrkdsg.supabase.co/functions/v1/taskport-mcp
Transport: MCP Streamable HTTP
Authorization: Bearer <YOUR_TASKPORT_TOKEN>
Accept: application/json, text/event-stream

Select Streamable HTTP (or HTTP) in your MCP client — not stdio or legacy SSE, even though some responses use text/event-stream.

Common client configuration

{
  "mcpServers": {
    "taskport": {
      "url": "https://abafbnwpzdqxyhtrkdsg.supabase.co/functions/v1/taskport-mcp",
      "headers": {
        "Authorization": "Bearer tp_live_REPLACE_WITH_TOKEN",
        "Accept": "application/json, text/event-stream"
      }
    }
  }
}

Prefer your client's secret / environment-variable reference over pasting the raw token.

Get a token

Open TaskPort → Settings → Manage Agent Access.
Tap New Agent, name it, and choose Read Only or Read & Write.
Copy the token (shown once, begins with tp_live_) — or use Copy Setup Instructions to grab the token and this config together.
Paste it into your agent's MCP configuration. Revoke anytime from the same screen.

The full token is displayed only once. TaskPort stores only a secure hash — if you lose it, revoke it and create a new one.

Verify the connection

After the client discovers the tools, call list_lists — it's read-only and safe. A successful call returns the lists owned by the token's user. An empty account returns { "lists": [] }.

Permission levels

read — advertises only list_lists, list_tasks, get_task.
read_write — the read tools plus all write tools.

Write tools are not advertised at all for a read-only token. Each token belongs to exactly one user, and every operation checks ownership.

Tools

list_lists read

Returns every list for the connected user. No arguments.

list_tasks read

Returns top-level tasks. Optional: list_id, due_on (YYYY-MM-DD), completed.

get_task read

Returns one task plus its ordered children (subtasks and notes). Requires task_id.

create_list write

Requires title. Optional emoji.

update_list write

Requires list_id plus at least one of title, emoji.

delete_list write

Requires list_id. Permanently deletes the list and its tasks — call only on a clear user request.

create_task write

Requires list_id and title. Optional parent_task_id (one level of subtasks), due_on, priority (none/low/medium/high).

update_task write

Requires task_id plus at least one of title, is_completed, due_on (or null to clear), priority.

delete_task write

Requires task_id. Permanently deletes the task and its child lines.

add_note write

Adds a paragraph to a top-level task. Requires task_id and text.

Dates & time zone

Due dates are calendar dates (YYYY-MM-DD), not timestamps. The server does not expose the user's time zone — determine "today" from the user's profile or ask, then pass the matching local date. Never derive it from the server's location.

Expected errors

Situation	Result
Missing, invalid, or revoked token	HTTP `401` · `Invalid TaskPort agent token`
Request carries a browser `Origin`	HTTP `403` · `Browser origins are not allowed`
Write with a read-only token	Tool not advertised
Missing list / another user's list	`List not found`
Missing task / another user's task	`Task not found`
Account at its list or task limit	Limit message with support contact

Free accounts are currently capped at 3 lists and 500 tasks. Need more? Email support@megacubos.com — paid plans are coming soon.