Back to Browse

Gtasks MCP Server

Developer ToolsModerate6.8MCP RegistryLocal
Free

Server data from the Official MCP Registry

Manage Google Tasks via MCP: list, search, create, update, move, and clear tasks.

About

Manage Google Tasks via MCP: list, search, create, update, move, and clear tasks.

Security Report

6.8
Moderate6.8Moderate Risk

This Google Tasks MCP server demonstrates solid security practices with proper OAuth2 authentication, secure credential handling, and appropriate input validation. Credentials are properly sourced from environment variables or secure file storage rather than hardcoded. The codebase is well-structured with good error handling. Minor code quality observations include broad exception catching and some verbose logging, but these do not constitute security vulnerabilities for this server's purpose. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

5 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

What You'll Need

Set these up before or after installing:

Google OAuth client IDOptional

Environment variable: GOOGLE_CLIENT_ID

Google OAuth client secretRequired

Environment variable: GOOGLE_CLIENT_SECRET

Google OAuth refresh token with Tasks scopeRequired

Environment variable: GOOGLE_REFRESH_TOKEN

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-alvinjchoi-gtasks-mcp": {
      "env": {
        "GOOGLE_CLIENT_ID": "your-google-client-id-here",
        "GOOGLE_CLIENT_SECRET": "your-google-client-secret-here",
        "GOOGLE_REFRESH_TOKEN": "your-google-refresh-token-here"
      },
      "args": [
        "-y",
        "@alvincrave/gtasks-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

Google Tasks MCP Server

A Model Context Protocol (MCP) server for Google Tasks. Manage task lists and tasks through natural language in Claude Desktop and other MCP clients.

Forked from zcaceres/gtasks-mcp with stronger auth options, multi-list support, pagination, and hierarchy tools.

npm version MCP Registry License: MIT

Registry name: io.github.alvinjchoi/gtasks-mcp
npm: @alvincrave/gtasks-mcp

Features

  • List and search tasks (optionally scoped to one task list)
  • Paginate through all tasks (no silent 100-task cap)
  • Create, update, delete, and clear completed tasks
  • Discover task lists (list_task_lists)
  • View parent/child hierarchy (list_with_tree)
  • Reorder, nest, or move tasks across lists (move)
  • OAuth2 auth via env vars, credential files, or interactive auth
  • Docker support

Installation

Recommended (Claude Desktop / any MCP client) — runs the latest published npm package:

npx -y @alvincrave/gtasks-mcp

Or install globally:

npm install -g @alvincrave/gtasks-mcp

From source

git clone https://github.com/alvinjchoi/gtasks-mcp.git
cd gtasks-mcp
npm install
npm run build

Setup

Option A — Environment variables (Claude Desktop)

  1. Create a Google Cloud project and enable the Google Tasks API.
  2. Create OAuth 2.0 Desktop credentials and obtain a refresh token (OAuth Playground with scope https://www.googleapis.com/auth/tasks works).
  3. Configure Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):
{
  "mcpServers": {
    "gtasks": {
      "command": "npx",
      "args": ["-y", "@alvincrave/gtasks-mcp"],
      "env": {
        "GOOGLE_CLIENT_ID": "your_client_id_here",
        "GOOGLE_CLIENT_SECRET": "your_client_secret_here",
        "GOOGLE_REFRESH_TOKEN": "your_refresh_token_here"
      }
    }
  }
}

Option B — Credential files (local / shared with other Google MCP servers)

  1. Download your OAuth client JSON (gcp-oauth.keys.json).
  2. Authenticate once:
export GTASKS_CREDENTIALS_PATH=/path/to/gcp-oauth.keys.json
export GTASKS_TOKEN_PATH=/path/to/.gtasks-server-credentials.json
node dist/index.js auth
  1. Run the server with the same env vars set (or place gcp-oauth.keys.json in the project root and use the defaults).

Aliases also accepted:

PurposePreferredAlias
OAuth client keysGTASKS_CREDENTIALS_PATHGOOGLE_OAUTH_KEYS_PATH
Saved tokensGTASKS_TOKEN_PATHGOOGLE_TASKS_CREDENTIALS_PATH

Option C — Home config file

Create ~/.gtasks-credentials.json:

{
  "clientId": "your_client_id",
  "clientSecret": "your_client_secret",
  "refreshToken": "your_refresh_token"
}

Tools

ToolDescription
searchSearch tasks by title/notes. Optional taskListId.
listList tasks (all lists, or one via taskListId). Fully paginated.
list_task_listsList task list names and IDs.
list_with_treeTree view for one list (parent/child, position order).
moveReorder, nest/un-nest, or move across lists.
createCreate a task (title required; optional notes/due/taskListId).
updatePatch a task (only provided fields change).
deleteDelete a task.
clearClear completed tasks from a list.

Usage examples

show my task lists
list tasks in list <id>
search for tasks containing "meeting"
create a task named "Prepare presentation" due 2026-07-20
show the task tree for list <id>
move task <id> under parent <parentId>
mark task <id> completed

Docker

docker build -t gtasks-mcp .
docker run -i \
  -e GOOGLE_CLIENT_ID=your_client_id \
  -e GOOGLE_CLIENT_SECRET=your_client_secret \
  -e GOOGLE_REFRESH_TOKEN=your_refresh_token \
  gtasks-mcp

Development

npm install
npm run build
npm start

Auth check / interactive login:

npm run build
node dist/index.js auth

Security Notes

  • Treat refresh tokens like passwords
  • Prefer env vars or ignored credential files — never commit them
  • Rotate credentials if they leak

Contributors

  • ArtyMcLabin — pagination, taskListId filtering, list_task_lists, list_with_tree, move, and file-based auth (#1)
  • zcaceres — original Google Tasks MCP server
  • alvinjchoi — fork maintenance, Smithery/npm packaging

See CONTRIBUTORS.md.

License

MIT

Reviews

No reviews yet

Be the first to review this server!