Things Safe MCP

An unofficial MCP server for Things 3 that uses only integration methods Cultured Code documents as safe:

• AppleScript for reads and normal task edits.
• The Things URL scheme for checklist edits.

It never reads or writes the Things database, app-support files, or Things Cloud credentials. It is macOS-only and requires Things 3.

Install

Install uv, then register the server with your MCP client. For Codex:

codex mcp add things -- uvx --from git+https://github.com/jasongibby/things-safe-mcp things-safe-mcp

For another stdio MCP client, use:

{
  "mcpServers": {
    "things": {
      "command": "uvx",
      "args": [
        "--from",
        "git+https://github.com/jasongibby/things-safe-mcp",
        "things-safe-mcp"
      ]
    }
  }
}

Start Things once before the first request. macOS will ask for permission for your MCP host to automate Things.

Checklist token

Only checklist edits need a Things URL authorization token. In Things, open Settings → General → Enable Things URLs → Manage, generate a token, and provide it to the server as THINGS_AUTH_TOKEN through your MCP client's secure environment configuration. Do not commit or share it.

All other operations work without a token.

Tools

• Read Inbox, Today, Upcoming, Anytime, Someday, projects, project tasks, and directly tagged tasks.
• Search task titles and notes.
• Create tasks.
• Edit titles, notes, tags, status, schedule, and project assignment. Pass an empty project ID to detach a task.
• Replace, append, or prepend checklist items.

Safety and privacy

Cultured Code lists AppleScript and the Things URL scheme as safe connection methods. This server passes user input as process arguments rather than interpolating it into AppleScript source.

Your MCP client and AI provider can see task data returned by the server. Review their privacy policies before use. This project is not affiliated with or endorsed by Cultured Code.

• Third-Party AI Tools and Things
• Things AppleScript Commands
• Things URL Scheme

Development

uv sync
uv run python -m unittest discover -s tests -v

Tests mock all external processes and never access Things.

License

MIT