Connects your MCP client to Google Tasks through a self-hosted server you control with your own OAuth credentials. You get 19 tools covering tasklists and tasks: create, read, update, delete, move, complete, plus specialized views like today, overdue, upcoming, search, and digest. Runs over stdio for local client launches or streamable HTTP for VPS hosting with bearer token auth. Supports multi-account routing so you can point one client at your personal Tasks and another at work. Responses are compact for low-context workflows. Reach for this when you want an AI assistant to read your agenda, add tasks during conversations, or query overdue items without opening the Google Tasks UI.
Public tool metadata for what this MCP can expose to an agent.
GOOGLETASKS_CLEAR_TASKSPermanently clears all completed tasks from a specified Google Tasks list; this action is destructive and idempotent.1 paramsPermanently clears all completed tasks from a specified Google Tasks list; this action is destructive and idempotent.
taskliststringGOOGLETASKS_CREATE_TASK_LISTCreates a new task list with the specified title.1 paramsCreates a new task list with the specified title.
tasklist_titlestringGOOGLETASKS_DELETE_TASKDeletes a specified task from a given task list in Google Tasks.2 paramsDeletes a specified task from a given task list in Google Tasks.
task_idstringtasklist_idstringGOOGLETASKS_DELETE_TASK_LISTPermanently deletes an existing Google Task list, identified by `tasklist_id`, along with all its tasks; this operation is irreversible.1 paramsPermanently deletes an existing Google Task list, identified by `tasklist_id`, along with all its tasks; this operation is irreversible.
tasklist_idstringGOOGLETASKS_GET_TASKUse to retrieve a specific Google Task if its `task_id` and parent `tasklist_id` are known.2 paramsUse to retrieve a specific Google Task if its `task_id` and parent `tasklist_id` are known.
task_idstringtasklist_idstringGOOGLETASKS_GET_TASK_LISTRetrieves a specific task list from the user's Google Tasks if the `tasklist_id` exists for the authenticated user.1 paramsRetrieves a specific task list from the user's Google Tasks if the `tasklist_id` exists for the authenticated user.
tasklist_idstringGOOGLETASKS_INSERT_TASKCreates a new task in a given `tasklist_id`, optionally as a subtask of an existing `task_parent` or positioned after an existing `task_previous` sibling, where both `task_parent` and `task_previous` must belong to the same `tasklist_id` if specified. IMPORTANT: Date fields (d...12 paramsCreates a new task in a given `tasklist_id`, optionally as a subtask of an existing `task_parent` or positioned after an existing `task_previous` sibling, where both `task_parent` and `task_previous` must belong to the same `tasklist_id` if specified. IMPORTANT: Date fields (d...
idstringduestringetagstringnotesstringtitlestringhiddenbooleanstatusstringneedsAction · completeddeletedbooleancompletedstringtask_parentstringtasklist_idstringtask_previousstringGOOGLETASKS_LIST_TASK_LISTSFetches the authenticated user's task lists from Google Tasks; results may be paginated.2 paramsFetches the authenticated user's task lists from Google Tasks; results may be paginated.
pageTokenstringmaxResultsintegerGOOGLETASKS_LIST_TASKSRetrieves tasks from a Google Tasks list; all date/time strings must be RFC3339 UTC, and `showCompleted` must be true if `completedMin` or `completedMax` are specified.11 paramsRetrieves tasks from a Google Tasks list; all date/time strings must be RFC3339 UTC, and `showCompleted` must be true if `completedMin` or `completedMax` are specified.
dueMaxstringdueMinstringpageTokenstringmaxResultsintegershowHiddenbooleanupdatedMinstringshowDeletedbooleantasklist_idstringcompletedMaxstringcompletedMinstringshowCompletedbooleanGOOGLETASKS_MOVE_TASKMoves the specified task to another position in the destination task list.5 paramsMoves the specified task to another position in the destination task list.
taskstringparentstringpreviousstringtaskliststringdestinationTaskliststringGOOGLETASKS_PATCH_TASKPartially updates an existing task (identified by `task_id`) within a specific Google Task list (identified by `tasklist_id`), modifying only the provided attributes from `TaskInput` (e.g., `title`, `notes`, `due` date, `status`) and requiring both the task and list to exist.11 paramsPartially updates an existing task (identified by `task_id`) within a specific Google Task list (identified by `tasklist_id`), modifying only the provided attributes from `TaskInput` (e.g., `title`, `notes`, `due` date, `status`) and requiring both the task and list to exist.
idstringduestringetagstringnotesstringtitlestringhiddenbooleanstatusstringneedsAction · completeddeletedbooleantask_idstringcompletedstringtasklist_idstringGOOGLETASKS_PATCH_TASK_LISTUpdates the title of an existing Google Tasks task list.2 paramsUpdates the title of an existing Google Tasks task list.
tasklist_idstringupdated_titlestringGOOGLETASKS_UPDATE_TASKUpdates the specified task.6 paramsUpdates the specified task.
duestringtaskstringnotesstringtitlestringstatusstringtaskliststringGOOGLETASKS_UPDATE_TASK_LISTUpdates the authenticated user's specified task list.2 paramsUpdates the authenticated user's specified task list.
titlestringtasklist_idstringConnect an MCP-compatible client to Google Tasks through a private server you run yourself. The server exposes compact tools for reading, searching, summarizing, creating, completing, updating, deleting, and moving Google Tasks.
This project is for self-hosted use. You provide your own Google Cloud OAuth credentials, connect your own Google account, and keep tokens in your own SQLite database.
| Use case | Transport | Auth |
|---|---|---|
| MCP client starts the process directly | stdio | No MCP_BEARER_TOKEN needed |
| Local HTTP server | Streamable HTTP at http://127.0.0.1:8787/mcp | Bearer token |
| VPS or other host | Streamable HTTP at https://your-domain.example/mcp | Bearer token or OAuth gateway |
For deeper hosting and distribution guidance, see MCP_SERVER_GUIDE.md and DISTRIBUTION.md.
git clone https://github.com/ebmurha/google-tasks-mcp.git
cd google-tasks-mcp
python3.11 -m venv .venv
. .venv/bin/activate
pip install -e .
cp .env.example .env
Generate a bearer token if you will run HTTP mode:
python -c "import secrets; print(secrets.token_urlsafe(48))"
Put the generated value in .env as MCP_BEARER_TOKEN. Do not commit .env.
Recommended for local HTTP, VPS, Docker, and other server-style installs:
http://127.0.0.1:8787/callbackhttps://your-domain.example/callback.env: set GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, and GOOGLE_REDIRECT_URILocal-only alternative:
GOOGLE_OAUTH_KEYS_PATH to that file path.GOOGLE_CLIENT_ID and GOOGLE_CLIENT_SECRET empty unless you want env vars to override the JSON file.Example .env for a local web OAuth client:
GOOGLE_CLIENT_ID=your-client-id.apps.googleusercontent.com
GOOGLE_CLIENT_SECRET=your-client-secret
GOOGLE_REDIRECT_URI=http://127.0.0.1:8787/callback
MCP_BEARER_TOKEN=your-generated-token
DB_PATH=./google-tasks.db
BIND_HOST=127.0.0.1
BIND_PORT=8787
If the Google OAuth app is in Testing mode, add every Google account you bootstrap as a test user, such as both personal and work accounts.
GOOGLE_CLIENT_ID / GOOGLE_CLIENT_SECRET / GOOGLE_OAUTH_KEYS_PATH identify the Google Cloud OAuth app, not the Google Tasks user account. One OAuth client JSON can be reused for several Google users. Each bootstrap run stores a separate refresh token for the Google account you authorize in the browser.
Run this once per Google account you want the server to access:
google-tasks-mcp-bootstrap
Open the printed URL, approve access, and paste the authorization code back into the terminal.
For multiple trusted accounts on one HTTP server, create one stored bearer token per account and bootstrap each account separately:
google-tasks-mcp-create-bearer-token --account-id personal --label "Personal account"
google-tasks-mcp-bootstrap --account-id personal
google-tasks-mcp-create-bearer-token --account-id work --label "Work account"
google-tasks-mcp-bootstrap --account-id work
Use each printed bearer token only in the matching account's MCP client. The server stores only bearer-token hashes.
HTTP mode:
python -m google_tasks_mcp --transport http
Health check:
curl http://127.0.0.1:8787/healthz
Expected response:
{"ok": true}
Stdio mode:
python -m google_tasks_mcp --transport stdio
Configuration check:
python -m google_tasks_mcp --check
Remote or local HTTP:
URL: http://127.0.0.1:8787/mcp
Auth: Bearer <MCP_BEARER_TOKEN>
For a VPS, replace the URL with your HTTPS endpoint:
URL: https://your-domain.example/mcp
Auth: Bearer <MCP_BEARER_TOKEN>
Local stdio:
{
"command": "/path/to/google-tasks-mcp/.venv/bin/python",
"args": ["-m", "google_tasks_mcp", "--transport", "stdio"]
}
MCP_BEARER_TOKEN is not required for stdio because the MCP client launches the process locally.
Bearer-token mode is the default HTTP mode. /mcp requires Authorization: Bearer <token>.
MCP_BEARER_TOKEN routes to account default.google-tasks-mcp-create-bearer-token can route different clients to different account_id values.OAuth 2.0 gateway mode is optional. Enable it when your HTTP MCP client supports OAuth authorization metadata and token refresh.
MCP_OAUTH_ISSUER, MCP_OAUTH_CLIENT_ID, MCP_OAUTH_CLIENT_SECRET, and MCP_OAUTH_SIGNING_SECRET.MCP_OAUTH_REDIRECT_URIS to the callback URI values accepted by your MCP client./mcp accepts OAuth-issued access tokens and the legacy bearer token.Leave MCP_OAUTH_REDIRECT_URIS empty to keep OAuth gateway mode disabled.
The same 19 tools are available over stdio, bearer-token HTTP, and OAuth gateway HTTP modes. Tools expose standard MCP titles, descriptions, and safety hints where the client supports them.
| Group | Tools | Notes |
|---|---|---|
| Tasklists | list_tasklists, create_tasklist, get_tasklist, update_tasklist, delete_tasklist | Tasklist delete requires confirm: true; non-empty lists require force: true. |
| Task reads | list_tasks, get_task | Read from one tasklist. If tasklist is omitted, uses DEFAULT_TASKLIST or Google's first list. |
| Task summaries | today, overdue, upcoming, search, digest | If tasklist is omitted, reads all tasklists and includes tasklist context. |
| Task mutations | clear_completed, add, complete, update, uncomplete, delete, move | Mutate one tasklist/task at a time. clear_completed requires confirm: true. |
All tasklist arguments accept a tasklist ID or exact title. Task title lookup is exact after trimming whitespace and ignores case.
For today, overdue, upcoming, search, and digest, omitting tasklist reads every tasklist. Returned task objects include tasklist_id and tasklist_title; digest labels items with tasklist context.
For list_tasks, clear_completed, single-task tools, and write tools, omitting tasklist uses DEFAULT_TASKLIST, or the first list returned by Google. This prevents unqualified writes from touching every list.
These are Google Tasks REST API limits:
clear_completed hides completed tasks; it does not permanently delete them.Docker:
docker compose up --build
Keep .env, OAuth JSON files, and SQLite databases outside images and public bundles.
VPS/systemd/Caddy templates are in deploy/:
Replace every placeholder domain, path, and user before deploying.
Missing bearer token:
/mcp requires Authorization: Bearer <token> unless OAuth gateway mode is handling the client.MCP_BEARER_TOKEN.Google OAuth app is in Testing mode:
Callback URI mismatch:
GOOGLE_REDIRECT_URI must exactly match an Authorized redirect URI in Google Cloud.http://127.0.0.1:8787/callback consistently.Expired or revoked Google refresh token:
google-tasks-mcp-bootstrap again for the affected account.--account-id you used before.OAuth MCP client keeps re-authorizing:
DB_PATH points to persistent storage and survives restarts.MCP_OAUTH_ISSUER is the public HTTPS base URL with no trailing slash.pytest
GOOGLE_CLIENT_ID*secretGoogle OAuth client ID from the user's Google Cloud project.
GOOGLE_CLIENT_SECRET*secretGoogle OAuth client secret from the user's Google Cloud project.
GOOGLE_REDIRECT_URI*OAuth callback URL for the user's local or hosted server.
DB_PATHPersistent SQLite database path for tokens and cache.
DEFAULT_TASKLISTOptional default tasklist title or ID.