Skip to main content

​
Overview

OneCLI connects AI agents to Todoist through Todoist’s OAuth flow. Agents can create tasks, mark them complete, organize them into projects, and query your task list. The gateway injects OAuth credentials into requests to the Todoist API automatically. This is useful for agents that need to track work items, create follow-up tasks after completing operations, or manage to-do lists on your behalf.

​
What you will set up

  • A Todoist connection through OAuth
  • Automatic token injection on Todoist API requests
  • Per-agent, per-tool access to tasks and projects

​
Setup

1

Go to Connections

Open the OneCLI dashboard and navigate to Connections > Todoist.
2

Authorize

Click Connect Todoist. You’ll be redirected to Todoist to authorize OneCLI. Review the permissions and click Agree.
OneCLI connect window for Todoist on Cloud, showing the Connect to Todoist button.

The Todoist connect window on OneCLI Cloud.

​
Self-hosted: use your own Todoist app

Skip this section on OneCLI Cloud. It’s only for self-hosted OneCLI without TODOIST_CLIENT_ID and TODOIST_CLIENT_SECRET set, or if you want your own company name on Todoist’s consent screen.

1. Create the Todoist app

Open the Todoist App Management console and select Create a new app. Name it OneCLI.
Todoist Create App dialog with the app name OneCLI and the Create App button.

Create the app in Todoist's App Management.

In OneCLI, open Connections > Todoist > Custom credentials and copy the Redirect URI. In Todoist, paste it into OAuth redirect URL and save. OneCLI requests the data:read_write and data:delete scopes, so there’s nothing else to tick.
OneCLI Custom credentials card for Todoist with the setup guide link, the Redirect URI and its copy button, and the client ID and secret fields.

Copy the Redirect URI from Custom credentials in OneCLI.

Todoist app settings for OneCLI showing the Client ID, a hidden Client secret, and https://onecli.example.com/v1/apps/todoist/callback under OAuth redirect URL.

Your Todoist app's settings with the OneCLI redirect URL.

Copy the app’s Client ID and Client secret. Paste both into Connections > Todoist > Custom credentials, select Save & Connect, and click Agree in Todoist.

​
What agents can do

  • List all active tasks, optionally filtered by project, label, or due date
  • Create new tasks with a title, description, due date, priority, and labels
  • Complete (close) tasks
  • Reopen completed tasks
  • Update task details (title, description, due date, priority, labels)
  • Delete tasks
  • List, create, and manage projects
  • List, create, and manage sections within projects
  • Add and remove labels
  • Read and add comments on tasks

​
Controlling access

Access is per agent: grant the connection to each agent that needs it, choosing per tool what runs freely, what needs human approval, and what stays blocked — a read-only agent is a single grant. Organization rules add guardrails on top, like rate limits and blanket blocks. Everything is checked before credential injection, so a blocked request never reaches Todoist.

​
FAQ

No. The token stays in OneCLI, and the gateway adds it at the proxy. See How it works.
Yes. Block or require approval for delete tools when you grant the connection.
Open Connections > Todoist and connect again. Agents with access use the new connection automatically.