# Things Cloud Mcp

> MCP server for Things 3 via Things Cloud API

- **Type:** MCP server
- **Install:** `agentstack add mcp-wbopan-things-cloud-mcp`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [wbopan](https://agentstack.voostack.com/s/wbopan)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [wbopan](https://github.com/wbopan)
- **Source:** https://github.com/wbopan/things-cloud-mcp
- **Website:** https://thingscloudmcp.com/

## Install

```sh
agentstack add mcp-wbopan-things-cloud-mcp
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Things Cloud MCP

An MCP server that connects AI assistants to Things 3 via Things Cloud.

**Public endpoint: https://thingscloudmcp.com**

Add this URL to your MCP client and start managing Things 3 tasks with AI. Multi-user — each user authenticates with their own Things Cloud credentials.

## Features

- Streamable HTTP transport with OAuth 2.1 and Basic authentication
- Multi-user support with per-user credentials
- 14 tools for managing tasks, projects, areas, and tags
- Real-time sync with Things 3 apps on Mac, iPhone, and iPad

## Self-hosting

If you prefer to host your own instance:

```bash
go build -o things-mcp .
./things-mcp
```

The server listens on port 8080 by default (set `PORT` to override). Optionally set `JWT_SECRET` for stable tokens across restarts.

- OAuth clients (Claude.ai, ChatGPT) authenticate via the built-in OAuth 2.1 flow
- CLI clients (Claude Code, Cursor, Windsurf) use Basic auth headers

### Deploy to Fly.io

A `Dockerfile` is included. To deploy on [Fly.io](https://fly.io):

```bash
brew install flyctl
fly auth login

fly launch --no-deploy                   # generates fly.toml — accepts defaults or customize
fly volumes create data --size 1         # 1 GB persistent volume for tokens and JWT secret
fly secrets set JWT_SECRET=$(openssl rand -hex 32)
fly deploy
```

**Important:** The persistent volume is required. Without it, OAuth tokens and the JWT signing secret are stored on the container's ephemeral disk and wiped on every restart or deploy, forcing all connected clients to re-authenticate.

Your endpoint will be `https://.fly.dev`. The default config (256 MB RAM, shared CPU, scale-to-zero) runs within Fly's free allowance.

Built with [things-cloud-sdk](https://github.com/arthursoares/things-cloud-sdk) and [mcp-go](https://github.com/mark3labs/mcp-go).

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [wbopan](https://github.com/wbopan)
- **Source:** [wbopan/things-cloud-mcp](https://github.com/wbopan/things-cloud-mcp)
- **License:** MIT
- **Homepage:** https://thingscloudmcp.com/

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-wbopan-things-cloud-mcp
- Seller: https://agentstack.voostack.com/s/wbopan
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.