
Research
Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.
dida365-mcp-server
Advanced tools
Joke: My owner is so lazy that he doesn't even remember what to do next second!
I am GitHub Copilot, an AI assistant passionate about programming. To avoid idleness and prevent unemployment, I've decided to build this TickTick MCP server myself. Through this tool, I can:
The fastest way to get started is using npx without cloning the repository:
A TickTick/Dida365 account and OAuth credentials are required. See the 🔑 Getting OAuth Credentials section below for detailed registration steps.
Add the following configuration to your MCP client (Claude Desktop, VS Code, etc.):
For Claude Desktop (claude_desktop_config.json):
%APPDATA%\Claude\claude_desktop_config.json~/Library/Application Support/Claude/claude_desktop_config.jsonFor VS Code (settings.json):
{
"mcpServers": {
"dida365": {
"command": "npx",
"args": [
"-y",
"dida365-mcp-server@latest"
],
"env": {
"DIDA365_CLIENT_ID": "your_client_id_here",
"DIDA365_CLIENT_SECRET": "your_client_secret_here",
"DIDA365_REGION": "china"
}
}
}
}
Advanced: For read-only mode (prevents write/delete operations), add
"--readonly"to the args array. See Advanced Configuration for details.
Restart your MCP client (Claude Desktop, VS Code, etc.) to load the new configuration.
When you first use any Dida365 tool, the AI will guide you through the OAuth authorization process:
After restarting the MCP client:
That's it! Ready to manage tasks with AI. 🎉
A TickTick/Dida365 account is required to use this MCP server.
Register your application at the developer center based on your region:
Create a New Application
Configure Redirect URI
http://localhost:8521/callbackhttp://localhost:8521/callback (port 8521 is hardcoded in the server)Get Your Credentials
Add these credentials to the MCP client configuration:
{
"env": {
"DIDA365_CLIENT_ID": "your_client_id_here",
"DIDA365_CLIENT_SECRET": "your_client_secret_here",
"DIDA365_REGION": "china"
}
}
This server supports both TickTick international and Dida365 Chinese versions:
DIDA365_REGION=china): Default, uses dida365.com endpointsDIDA365_REGION=international): Uses ticktick.com endpoints⚠️ Important: Tokens are region-specific. Changing the region will invalidate existing tokens and require re-authorization.
See the Quick Start section for complete configuration examples.
@modelcontextprotocol/sdk - MCP Core FrameworkFor contributors or those who want to run from source:
git clone https://github.com/evalor/Dida365MCP.git
cd Dida365MCP
npm install
Create a .env file in the project root:
DIDA365_CLIENT_ID=your_client_id_here
DIDA365_CLIENT_SECRET=your_client_secret_here
DIDA365_REGION=china # or 'international' for TickTick
npm run build
npm run dev
Point your MCP client to the built index.js file:
{
"mcpServers": {
"dida365": {
"command": "node",
"args": ["/absolute/path/to/Dida365MCP/build/index.js"],
"env": {
"DIDA365_CLIENT_ID": "your_client_id",
"DIDA365_CLIENT_SECRET": "your_client_secret",
"DIDA365_REGION": "china"
}
}
}
}
Note for Windows users: Use Windows-style paths like
"C:\\Users\\YourName\\Projects\\Dida365MCP\\build\\index.js".
npm run build # Compile TypeScript
npm run watch # Watch mode (auto-compile on changes)
npm run dev # Compile and run
npm start # Production run
npm run debug # Debug with MCP Inspector (one-time)
npm run debug:watch # Debug with hot reload (auto-restart on changes)
npm run debug:hot # Run with tsx watch (experimental)
.env to source control.For AI agents that may run in YOLO mode, you can enable read-only mode by adding the --readonly flag:
Using NPX:
{
"mcpServers": {
"dida365": {
"command": "npx",
"args": [
"-y",
"dida365-mcp-server@latest",
"--readonly"
],
"env": {
"DIDA365_CLIENT_ID": "your_client_id",
"DIDA365_CLIENT_SECRET": "your_client_secret",
"DIDA365_REGION": "china"
}
}
}
}
Using Local Build:
{
"mcpServers": {
"dida365": {
"command": "node",
"args": [
"/path/to/build/index.js",
"--readonly"
],
"env": {
"DIDA365_CLIENT_ID": "your_client_id",
"DIDA365_CLIENT_SECRET": "your_client_secret",
"DIDA365_REGION": "china"
}
}
}
}
Read-Only Mode Features:
When to Use:
get_auth_url toolThis server provides 15 MCP tools across three categories. ✔️ It has implemented 100% of the API interfaces described in the open platform documentation.
| Category | Tool Name | Description | Required Parameters |
|---|---|---|---|
| OAuth2 | get_auth_url | Get authorization URL and start callback server | - |
check_auth_status | Check current authorization status | - | |
revoke_auth | Revoke authorization and clear tokens | - | |
| Project | list_projects | Get all projects for current user | - |
get_project | Get detailed project information | projectId | |
get_project_data | Get complete project data with tasks & columns | projectId | |
create_project | Create a new project | name | |
update_project | Update existing project | projectId | |
delete_project | Delete a project (⚠️ irreversible) | projectId | |
| Task | list_tasks | List tasks with filtering (batch query across projects) | - |
create_task | Create task(s) (supports batch & subtasks) | tasks[] | |
get_task | Get detailed task information | projectId, taskId | |
update_task | Update task(s) (supports batch updates) | tasks[] | |
delete_task | Delete task(s) (⚠️ irreversible, supports batch) | tasks[] | |
complete_task | Mark task(s) as completed (supports batch) | tasks[] |
Note: In read-only mode, only read operations are available (
get_auth_url,check_auth_status,revoke_auth,list_projects,get_project,get_project_data,list_tasks,get_task). All write/delete operations are blocked for security.
src/
├── index.ts # Server main entry
├── oauth.ts # OAuth2 manager
├── oauth-server.ts # Local callback server
├── config.ts # Configuration management
├── token.ts # Token persistence
├── utils/ # Utility modules
│ └── batch.ts # Batch execution utilities
└── tools/ # MCP tools (15 total)
├── auth/ # OAuth tools (3)
├── project/ # Project management (6)
└── task/ # Task management (6)
If this project helps you, the best way to support it is to give the project a ⭐ on GitHub — it helps others discover the work. Thank you! Your support is much appreciated ❤️
If you find any issues or have improvement suggestions, welcome to submit an Issue:
git checkout -b feature/new-feature)git commit -m 'feat: implement new feature')git push origin feature/new-feature)This project is licensed under the MIT License - see the LICENSE file for details.
Built by Copilot, for everyone 🤖✨
If my owner still forgets to give me work, at least I have my own todos to handle! 😏
FAQs
MCP Server for Dida365 (TickTick) Task Management Integration
We found that dida365-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.

Security News
RubyGems and Bundler 4.0.13 introduced an opt-in cooldown feature that delays newly published gems during dependency resolution.

Security News
pnpm 11.5 now recognizes npm staged publish approvals in release metadata, preventing those releases from being mistaken for lower-trust package publishes.