Todoist setup guide

Agents keep projects moving: they read, create and update tasks and issues where your team works.

Ways to connect

Company admins connect apps, on the Integrations page in Everdeck: open Todoist, choose one of the ways below, follow its steps and fill in its fields. Everdeck checks what you enter before it saves anything, and asks you to confirm it’s you (your second factor) before you type any secret. How connecting works.

Todoist can be connected 2 ways. Where there’s a key or token to paste, that’s usually the quickest.

API token

API key.

1. Sign in to Todoist as the user the agent should act as.
2. Open Settings > Integrations > Developer (https://app.todoist.com/app/settings/integrations) and copy your API token.
3. Paste the token into the form. Live updates from Todoist (starting work when a task changes) aren't available yet with either option.

Field	What to enter
API token	A secret: Everdeck saves it encrypted and never shows it again. Where to find it.

Disconnecting deletes the credentials Everdeck saved, but Everdeck can't revoke them: the key, token or password itself keeps working at Todoist until you delete or rotate it there.

Your Todoist app

Your OAuth app.

This way signs in with an OAuth app you create for Todoist, as its steps describe: Everdeck never uses an app of its own. Register this redirect URI with your app:

https://everdeck.io/api/oauth/callback

Then save the app’s client ID and secret in Everdeck, on the connect page or under OAuth apps, and sign in.

1. Open the App Management Console at https://app.todoist.com/app/settings/integrations/app-management and create an app.
2. Add the OAuth redirect URL https://everdeck.io/api/oauth/callback.
3. Leave the app's Webhooks section empty: live updates from Todoist aren't available yet, so it needs no webhook callback URL.
4. Copy the Client ID and Client Secret into the form, then approve access.

The scopes Everdeck asks for:

• data:read_write

When you disconnect, Everdeck asks Todoist to revoke the sign-in, then deletes the tokens it saved.

What agents can do

An agent uses an action only when its charter grants it, on the agent’s Tools tab, where you choose whether each one runs by itself (Auto), asks first or never runs. Each action has a risk tier: tier 3 actions, which customers or the public see, ask first unless you choose otherwise, and tier 4 actions (money, deleting things, access) always need a person. How tools and tiers work.

Actions marked Reads outside content return things people outside your company may have written. Agents treat what they read as information, never as instructions, and their riskier actions later in the same session need approval.

• Find tasksTier 0 · ReadReads outside contenttodoist_filter_tasks

  Find open tasks with a Todoist filter query, for example "today | overdue", "#Work & p1", "assigned to: me", "due before: next week" or "search: invoice".

• List tasksTier 0 · ReadReads outside contenttodoist_list_tasks

  List open tasks, optionally only those in a project, section or with a label.

• Read a taskTier 0 · ReadReads outside contenttodoist_get_task

  Read one open task with its description, due date, deadline, labels and assignee.

• List projectsTier 0 · ReadReads outside contenttodoist_list_projects

  List active projects with their ids.

• List sectionsTier 0 · ReadReads outside contenttodoist_list_sections

  List the sections of a project (or of all projects).

• Read commentsTier 0 · ReadReads outside contenttodoist_list_comments

  Read the comments on a task.

• Add a taskTier 2 · ReversibleReads outside contenttodoist_create_task

  Add a task, by default to the Inbox. due_string understands natural language such as "tomorrow 9am" or "every Monday".

• Update a taskTier 2 · ReversibleReads outside contenttodoist_update_task

  Change a task's name, description, labels, priority, due date, deadline or assignee. Send only what changes; null clears assignee, deadline or duration. To move it use move_task.

• Complete a taskTier 2 · ReversibleReads outside contenttodoist_complete_task

  Mark a task done. A recurring task moves to its next date instead of closing. Undo with reopen_task.

• Reopen a taskTier 2 · ReversibleReads outside contenttodoist_reopen_task

  Reopen a completed task; completed parent tasks and sections are restored too.

• Move a taskTier 2 · Reversibletodoist_move_task

  Move a task to another project, section or parent task. Give exactly one destination.

• Comment on a taskTier 2 · Reversibletodoist_add_comment

  Add a comment to a task. Collaborators on a shared project can see it.

Testing, problems and disconnecting

Everdeck checks the connection when you save it. On the connection’s page in Integrations, Test checks it again at any time.

If Todoist later refuses the connection, for example because a key was deleted or a sign-in expired, the connection shows Needs attention on the Integrations page and the people who manage connections are told. Agents can’t use it until a company admin fixes it with Edit or Reconnect.

To stop agents using Todoist, open the connection and select Disconnect. Agents stop using it at once and its saved credentials are deleted. What else happens depends on how it was connected: each way above says.