Shrimp Task Manager persists task plans, project rules, research notes, task status, dependencies, and execution history in `DATA_DIR`., Tools such as `execute_task`, `complete_task`, `delete_task`, `clear_all_tasks`, and `update_task` can change workflow state and should be reviewed before treating status as authoritative., Agent-assignment and planning features can make generated work look more complete than it is; require human review before accepting implementation progress., The optional GUI starts a web interface when enabled; keep it local or protect it with appropriate network controls., Avoid launching development agents with broad permission-bypass flags solely because an example command suggests it.
Privacy notes
Task descriptions, project rules, research notes, dependency graphs, agent assignments, prompts, and execution history may include private implementation details., Persisted task data and backups can reveal roadmap items, security work, customer requests, or internal architecture decisions., Tool arguments and task records may be visible to the MCP client and model provider during planning and execution., Review `DATA_DIR` before committing, sharing, archiving, or uploading generated task state.
Author
cjo4m06
Submitted by
oktofeesh1
Claim status
unclaimed
Last verified
2026-06-05
Decision playbook
Review trust signals before you adopt
Signals are present but mixed. Use the checklist below to confirm the source and operational safety for your environment.
Compare context
Selected
0
Current score
63
Baseline
—
Delta
No baseline selected
No major trust-signal divergence detected in the current selection.
Source and provenance checks
Needs review
Confirm ownership and provenance before trusting install instructions.
Source link availableRequired
Open the canonical repository and verify ownership.
Done
Source provenance statusRequired
Marked as source-backed.
Done
Metadata reviewed
No reviewed flag detected in metadata.
Pending
Safety and privacy checks
Complete
Validate risk disclosures before installation or API wiring.
Safety notes presentRequired
Review the listed safety guidance before running commands.
Done
Privacy notes presentRequired
Review data handling notes before connecting accounts or secrets.
Done
Trust level risk gateRequired
Trust level does not block evaluation.
Done
Package and install checks
Needs review
Check package metadata and artifact integrity signals.
Install payload available
Install or copy payload is available for review.
Done
Package verification flag
No package verification flag provided.
Pending
Checksum metadata
No checksum provided for downloaded artifact.
Pending
Compare-driven decision checks
Needs review
Use compare context to validate trade-offs before adoption.
Compare tray has multiple entries
Add at least one more entry to compare trust differences.
5 safety and 4 privacy notes across 6 risk areas. Review closely: permissions & scopes, network access, third-party handling.
6 areas
SafetyData retentionShrimp Task Manager persists task plans, project rules, research notes, task status, dependencies, and execution history in `DATA_DIR`.
SafetyExecution & processesTools such as `execute_task`, `complete_task`, `delete_task`, `clear_all_tasks`, and `update_task` can change workflow state and should be reviewed before treating status as authoritative.
SafetyGeneralAgent-assignment and planning features can make generated work look more complete than it is; require human review before accepting implementation progress.
SafetyNetwork accessThe optional GUI starts a web interface when enabled; keep it local or protect it with appropriate network controls.
SafetyPermissions & scopesAvoid launching development agents with broad permission-bypass flags solely because an example command suggests it.
PrivacyExecution & processesTask descriptions, project rules, research notes, dependency graphs, agent assignments, prompts, and execution history may include private implementation details.
PrivacyNetwork accessPersisted task data and backups can reveal roadmap items, security work, customer requests, or internal architecture decisions.
PrivacyThird-party handlingTool arguments and task records may be visible to the MCP client and model provider during planning and execution.
PrivacyNetwork accessReview `DATA_DIR` before committing, sharing, archiving, or uploading generated task state.
Safety notes
Shrimp Task Manager persists task plans, project rules, research notes, task status, dependencies, and execution history in `DATA_DIR`.
Tools such as `execute_task`, `complete_task`, `delete_task`, `clear_all_tasks`, and `update_task` can change workflow state and should be reviewed before treating status as authoritative.
Agent-assignment and planning features can make generated work look more complete than it is; require human review before accepting implementation progress.
The optional GUI starts a web interface when enabled; keep it local or protect it with appropriate network controls.
Avoid launching development agents with broad permission-bypass flags solely because an example command suggests it.
Privacy notes
Task descriptions, project rules, research notes, dependency graphs, agent assignments, prompts, and execution history may include private implementation details.
Persisted task data and backups can reveal roadmap items, security work, customer requests, or internal architecture decisions.
Tool arguments and task records may be visible to the MCP client and model provider during planning and execution.
Review `DATA_DIR` before committing, sharing, archiving, or uploading generated task state.
Prerequisites
Node.js 18 or newer and npm available to the MCP client runtime.
A cloned, installed, and built checkout of `mcp-shrimp-task-manager`, or an installed package that exposes the built server.
A writable `DATA_DIR` for persistent task data and backups.
Agreement on how generated plans, task status, agent assignments, and research notes should be reviewed.
Optional GUI dependencies and network controls if `ENABLE_GUI` is enabled.
Shrimp Task Manager is an MCP server for structuring AI-assisted development
work into persistent tasks. It exposes tools for planning work, analyzing
requirements, splitting complex tasks, listing and querying task state,
executing a selected task, verifying completion, reflecting on approach,
recording research, and initializing project rules.
The project is implemented as a Node.js MCP server. It stores task state in a
configured data directory and can optionally start a web GUI for task viewing.
These sources were reviewed on 2026-06-05. Prefer the live repository,
README, package metadata, tools documentation, agent documentation, server
source, license, NPM registry metadata, and generated docs site for current
installation commands, environment variables, supported tools, and GUI behavior.
Features
Plan development tasks from natural-language descriptions.
Analyze task requirements before implementation.
Split complex tasks into smaller subtasks with dependencies.
List, query, update, delete, and inspect task records.
Execute and verify tasks through a structured workflow.
Reflect on a task approach before continuing.
Store persistent task history in a configured data directory.
Initialize project rules and enter research mode.
Assign specialized agent profiles to tasks.
Optionally run a web task viewer or GUI for visual status review.
Installation
Install dependencies, build the server, and configure a writable data directory
following the upstream README:
npm install
npm run build
Then connect the built server to Claude or another MCP client:
Start with project rules and a small planning task before using continuous
execution patterns.
Use Cases
Break a large development request into dependency-aware implementation tasks.
Keep task state available across model-context resets or new sessions.
Ask Claude to research a technical decision before turning it into a plan.
Track which subtasks are pending, in progress, complete, or blocked.
Review a generated implementation approach before executing the next task.
Assign specialized task personas for frontend, backend, QA, documentation, or security work.
Safety and Privacy
Shrimp Task Manager is most useful when it persists project context, but that
means its data directory can become a durable project record. Treat generated
tasks, project rules, agent assignments, research notes, and backups as project
data that may need review before sharing or committing.
Do not let task status replace human verification. A model can mark tasks
complete, update task text, or clear task state through tools, but code,
documentation, tests, and product decisions still need normal review. If the
GUI is enabled, keep its server on trusted interfaces only.
Duplicate Check
Existing planning entries cover spec and approval workflows, but no
cjo4m06/mcp-shrimp-task-manager, Shrimp Task Manager, or matching source URL
was found in content/mcp.
Show that Shrimp Task Manager MCP Server is listed on HeyClaude. Paste this Markdown into your README — it renders the badge and links back to this page.
[](https://heyclau.de/entry/mcp/shrimp-task-manager-mcp-server)
How it compares
Shrimp Task Manager MCP Server side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.
MCP server for spec-driven development workflows, requirements, design docs, task breakdowns, approvals, implementation logs, and a real-time dashboard.
MCP server for Todoist task and project management, with tools for tasks, subtasks, projects, sections, labels, comments, reminders, filters, activity, backups, collaboration, bulk operations, and dry-run testing.
MCP server for Trello boards, cards, lists, comments, checklists, attachments, labels, board activity, workspace selection, and rate-limited Trello API automation from Claude.
✓Shrimp Task Manager persists task plans, project rules, research notes, task status, dependencies, and execution history in `DATA_DIR`.
Tools such as `execute_task`, `complete_task`, `delete_task`, `clear_all_tasks`, and `update_task` can change workflow state and should be reviewed before treating status as authoritative.
Agent-assignment and planning features can make generated work look more complete than it is; require human review before accepting implementation progress.
The optional GUI starts a web interface when enabled; keep it local or protect it with appropriate network controls.
Avoid launching development agents with broad permission-bypass flags solely because an example command suggests it.
✓Spec Workflow MCP writes requirements, design, task, steering, approval, archive, and implementation-log files under `.spec-workflow`.
The dashboard uses a local web server and WebSocket updates; keep it bound to localhost unless you add external authentication, TLS, and network restrictions.
The README documents rate limiting, audit logging, security headers, default localhost binding, and CORS restrictions, but also notes that built-in HTTPS/TLS and user authentication are not yet implemented.
Task and approval tools can make an agent appear to advance project state; require human review before accepting specs, completing tasks, or using generated implementation prompts.
Docker deployment should be reviewed for volume mounts, writable directories, and dashboard exposure before using it in shared environments.
✓Todoist MCP Server can create, update, delete, complete, reopen, reorder, archive, and bulk-modify tasks, subtasks, projects, sections, labels, comments, reminders, filters, shared labels, and collaboration state.
Bulk create, bulk update, bulk delete, bulk complete, project deletion, section deletion, label deletion, reminder changes, and duplicate merge operations can alter many Todoist records at once.
Dry-run mode simulates mutation operations but still queries real Todoist data for validation.
Pro and Business features such as reminders, filters, shared labels, collaboration, backups, and workspace operations may expose or modify team data.
Require confirmation before deleting tasks or projects, changing due dates in bulk, completing groups of tasks, modifying shared projects, creating reminders, downloading backups, or changing collaboration state.
✓Trello MCP Server can create, read, update, move, archive, and delete board data depending on token permissions and requested tools.
Card, checklist, label, due-date, start-date, comment, attachment, board, list, workspace, and active-board changes can affect real team workflows.
File attachments are added from URLs; review source URLs and destination cards before allowing an agent to attach files.
Use `TRELLO_ALLOWED_WORKSPACES` to limit workspace access, especially when a token can see personal, client, or production boards.
Require confirmation before creating boards, adding attachments, deleting or archiving cards, changing due dates, moving cards between lists, or posting comments on behalf of a user.
Privacy notes
✓Task descriptions, project rules, research notes, dependency graphs, agent assignments, prompts, and execution history may include private implementation details.
Persisted task data and backups can reveal roadmap items, security work, customer requests, or internal architecture decisions.
Tool arguments and task records may be visible to the MCP client and model provider during planning and execution.
Review `DATA_DIR` before committing, sharing, archiving, or uploading generated task state.
✓Requirements, designs, task lists, steering documents, approval comments, implementation logs, filenames, project paths, prompts, and task progress may be visible to the MCP client and model provider.
Persistent global state may be stored under `SPEC_WORKFLOW_HOME`, including active project registry, dashboard session data, settings, job history, and migration logs.
The `.spec-workflow` directory can contain unreleased product plans, architecture decisions, customer requirements, and implementation details.
Review generated specs, logs, approval files, and dashboard screenshots before committing, sharing, or uploading them.
✓Todoist API tokens, task IDs, project IDs, section IDs, label IDs, reminder IDs, comment IDs, user IDs, collaborator details, activity logs, completed tasks, backups, and productivity statistics can be exposed to the MCP client.
Task names, descriptions, comments, due dates, deadlines, labels, reminders, attachments, project notes, and completed-task history can contain private work or personal planning data.
Bulk and filter tools may reveal larger slices of a Todoist workspace than a single-task request.
Backup download tools can expose a broad historical snapshot of Todoist data.
Keep Todoist tokens in local MCP configuration only, and avoid sharing MCP logs, dry-run traces, or transcripts that include private task or project data.
✓Trello API keys, tokens, board IDs, workspace IDs, card IDs, member names, labels, comments, checklists, attachments, due dates, and activity logs can be exposed to the MCP client.
Active board and workspace selections may persist locally in Trello MCP configuration.
Card descriptions, comments, attachments, and activity histories can contain private customer, roadmap, incident, or operational data.
Proxy settings, Trello credentials, and workspace allowlists should be kept out of shared MCP configs, logs, screenshots, and transcripts.
Response previews reduce some large card-description exposure, but full-card and activity tools can still return sensitive Trello content.
Prerequisites
Node.js 18 or newer and npm available to the MCP client runtime.
A cloned, installed, and built checkout of `mcp-shrimp-task-manager`, or an installed package that exposes the built server.
A writable `DATA_DIR` for persistent task data and backups.
Agreement on how generated plans, task status, agent assignments, and research notes should be reviewed.
Node.js and npx available to the MCP client runtime.
A project workspace you are authorized to organize with generated specs and steering documents.
A writable `.spec-workflow` project directory and, for sandboxed runtimes, a writable `SPEC_WORKFLOW_HOME`.
Optional dashboard process started separately before using visual approvals or project tracking.
Todoist API token from Todoist integrations developer settings.
Node.js 18 or newer for the npm stdio server.
Review of whether the token has access to personal, shared, Pro, Business, or workspace features.
Optional `DRYRUN=true` for simulating mutation tools while still validating against real Todoist data.
Trello API key and token with access to the boards and workspaces Claude may use.
Bun-compatible published package runtime or an MCP client that can launch the packaged stdio server through npx.
Optional `TRELLO_BOARD_ID` or `TRELLO_WORKSPACE_ID` when a default board or workspace should be selected at startup.
Optional `TRELLO_ALLOWED_WORKSPACES` to constrain the token to specific approved Trello workspaces.
Install
npm install -g mcp-shrimp-task-manager
claude mcp add spec-workflow npx @pimzino/spec-workflow-mcp@latest -- PROJECT_PATH