MCP server and OAuth applications
DailyFlux now runs its own OAuth 2.0 authorization server, so a third-party app can hold a token against your account instead of your password. On top of it sits an MCP endpoint: an AI client connects over MCP Streamable HTTP and gets the task, project, label and planning tools, filtered by the scopes you granted.
Every mutation an external client makes goes through the same sync engine as the app itself, so it lands in your local database and reaches your other devices the usual way. Connected applications are listed in Settings → Applications, and revoking access there takes effect immediately.
- tasks:read
- List and read tasks
- tasks:write
- Create, edit, complete
- projects:read
- Projects and sections
- labels:read
- Labels
- planning:write
- Schedule into the day
Tokens are bound to the MCP resource and expire on revoke.