Let your AI assistant read and write your actual task list
TaskFlow speaks MCP, so Claude, Cursor and other assistants can work with your real flows instead of a copy you paste in. What they can do, what they deliberately cannot, and how to connect in one line.
Most "AI in your task app" features are a model that lives inside the app. TaskFlow has those too. This is the other direction: the assistant you already use, working on your real tasks, from wherever you already are.
TaskFlow runs a remote MCP server. MCP — the Model Context Protocol — is an open standard for connecting an assistant to a system it can actually act on, instead of you pasting your task list into a chat window and pasting the answer back out.
Connecting
In Claude Code, one line:
claude mcp add --transport http taskflow https://taskflow.denegra.ai/mcpIn claude.ai: Settings, then Connectors, then Add custom connector, and paste the same URL. Either way a TaskFlow consent screen opens in your browser, names the app asking for access, and waits for you to say yes.
We have connected and used it with Claude and with Cursor. It is a standard, not a private integration, so other MCP-capable assistants should work the same way — the connector lists in ChatGPT, VS Code’s agent mode, Windsurf, Zed, Cline and Goose all speak it. We can only vouch for what we have actually run.
What it can do
Ten tools, and they are the ordinary ones: list your flows, create a flow, list and search tasks, read one, create one, update one, mark one complete, read your inbox, and pull the daily briefing.
In practice that means you can say "put everything from this thread into my Work flow with due dates" and it happens in the app you actually open in the morning, not in a chat transcript you will never scroll back to.
What it deliberately cannot do
There is no delete tool. Not an oversight — it was built and removed on purpose.
The reasoning: handing a model an irreversible delete on a live personal account is not worth what it buys. Work that is finished moves to the done column, which is reversible and is already what "done" means here. Deleting stays a human action in the interface, where it takes a deliberate click.
Two other limits worth naming. The connection is scoped to you and only you — the server is built around a single verified account per request, so a tool has no route to anyone else’s data. And you can cut a connection off yourself, from Profile then Connected apps, without needing the assistant’s cooperation. An access token you cannot revoke without asking the thing you no longer trust is not a revocation.
Why this is the interesting half
An assistant that can only talk about your work is a better-phrased version of a blank page. An assistant that can put something in Thursday, notice that Thursday already has three things due, and tell you so, is doing the part that was actually hard.
That only works if it can see the real state. Which is the whole argument for connecting it to the real app rather than to a paragraph you pasted.