{
  "schema": "varexis-public-evidence-record/0.3",
  "generated_at_utc": "2026-10-14T01:25:58.088Z",
  "record_id": "VXI-EXT-TOOL-TRUST-TODOIST-01-v1",
  "record_kind": "external_reference",
  "title": "Todoist MCP: Task access and planning changes",
  "system": "Todoist MCP",
  "evidence_family": "agent_tool_trust_review",
  "index_status": "PUBLIC_SAFE_SOURCE_REVIEW",
  "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY",
  "canonical_question": "Does connecting Todoist for a daily review also expose task-changing tools?",
  "near_questions": [
    "Can a daily-review assistant also change my tasks?",
    "Does Todoist MCP expose project creation?",
    "Which account is connected to the planning agent?",
    "Can a review request remain suggestions only?",
    "What evidence shows a Todoist grant is read-only?",
    "Will task descriptions be returned to an external assistant?",
    "Should an agent ask before changing project plans?",
    "How should I scope a task rescheduling request?",
    "Does a successful connection prove every project is accessible?",
    "What should I save about a planning connector grant?",
    "Can I retain the source version for a Todoist review?",
    "When should task-sharing changes trigger another review?"
  ],
  "supported_claims": [
    {
      "claim": "Yes. Todoist documents a hosted OAuth MCP service with task and project reads, creation and updates. A planning or review request should specify whether the agent may change the plan. The overview does not establish a buyer-specific read-only grant.",
      "reliance": "DOCUMENTED_CAPABILITY_ONLY"
    }
  ],
  "not_demonstrated_claims": [
    "Verified buyer configuration or effective access rights",
    "Independent execution, completeness or security testing",
    "Vendor certification, legal compliance or guaranteed suitability"
  ],
  "public_summary": "Yes. Todoist documents a hosted OAuth MCP service with task and project reads, creation and updates. A planning or review request should specify whether the agent may change the plan. The overview does not establish a buyer-specific read-only grant.",
  "related_record_ids": [
    "VXI-EXT-TOOL-TRUST-CLICKUP-01-v1",
    "VXI-EXT-TOOL-TRUST-GLEAN-01-v1",
    "VXI-EXT-TOOL-TRUST-RESEND-01-v1",
    "VXI-EXT-TOOL-TRUST-ALGOLIA-01-v1"
  ],
  "source_review": {
    "source_type": "official_external_documentation",
    "source_title": "Todoist hosted MCP OAuth and task operations",
    "source_url": "https://developer.todoist.com/api/v1/",
    "checked_on": "2026-10-14",
    "candidate_record_id": "VXI-EXT-TOOL-TRUST-TODOIST-01-v1",
    "candidate_record_sha256": "e40992f37969fd603cac390147a703e345f6986638f0decf759c47f92d178be1",
    "method": "Primary documentation reviewed for the published bounded statement.",
    "deployment_tested_by_varexis": false,
    "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research."
  },
  "answer_policy": {
    "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY",
    "bounded_answer": "Yes. Todoist documents a hosted OAuth MCP service with task and project reads, creation and updates. A planning or review request should specify whether the agent may change the plan. The overview does not establish a buyer-specific read-only grant.",
    "required_buyer_context": "Identify the Todoist account, projects, allowed actions and whether proposed changes should remain suggestions.",
    "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state."
  },
  "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.",
  "trust_profile": {
    "schema": "varexis-agent-tool-trust/1",
    "identity": {
      "tool": "Todoist MCP",
      "variant": "Hosted task and project server"
    },
    "review_status": "documentation_review_only",
    "checked_on": "2026-10-14",
    "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.",
    "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.",
    "findings": [
      {
        "field": "operator",
        "label": "Publisher and operator",
        "status": "documented",
        "statement": "Doist provides the Todoist MCP service.",
        "source_ids": [
          "todoist"
        ]
      },
      {
        "field": "purpose",
        "label": "Purpose",
        "status": "documented",
        "statement": "Let assistants review and manage tasks and projects.",
        "source_ids": [
          "todoist"
        ]
      },
      {
        "field": "reads",
        "label": "Read capability",
        "status": "documented",
        "statement": "Reads task and project information.",
        "source_ids": [
          "todoist"
        ]
      },
      {
        "field": "writes",
        "label": "Write capability",
        "status": "documented",
        "statement": "Creates and updates tasks and projects.",
        "source_ids": [
          "todoist"
        ]
      },
      {
        "field": "auth",
        "label": "Authentication",
        "status": "documented",
        "statement": "OAuth for the hosted connection.",
        "source_ids": [
          "todoist"
        ]
      },
      {
        "field": "permissions",
        "label": "Permission surface",
        "status": "unknown",
        "statement": "The reviewed overview does not establish the buyer-specific action grant.",
        "source_ids": [
          "todoist"
        ]
      },
      {
        "field": "egress",
        "label": "Data leaving the environment",
        "status": "review_inference",
        "statement": "Task descriptions and project context enter the connected assistant.",
        "source_ids": [
          "todoist"
        ]
      },
      {
        "field": "failures",
        "label": "Failure modes to consider",
        "status": "review_inference",
        "statement": "An ambiguous planning request may lead to unwanted task changes.",
        "source_ids": [
          "todoist"
        ]
      },
      {
        "field": "unknown",
        "label": "Unknowns and applicability",
        "status": "unknown",
        "statement": "Buyer sharing arrangements and precise granted scopes are unverified.",
        "source_ids": []
      },
      {
        "field": "gate",
        "label": "Suggested refusal or clarification condition",
        "status": "varexis_review_policy",
        "statement": "Clarify whether the request is advice or an authorised task update.",
        "source_ids": []
      }
    ],
    "evidence_sources": [
      {
        "source_id": "todoist",
        "url": "https://developer.todoist.com/api/v1/",
        "final_url": "https://developer.todoist.com/api/v1/",
        "title": "Todoist hosted MCP OAuth and task operations",
        "checked_on": "2026-10-14",
        "sha256": "d30342d2862a3b8f1c01a85d63430b99ee8af72e06c46593b6b467d0bfae236d",
        "bytes": 4239770
      }
    ],
    "observed_tool_execution": false,
    "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.",
    "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.",
    "paid_value": {
      "decision_context": "Save the capability boundary used when approving a personal or team planning assistant.",
      "free": "Complete review, practical questions, sources and limitations; may be saved locally.",
      "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.",
      "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.",
      "excluded": [
        "Fresh vendor research",
        "Continuous monitoring or change alerts",
        "Testing the buyer configuration",
        "Private evidence or vendor certification"
      ],
      "integrity": "Hashes identify content versions; they do not prove truth or provide a signature."
    },
    "revalidation": {
      "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.",
      "specific_watch": "Recheck tool scopes and project-sharing changes."
    },
    "change_history": [
      {
        "version": 1,
        "date": "2026-10-14",
        "change": "Initial documentation review; no earlier vendor assessment claimed."
      }
    ]
  },
  "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.",
  "service_route": {
    "request_guide": "/varexis-index/request.html",
    "request_workflow": "/varexis-index/request-workflow.json",
    "service_id": "single_request",
    "service_routes_url": "/varexis-index/service-routes.json",
    "payment_required": true,
    "availability_endpoint": "/api/index/capabilities",
    "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED",
    "checkout_url": "/index-access"
  },
  "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.",
  "human_page": "/varexis-index/catalog.html#todoist-mcp-task-change-trust",
  "machine_readable_record": "/varexis-index/records/todoist-mcp-task-change-trust.json"
}