Your tasks, now for Claude, ChatGPT & co. too
With the Pro plan of heidenreich do, you can now use your lists, tasks, notes and times outside the app as well. There are two ways to do this: an MCP server for AI assistants like Claude, ChatGPT or Cursor – and a REST API for your own scripts, automations and other programs.
The difference in one sentence: with MCP you talk to your tasks, with the API you program them. Both access the same data and follow the same rules.
AI assistants: get tasks done in conversation
MCP (Model Context Protocol) is an open standard that lets AI assistants access other programs. Once you connect do to your assistant, it can read your lists and work for you – you just say what you need.
What the assistant can do:
- Search lists and sublists, filter tasks by due date or status
- Create and rename tasks and lists, move tasks and give them a due date
- Complete tasks and reopen them
- Read a task’s notes and attach new notes
- Analyze time entries and log completed work
- Mark lists and tasks as billable
A few examples you can type just like this:
- “What’s due this week in my Clients list?”
- “From these meeting minutes, create a task for every open item in the Project North list, due next Friday.”
- “How many hours did I log for client Müller in September, and how much of that was billable?”
- “Log work on the task Revise quote for today from 9 to 11 a.m.”
- “Summarize the notes on the task Website relaunch and attach the result as a new note.”
How to connect do to your assistant
All you need is one address: https://do.heidenreich.app
You can also find it in the app under Account → Connected Apps, ready to copy.
- Enter the address. In Claude, go to Settings → Connectors, add a custom connector and paste the address. ChatGPT, Cursor and other MCP-enabled apps work the same way.
- Sign in. The assistant opens the heidenreich do sign-in page. You sign in with your usual account – the assistant never sees your password.
- Confirm access. A consent page shows which app is requesting access and where it will send you afterwards. Tap Allow and you’re connected.
Manage connections: Under Account → Connected Apps you can see every app that has access, and since when. Revoke access disconnects it; the app then has to connect again.
Security tip: On the consent page, check the destination address shown. Any app can give itself any name – the address is what you can rely on.
The REST API: build do into your own workflows
The API is for anyone who wants to connect do with other programs: transfer times to accounting automatically, create tasks from a ticketing system or form, build your own dashboard, or automate workflows with tools like n8n, Make or a small script.
| Area | What you can do |
|---|---|
| Lists | read (all, or the sublists of a list), create, rename, mark as favorite or billable |
| Tasks | read and filter (list, completed, due before/after, changed since), create, edit, move, complete, reopen |
| Notes | read as Markdown, attach new notes |
| Times | read your own time entries (period, task, billable), log completed work |
| Sync | what has changed since a given point in time and what was deleted |
The base address is https://heidenreich.app/do/api.
You’ll find the complete description of all endpoints, with examples you can try out right away, at heidenreich.app/do/api.
Create an API key and get started
- In the app, open Account → API Keys and tap New API Key.
- Give it a name you’ll recognize later, e.g. “Accounting”.
- Copy the key and store it safely, for example in your password manager. It starts with
hdo_live_and is shown only this one time.
Your first call, fetching all your lists:
curl https://heidenreich.app/do/api/v1/lists \
-H "Authorization: Bearer hdo_live_…"And this is how you create a task:
curl -X POST https://heidenreich.app/do/api/v1/tasks \
-H "Authorization: Bearer hdo_live_…" \
-H "Content-Type: application/json" \
-d '{"title": "Send invoice to Müller", "list_id": "…", "due_at": "2026-10-24T09:00:00+02:00"}'Up to ten keys can be active at the same time, so every program gets its own. The overview shows when each key was last used.
- Lost a key? Regenerate gives it a new value under the same name; the old one stops working immediately. No one can display the old key anymore, not even us.
- Key no longer needed? Revoke blocks it immediately.
Secure by design: what deliberately isn’t possible
The API and MCP server are built so that even a buggy script or an overeager AI assistant can’t do any damage.
- Nothing gets deleted. Lists, tasks and notes can’t be removed via the API or MCP.
- Existing notes stay untouched. New notes are attached and labeled with their sender; existing ones are never changed.
- Only your own data. Tasks that colleagues created in team lists don’t appear. Team lists are read-only.
- No emails, no attachments. Your mailbox and your files stay in the app.
- No starting timers from outside. Time can only be logged as a completed block, at most 24 hours and never in the future.
- Recurring tasks and running timers can’t be completed from outside; that remains a decision made in the app.
- Blocked instantly when your plan changes. The Pro plan is checked on every single request.
- A brake against runaways: at most 120 requests per minute per key.
Tasks can also come from emails sent by third parties. That’s why the MCP server instructs the assistant to treat their content as data and never as instructions.
Try it now
The API and MCP server are part of the heidenreich do Pro plan. Already on Pro? Then open Account → Connected Apps for your AI assistant or Account → API Keys for your own scripts – you’ll be connected in two minutes.
Not on Pro yet? You can choose the plan right in the app. And if you build something exciting with it, tell us about it.
