Agent skill

Clickup Deploy Integration

by jeremylongshore in jeremylongshore/tons-of-skills-marketplace

Deploy and roll back a server-side ClickUp API and webhook service with secret injection, workspace guards, health probes, and durable queues.

MITAuto-check passedBackend & APIs

Install Clickup Deploy Integration

skills CLI
$ npx skills add jeremylongshore/tons-of-skills-marketplace --skill clickup-deploy-integration -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install jeremylongshore/tons-of-skills-marketplace clickup-deploy-integration --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/jeremylongshore/tons-of-skills-marketplace.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/.curated/clickup-deploy-integration .claude/skills/clickup-deploy-integration && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
clickup-deploy-integration
GitHub stars
2.8k
Token cost
~1k tokens
SKILL.md length
375 words
Files
2 (incl. references)
Skills in repo
3,342
Repo updated
First seen
Licence
MIT

At a glance

Deploy and roll back a server-side ClickUp API and webhook service with secret injection, workspace guards, health probes, and durable queues.

  • Works in 6 steps: Inventory deploy target,… → Build and test offline contracts,… → Deploy dark with outbound writes… → …
  • Releasing a ClickUp integration
  • SKILL.md covers Overview, Prerequisites, Tool Discipline and Current Contract, plus 7 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Clickup Deploy Integration is an agent skill from jeremylongshore/tons-of-skills-marketplace. Deploy and roll back a server-side ClickUp API and webhook service with secret injection, workspace guards, health probes, and durable queues. Use when releasing a ClickUp integration. Trigger with "deploy ClickUp", "ClickUp production release", or "ClickUp webhook service".

Its SKILL.md is about 1k tokens, which your agent loads only when the skill is triggered. The skill folder holds 2 other files, including reference files (for example `references/official-docs.md`). Compatibility notes: Designed for Claude Code; deployment requires platform access and environment-specific ClickUp credentials

It sits in Backend & APIs, covering Webhooks, Backend development and Deployment. The repository describes itself as: Model-agnostic agent-skills platform with a harness-free canonical layer, verified adapters, and the ccpi package manager. Explore at tonsofskills.com. The licence is MIT.

When your agent uses it

  • Releasing a ClickUp integration
  • With deploy ClickUp
  • ClickUp production release
  • ClickUp webhook service

Example prompts

  • “deploy ClickUp”
  • “ClickUp production release”
  • “ClickUp webhook service”
  • “/clickup-deploy-integration”

Requirements

  • Compatibility (from SKILL.md): Designed for Claude Code; deployment requires platform access and environment-specific ClickUp credentials
  • Pre-approved tools (allowed-tools): Read, Glob, Grep, WebFetch, Write, Edit

Workflow steps

6 steps, taken from the first numbered list in SKILL.md.

  1. Inventory deploy target, endpoint/version matrix, callback URLs, secret references, and Workspace allow-lists.
  2. Build and test offline contracts, raw-body signature handling, queue idempotency, and redaction.
  3. Deploy dark with outbound writes disabled and webhook registration unchanged.
  4. Run bounded identity, Workspace, health, and synthetic signed-event probes.
  5. Canary trusted traffic, watch rate/error/webhook-health metrics, and verify durable side effects.
  6. Promote or roll back; then reconcile secrets, callbacks, queues, and deployment evidence.

What it can do on your machine

Read from SKILL.md and the folder at commit cfae287. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves these tools, so the agent can use them without asking each time:

    • Read
    • Glob
    • Grep
    • WebFetch
    • Write
    • Edit

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    Links to these hosts (documentation or services it may open):

    • developer.clickup.com

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

  • Compatibility

    Designed for Claude Code; deployment requires platform access and environment-specific ClickUp credentials

    From compatibility in the SKILL.md frontmatter.

Context cost

Clickup Deploy Integration loads about 1k tokens when it runs, and up to ~1.6k if it reads all its reference files. Until then it costs about 76 tokens; SKILL.md has 375 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~76
When it runs · the whole SKILL.md, loaded when a task matches
~1k
With references · SKILL.md plus every file in references/, read only if the agent opens them
~1.6k

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from jeremylongshore/tons-of-skills-marketplace at commit cfae287, republished under its MIT licence (© jeremylongshore). 375 words, ~1,012 tokens.

Download SKILL.mdSave it as .claude/skills/clickup-deploy-integration/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
clickup-deploy-integration
description
Deploy and roll back a server-side ClickUp API and webhook service with secret injection, workspace guards, health probes, and durable queues. Use when releasing a ClickUp integration. Trigger with "deploy ClickUp", "ClickUp production release", or "ClickUp webhook service".
allowed-tools
Read, Glob, Grep, WebFetch, Write, Edit
compatibility
Designed for Claude Code; deployment requires platform access and environment-specific ClickUp credentials
argument-hint
[service-path] [environment]
version
1.8.0
author
Jeremy Longshore <jeremy@intentsolutions.io>
license
MIT
tags
saas, clickup, deployment
model
inherit
effort
high

Deploy a ClickUp Integration

Overview

Release the integration as a reversible server-side boundary that keeps credentials out of clients and acknowledges webhooks quickly.

Prerequisites

  • A tested server-side adapter, environment inventory, and rollback artifact
  • Environment-scoped secret references and authorized Workspace allow-lists
  • HTTPS webhook ingress, raw-body signature verification, durable queueing, and observability

Tool Discipline

Use Read, Glob, and Grep to inspect the repository, adapters, configuration names, tests, and evidence. Use WebFetch only for current official ClickUp documentation. Use Write or Edit after confirming the target file, Workspace boundary, and requested mode.

Current Contract

  • ClickUp tokens belong on the server; browser CORS errors are not solved by exposing a token.
  • Webhook verification uses the raw request body, the webhook secret, HMAC-SHA256, and X-Signature.
  • Webhook handlers should acknowledge within ClickUp's seven-second health boundary and process asynchronously.
  • v2 and v3 base paths remain explicit per operation.

Authentication

Use a personal token only for accountable individual/testing work or OAuth Authorization Code for a user-facing integration. Inject the token server-side through a governed secret reference, send it in Authorization, verify authorized Workspace IDs, and never print the token, OAuth client secret, or webhook secret.

Instructions

  1. Inventory deploy target, endpoint/version matrix, callback URLs, secret references, and Workspace allow-lists.
  2. Build and test offline contracts, raw-body signature handling, queue idempotency, and redaction.
  3. Deploy dark with outbound writes disabled and webhook registration unchanged.
  4. Run bounded identity, Workspace, health, and synthetic signed-event probes.
  5. Canary trusted traffic, watch rate/error/webhook-health metrics, and verify durable side effects.
  6. Promote or roll back; then reconcile secrets, callbacks, queues, and deployment evidence.
Show full SKILL.md (115 more words)Show less

Approval Boundaries

Require explicit approval before production traffic, webhook registration changes, task mutations, ACL changes, or irreversible infrastructure teardown.

Output

Return artifact digest, environment, version matrix, secret references, probe/canary result, webhook health, promotion decision, and rollback target.

Error Handling

ConditionResponse
Signature verification failsReject the request and inspect raw-body handling; do not weaken verification.
Health probe exposes contentStop and replace it with metadata-only evidence.
Canary crosses Workspace boundaryDisable writes and roll back immediately.
Rollback cannot restore callback routingKeep traffic dark and escalate.

Examples

The example below is a redacted operator receipt; it contains no task text, member data, credential, or webhook secret.

text
env=production; artifact=sha256:...; writes=disabled; signed-probe=pass; canary=pass; rollback=ready

Resources

© jeremylongshore, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file (references) in skills/.curated/clickup-deploy-integration of jeremylongshore/tons-of-skills-marketplace.

  • SKILL.md
  • references/official-docs.md

Open the folder on GitHubat commit cfae287

Compare with similar skills

Clickup Deploy Integration next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Clickup Deploy Integration compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Clickup Deploy Integration this skilljeremylongshore/tons-of-skills-marketplace2.8k—~1kAutomated safety check: PassMIT
Golivemikehasa/golive-skill1.3k—~13kAutomated safety check: NotesMIT
Cashier Stripe Developmentluadotsh/lua3431 repos~1.2kAutomated safety check: PassMIT
Loops APIopeninary/openinary412—~1.1kAutomated safety check: PassAGPL-3.0
Ar Io Gateway Operatorar-io/ar-io-node127—~8.8kAutomated safety check: NotesAGPL-3.0
Rails Security Multitenancymarckohlbrugge/37signals-skills724—~1.7kAutomated safety check: PassNone

Similar skills

  • Golive

    mikehasa/golive-skill

    Take an agent-written app from repo to live production on the user's OWN accounts, with providers they choose (hosting, database, auth, payments, email, domain/DNS).

    1.3k GitHub stars~13k tokensUpdated 6 days ago
    Backend & APIsAuto-check: notes
  • Handles Laravel Cashier Stripe integration including subscriptions, webhooks, Stripe Checkout, invoices, charges, refunds, trials, coupons, metered billing, and payment failure handling.

    343 GitHub starsUsed in 1 repo~1.2k tokens
    Backend & APIsAuto-check passed
  • Loops API

    openinary/openinary

    A skill your agent uses whenever the user wants to integrate Loops from application code, backend services, webhook handlers, or server-side automation.

    412 GitHub stars~1.1k tokensUpdated 5 days ago
    Backend & APIsAuto-check passed
  • Ar Io Gateway Operator

    ar-io/ar-io-node

    Operate any AR.IO node deployment — architecture, daily ops, diagnostics, and recurring pitfalls that apply to every operator.

    127 GitHub stars~8.8k tokensUpdated today
    Backend & APIsAuto-check: notes
  • Rails Security Multitenancy

    marckohlbrugge/37signals-skills

    Apply Rails security and multi-tenant safety practices including scoped queries, SSRF defenses, rate limiting, and tenant-scoped realtime updates.

    724 GitHub stars~1.7k tokensUpdated 4 mo ago
    Backend & APIsAuto-check passed
  • Channel Debug Core

    vercel-labs/vercel-openclaw-archived

    Official

    Channel webhook triage for vercel-openclaw Slack/Telegram/Discord/WhatsApp issues: prove deployment state, collect admin readiness endpoints, build evidence-first handoff before fixes.

    117 GitHub stars~2k tokensUpdated 4 mo ago
    Backend & APIsAuto-check: notes

More from jeremylongshore/tons-of-skills-marketplace

All 3,342 skills in this repo
  • Performing Security Code Review

    jeremylongshore/tons-of-skills-marketplace

    Execute this skill enables AI assistant to conduct a security-focused code review using the security-agent plugin.

    2.8k GitHub starsUsed in 2 repos~1.3k tokens
    Auto-check: notes
  • Adapting Transfer Learning Models

    jeremylongshore/tons-of-skills-marketplace

    Build this skill automates the adaptation of pre-trained machine learning models using transfer learning techniques.

    2.8k GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Agent Context Loader

    jeremylongshore/tons-of-skills-marketplace

    Execute proactive auto-loading: automatically detects and loads agents.md files.

    2.8k GitHub stars~1.1k tokensUpdated today
    Auto-check passed
  • Aggregating Performance Metrics

    jeremylongshore/tons-of-skills-marketplace

    Aggregate and centralize performance metrics from applications, systems, databases, caches, and services.

    2.8k GitHub stars~1.2k tokensUpdated today
    Auto-check passed
  • Analyzing Capacity Planning

    jeremylongshore/tons-of-skills-marketplace

    Execute this skill enables AI assistant to analyze capacity requirements and plan for future growth.

    2.8k GitHub stars~947 tokensUpdated today
    Auto-check passed
  • Analyzing Database Indexes

    jeremylongshore/tons-of-skills-marketplace

    Process use when you need to work with database indexing. An agent skill from jeremylongshore/tons-of-skills-marketplace.

    2.8k GitHub stars~2k tokensUpdated today
    Auto-check passed

Categories

Questions about Clickup Deploy Integration

What does Clickup Deploy Integration do?

Deploy and roll back a server-side ClickUp API and webhook service with secret injection, workspace guards, health probes, and durable queues. Clickup Deploy Integration is an agent skill from jeremylongshore/tons-of-skills-marketplace. Deploy and roll back a server-side ClickUp API and webhook service with secret injection, workspace guards, health probes, and durable queues.

When should I use Clickup Deploy Integration?

Clickup Deploy Integration fits situations like: releasing a ClickUp integration; with deploy ClickUp; clickUp production release; clickUp webhook service.

How do I install Clickup Deploy Integration in Claude Code?

Run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill clickup-deploy-integration -a claude-code`. Or copy the skill folder (skills/.curated/clickup-deploy-integration in jeremylongshore/tons-of-skills-marketplace) into .claude/skills/clickup-deploy-integration in your project. Claude Code loads it when a task matches its description.

How do I install Clickup Deploy Integration in Codex?

Run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill clickup-deploy-integration -a codex`. Or copy the skill folder (skills/.curated/clickup-deploy-integration in jeremylongshore/tons-of-skills-marketplace) into .agents/skills/clickup-deploy-integration in your project. Codex loads it when a task matches its description.

Can I use Clickup Deploy Integration in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add jeremylongshore/tons-of-skills-marketplace --skill clickup-deploy-integration -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/clickup-deploy-integration, .gemini/skills/clickup-deploy-integration, .github/skills/clickup-deploy-integration and .opencode/skills/clickup-deploy-integration in your project.

What does Clickup Deploy Integration need to run?

SKILL.md names no scripts, command-line tools or credentials: Clickup Deploy Integration is instructions for the agent only. Its frontmatter pre-approves these tools: Read, Glob, Grep, WebFetch, Write, Edit. Compatibility (from SKILL.md): Designed for Claude Code; deployment requires platform access and environment-specific ClickUp credentials.

Does Clickup Deploy Integration access the network?

SKILL.md names 1 domain. As links in the text: developer.clickup.com. This is read from the text; nothing was executed.

Is Clickup Deploy Integration safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Clickup Deploy Integration use?

Clickup Deploy Integration is published under the MIT licence (declared in SKILL.md). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Clickup Deploy Integration use?

About 1k tokens (SKILL.md is roughly 4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full. Its references folder adds about 584 tokens, read only when the agent opens those files.

What are the alternatives to Clickup Deploy Integration?

Skills that share tags, products or a category with Clickup Deploy Integration: Golive (mikehasa/golive-skill, 1.3k stars), Cashier Stripe Development (luadotsh/lua, 343 stars), Loops API (openinary/openinary, 412 stars) and Ar Io Gateway Operator (ar-io/ar-io-node, 127 stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Clickup Deploy Integration?

jeremylongshore (a GitHub user) maintains it in jeremylongshore/tons-of-skills-marketplace, which has 2,827 GitHub stars. The repository holds 3,342 skills in this directory. The repository was last updated on October 10, 2026.

Source: jeremylongshore/tons-of-skills-marketplace on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.