Monday.com
The Monday.com connector gives AI agents the ability to read boards, manage items, track column values, and add comments — all via the Monday.com GraphQL API using OAuth 2.0. Your credentials are stored encrypted in MCPGate's vault and are never exposed to the AI client.
Required scopes#
MCPGate requests the following OAuth scopes when you connect a Monday.com account.
| Scope | Purpose |
|---|---|
| boards:read | Read boards, items, and column values |
| boards:write | Create and update items, change column values |
| updates:read | Read updates (comments) on items |
| updates:write | Post updates to items |
Tool reference#
The Monday.com connector exposes 10 tools. Use the MCP Apps page to enable or disable individual tools per app, and the Guardrails page to add fine-grained rules on top.
| Tool | Category | Description |
|---|---|---|
| monday_list_boards | read | List all Monday.com boards accessible to the user |
| monday_get_board | read | Get details of a specific Monday.com board |
| monday_list_items | read | List items in a Monday.com board |
| monday_get_item | read | Get a specific item by ID from Monday.com |
| monday_list_updates | read | List updates (comments) on a Monday.com item |
| monday_create_item | write | Create a new item in a Monday.com board |
| monday_update_item | write | Update the name of an existing Monday.com item |
| monday_create_update | write | Add an update (comment) to a Monday.com item |
| monday_change_column_value | write | Change a column value for a Monday.com item |
| monday_delete_item | delete | Delete an item from a Monday.com board |
Delete is permanent
monday_delete_item permanently removes the item from the board. Monday.com does not move items to a trash folder — deletion cannot be undone. Always deny this tool in apps that do not explicitly require it.Common guardrail recipes#
Read-only access#
Enable only the five read tools and deny all write and delete tools. Useful for reporting agents that need to summarise board status without being able to modify anything.
Contribute preset#
Enable read tools plus monday_create_item, monday_update_item, monday_create_update, and monday_change_column_value. Deny monday_delete_item. This lets the AI manage work items without destructive access.
Restrict to specific boards#
Apply the allow_values template to all write tools and target the board_id field. Provide a list of board IDs the agent is permitted to modify. Requests targeting any other board are denied before the API call is made.
Troubleshooting#
- GraphQL errors on column updates —
monday_change_column_valuerequires thevalueparameter to be a JSON string matching the column type (e.g.{"label":"Done"}for a status column). Malformed values are rejected by the Monday.com API. - Board not found — Monday.com board IDs are numeric. Ensure you are passing the integer ID, not the board name or slug.
- Token expired — Monday.com OAuth tokens expire after 30 days of inactivity. Reconnect the connector to obtain a fresh token.