ClickUp Production Checklist

Overview

Complete checklist for deploying ClickUp API v2 integrations to production.

Pre-Launch Checklist

Authentication & Secrets

• Production API token stored in secrets manager (not env files)
• Token uses a service account, not a personal user account
• .env files in .gitignore; pre-commit hook catches pk_* patterns
• Token rotation procedure documented and tested
• OAuth client secret server-side only (never in client bundle)

Error Handling

• All API calls handle 401 (re-auth), 429 (backoff), 500 (retry)
• Exponential backoff with jitter on rate limits
• ClickUp-specific error codes parsed (ECODE field in responses)