Shortcut - Atako

Let your agents search, create and update Shortcut stories, comment on them, add tasks and read epics, workflows, teams, members, labels and iterations.

Connection

Authentication: API key (API token).

Shortcut → Settings → API Tokens (https://app.shortcut.com/settings/account/api-tokens): enter a name, generate the token and copy it. A Shortcut API token has no scopes: it acts with the full rights of the member who created it, in their workspace.See Shortcut’s documentation.

Read actions (10)

Action	Description
`get_current_member`	Get the member behind the API token: id (UUID), name, mention_name, role and workspace (url_slug, estimate_scale).
`get_epic`	Get an epic by its numeric id (name, description, state, owners, dates, story stats).
`get_story`	Get a story by its numeric id, with its description, workflow_state_id, owner_ids, estimate, labels, comments and its tasks (checklist items: id, description, complete, owner_ids).
`list_epics`	List epics, paginated (page from 1, page_size 1-250, default 10); includes_description adds their descriptions.
`list_groups`	List teams (API “groups”: id UUID, name, mention_name, member_ids, workflow_ids). archived true returns only archived teams, false only active ones.
`list_iterations`	List iterations (id, name, status unstarted/started/done, start_date, end_date, group_ids).
`list_labels`	List labels (id, name, color, archived, stats); slim true returns them without stats.
`list_members`	List workspace members (id UUID, role, disabled, profile with name, mention_name and email). disabled true returns only disabled members, false only enabled ones.
`list_workflows`	List workflows (id, name, default_state_id, team_id) with their states (id, name, type = category unstarted, started or finished): the source of workflow_state_id values.
`search_stories`	Search stories with Shortcut search operators (AND between terms, plain words match title, description and comments). Operators: type:feature\|bug\|chore, state:“Ready for Dev”, is:unstarted\|started\|done, is:blocked, is:overdue, is:archived, owner:<mention_name>, requester:<mention_name>, team:“Team name”, epic:“Epic name”, label:“Label”, estimate:3, is:unestimated, id:123, title:”…”, description:”…”, comment:”…”, has:owner\|epic\|comment\|task\|label\|deadline, dates created:\|updated:\|completed:\|moved:\|due: with YYYY-MM-DD, YYYY-MM-DD..YYYY-MM-DD, *..YYYY-MM-DD or today/yesterday; prefix ! or - to negate (!is:done). page_size 1-250; detail “slim” omits descriptions and comments (default “full”). Paging: the response “next” is a URL path — pass only the value of its “next” query parameter as next.

Write actions (4)

Action	Description
`create_story`	Create a story. Arguments: name (string, required, max 512); description (Markdown string); story_type (“feature” \| “bug” \| “chore”); workflow_state_id (integer, from list_workflows); owner_ids (array of member UUID strings, from list_members); requested_by_id (member UUID string); estimate (bare integer, or null for unestimated); epic_id (integer, from list_epics); iteration_id (integer, from list_iterations); group_id (team UUID string, from list_groups); labels (array of objects { name: string }); deadline (ISO 8601 date-time string).
`create_story_comment`	Add a comment to a story, as the token owner. Arguments: story_id (integer, required); text (Markdown string, required, max 100000); parent_id (integer, optional: id of the comment to reply to, from get_story comments).
`create_task`	Add a task (checklist item) to a story. Arguments: story_id (integer, required); description (string, required, max 2048); complete (boolean, default false); owner_ids (array of member UUID strings). Existing tasks are listed by get_story.
`update_story`	Update a story; only the fields sent change. Arguments: story_id (integer, required); name (string, max 512); description (Markdown string); story_type (“feature” \| “bug” \| “chore”); workflow_state_id (integer, from list_workflows — moves the story to that state); owner_ids (array of member UUID strings: the full list of owners); requested_by_id (member UUID string); estimate (bare integer, or null to unestimate); epic_id, iteration_id (integer, or null to detach); group_id (team UUID string, or null); labels (array of objects { name: string }: the full list of labels); deadline (ISO 8601 date-time string, or null).

Permissions

Every action above must be explicitly granted to an agent before it can be used. See Permissions for the grant model and Security for how credentials are protected.

Last reviewed against the provider API: September 2026.