MCP Server for Asana
Asana's official hosted remote MCP server (mcp.asana.com/v2) for the Asana Work Graph: create/manage tasks and projects, query data, generate reports, and access portfolios. OAuth 2.0 + PKCE (pre-registered app) over Streamable HTTP, GA. Replaces the community roychri/mcp-server-asana listing. Note: scores other than authentication are a provisional assessment from Asana's documentation pending a live tool-level audit.
Score Breakdown
Server Info
- Package
- https://mcp.asana.com/v2/mcp
- Registry
- remote
- Maintainer
- AsanaVendor
- Category
- Project Management
- Tags
- tasksprojectscollaborationhostedoauth
- Last Scanned
- 7 Apr 2026
Findings
3 issuesAuthentication & Identity
LOWImplements MCP OAuth spec for per-user authentication
Official Asana-hosted remote MCP at https://mcp.asana.com/v2/mcp. OAuth 2.0 with PKCE via a pre-registered MCP app (dynamic client registration not supported), with a redirect-URI allowlist. Streamable HTTP transport (the legacy /sse beta endpoint is being retired).
Document the required OAuth scopes for each tool.
Tool Schema Quality
MEDIUMTool schemas not independently audited
The hosted server has no public source repository, so tool input schemas, required fields, and parameter constraints could not be verified directly. Provisional score pending a live tool-level audit.
Run a live audit against the hosted endpoint to enumerate and score tool schemas.
Data Exposure
MEDIUMPagination and field selection not verified
Whether list operations paginate and support field selection could not be verified without a live audit of the hosted tool surface.
Audit list operations for pagination and field-selection support.
Deploy MCP Server for Asana securely
CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.
Deploy on CompleteFlow