Model Context Protocol moderate risk

Asana

MCP server for Asana enabling AI tools to interact with Asana tasks, projects, and workspaces, with optional read-only mode for safety.

Connections & Capabilities

Connects To

GitHub

Capabilities

readwrite

Quickstart

Config

{
  "mcpServers": {
    "asana": {
      "command": "npx",
      "args": ["-y", "@roychri/mcp-server-asana"],
      "env": {
        "ASANA_ACCESS_TOKEN": "your-asana-access-token"
      }
    }
  }
}

Exposed MCP Tools (23)

safe

asana_list_workspaces

Lists all available workspaces in Asana.

Read-only operation.

safe

asana_search_projects

Searches for projects in Asana using name pattern matching.

Read-only operation.

safe

asana_search_tasks

Searches tasks in a workspace with advanced filtering options.

Read-only operation.

safe

asana_get_task

Gets detailed information about a specific task.

Read-only operation.

moderate

asana_create_task

Creates a new task in a project.

Creates new data in Asana.

safe

asana_get_task_stories

Gets comments and stories for a specific task.

Read-only operation.

high

asana_update_task

Updates an existing task's details.

Modifies existing data in Asana.

safe

asana_get_project

Gets detailed information about a specific project.

Read-only operation.

safe

asana_get_project_task_counts

Gets the number of tasks in a project.

Read-only operation.

safe

asana_get_project_sections

Gets sections in a project.

Read-only operation.

moderate

asana_create_task_story

Creates a comment or story on a task.

Creates new data in Asana.

moderate

asana_add_task_dependencies

Sets dependencies for a task.

Modifies task relationships.

moderate

asana_add_task_dependents

Sets dependents for a task (tasks that depend on this task).

Modifies task relationships.

moderate

asana_create_subtask

Creates a new subtask for an existing task.

Creates new data in Asana.

safe

asana_get_multiple_tasks_by_gid

Gets detailed information about multiple tasks by their GIDs.

Read-only operation.

safe

asana_get_project_status

Get a project status update.

Read-only operation.

safe

asana_get_project_statuses

Get all status updates for a project.

Read-only operation.

moderate

asana_create_project_status

Create a new status update for a project.

Creates new data in Asana.

critical

asana_delete_project_status

Delete a project status update.

Deletes data in Asana.

moderate

asana_set_parent_for_task

Set the parent of a task and position the subtask within the other subtasks of that parent

Modifies task relationships.

safe

asana_get_tag

Get detailed information about a specific tag

Read-only operation.

safe

asana_get_tags_for_task

Get a task's tags

Read-only operation.

safe

asana_get_tasks_for_tag

Get tasks for a specific tag

Read-only operation.

Safety Assessment

This server is relatively safe when used in read-only mode. However, enabling write operations introduces the risk of unintended data modification in Asana. Securely store and manage the Asana access token to prevent unauthorized access.

Optional read-only mode disables write operations.
No direct execution of code or shell commands.
Access is limited to the Asana API.
Clear separation of read and write tools.

Requires an Asana access token, which if compromised, could allow unauthorized access.
Write operations can modify Asana data.
No built-in rate limiting, potentially leading to API overuse.
Lack of input validation could lead to unexpected behavior.