Build my server

Directory / Collaboration

Asana MCP

Official hosted Asana server to search, read, create, and update tasks and projects, with OAuth sign-in.

Verdict: Asana MCP is graded B (solid, with minor gaps) in TrustedMCP's assessment from public signals, last updated 2 Nov 2026. It is at full marks on 2 of 4 checks (known bugs and connection) and loses points on login and upkeep, most of all on login. Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can.

Grade B Login: login required, broad accessUpkeep: updated recently, upkeep hard to verifyKnown bugs: 0 openConnection: safe for how it connects

2 of 4 checks at full marks · How we check

Source Docs
VendorAsana
CategoryCollaboration
Connects overhttp

Our grade: 4 checks

Login Login required, broad access
Upkeep Active · 2026-10
Known bugs 0 open
Connection http

Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.

Community rating

3.6 16 reviews
44% would trust it in production
  • 5 1
  • 4 8
  • 3 7
  • 2 0
  • 1 0

Trust in production

  • Trust it - 44%
  • With caveats - 38%
  • Wouldn't - 19%

69% would recommend this server

How reviewers scored it

  • Setup & docs 3.7
  • Auth experience 3.4
  • Reliability 3.6
  • Maintainer responsiveness 4.1

Why it got a B

Asana's official server, hosted over HTTPS with OAuth sign-in. It can create and update tasks and projects as you, and it reads task text and comments other people wrote, so keep tool approval on. On Enterprise+ plans, admins can allow or block MCP clients. The old beta server shut down in May 2026; a 2025 bug in it exposed some data across organizations before Asana fixed it. Biggest deduction: OAuth grants your full Asana permissions with no scopes, and the server is closed source, so maintenance is one band lower.

How to connect

// Cursor Settings > Tools & MCP > + Add new global MCP server
{ "mcpServers": { "asana": { "url": "https://mcp.asana.com/v2/mcp",
    "auth": { "CLIENT_ID": "${env:ASANA_CLIENT_ID}", "CLIENT_SECRET": "${env:ASANA_CLIENT_SECRET}" } } } }

Is Asana MCP safe?

Is Asana MCP safe to use?

Asana MCP grades B (solid, with minor gaps). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.

Does Asana MCP have known vulnerabilities?

Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.

Does Asana MCP support authentication?

Yes. It requires a login, so access can be tied to a person or a scoped key.

Alternatives in Collaboration

Compare all Collaboration MCP servers

Embed this badge

Maintain this server? Add the grade to your README.

TrustedMCP grade B

Markdown

[![TrustedMCP grade B](https://trustedmcp.io/badge/asana-mcp.svg)](https://trustedmcp.io/servers/asana-mcp)

HTML

<a href="https://trustedmcp.io/servers/asana-mcp"><img src="https://trustedmcp.io/badge/asana-mcp.svg" alt="TrustedMCP grade B" height="80"></a>

Community reviews

Olivia Brown Indie hacker
Trusts in production Recommends

Our team uses it every day

Tried it on a side project first, then rolled it out at work. Updates land regularly, and nothing broke when I upgraded. Scoped the token to just what the agent needs and it respected that. Easy recommendation.

Used for Summarising channels I missed

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Tobias Becker Senior developer
Trusts in production Recommends

Worth the five minutes to set up

Set this up for our team after comparing a few options. Being official from Asana counts for a lot when I pitch it to security. Scoped the token to just what the agent needs and it respected that. Updates land regularly, and nothing broke when I upgraded. Good choice if you need Asana in your agent.

Used for Summarising channels I missed

  • Setup & docs 4/5
  • Auth experience 4/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Chloe Martin AI engineer
Trusts with caveats Recommends

Surprisingly polished

Our agents call this dozens of times a day. Hosted endpoint means no local process to babysit. I like that access goes through a proper sign-in instead of a long-lived secret on disk. I would use it in prod, but only with a human approving writes.

Used for Drafting announcements

  • Setup & docs 3/5
  • Auth experience 3/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Rosa Morales Solo founder
Would not trust in production

Decent, not set-and-forget

Useful tool, though I would not hand it to a junior unsupervised. Auth is handled properly, and revoking access later was one click. I will check back in a few releases.

Used for Searching old conversations for decisions

  • Setup & docs 2/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Raj Malhotra Developer, healthtech
Would not trust in production

OK for read-only work

Some tools are great, a couple feel half finished. I like that access goes through a proper sign-in instead of a long-lived secret on disk.

Used for Keeping project boards up to date

  • Setup & docs 3/5
  • Auth experience 2/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Noah Fischer Freelance developer
Trusts in production Recommends

Trustworthy enough for real work

Replaced a homegrown script with Asana MCP and have not looked back. Nothing to install, I just point the client at the URL. Auth is handled properly, and revoking access later was one click.

Used for Turning chat threads into tasks

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Ryan O'Connor Security engineer
Trusts with caveats

Good, but read the permissions first

I like it, with reservations. Nice to use something maintained by Asana rather than a random fork. Hosted endpoint means no local process to babysit. You can tell it is actively maintained, the rough edges keep getting fixed. Worth it, just do not skip the hardening steps.

Used for Posting daily standup summaries

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Vikram Iyer ML engineer
Trusts with caveats Recommends

Capable but needs guardrails

Mostly reliable, with the odd timeout. Sign-in flow was painless and I never had to paste a key into a config file.

Used for Meeting prep from shared docs

  • Setup & docs 2/5
  • Auth experience 3/5
  • Reliability 3/5
  • Maintainer responsiveness 3/5
Hugo Lefevre Team lead
Would not trust in production

Solid core, fiddly setup

Good for experimenting, still deciding about production. Nothing to install, I just point the client at the URL. Auth is handled properly, and revoking access later was one click. The OAuth flow worked first time in Claude Code. Keeping it to local experiments for now.

Used for Turning chat threads into tasks

  • Setup & docs 3/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Aditi Rao Eng lead, fintech
Trusts in production Recommends

Exactly what I needed from Asana

Clear tool names, sensible outputs, very few surprises. Sign-in flow was painless and I never had to paste a key into a config file. Filed an issue and got a reply within two days.

Used for Keeping project boards up to date

  • Setup & docs 4/5
  • Auth experience 4/5
  • Reliability 4/5
  • Maintainer responsiveness 4/5
Arjun Patel Full-stack developer
Trusts with caveats Recommends

Works, just lock it down

Took longer to configure than I expected. Releases come often and the changelog is clear. Scoped the token to just what the agent needs and it respected that. Recommended, with sensible guardrails.

Used for Posting daily standup summaries

  • Setup & docs 3/5
  • Auth experience 4/5
  • Reliability 3/5
  • Maintainer responsiveness 4/5
Kenji Watanabe Software engineer, agency
Trusts in production Recommends

Set it up once, forgot about it

Hooked Asana MCP into Claude Code and it worked on the first try. Auth is handled properly, and revoking access later was one click. Nothing to install, I just point the client at the URL. Happy to run it in production.

Used for Searching old conversations for decisions

  • Setup & docs 4/5
  • Auth experience 3/5
  • Reliability 4/5
  • Maintainer responsiveness 5/5
Mateo Garcia Backend engineer
Trusts in production Recommends

Quietly reliable

Of the Asana integrations I tried, this one is the most predictable. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Hosted endpoint means no local process to babysit. It is in our production agent and I sleep fine.

Used for Drafting announcements

  • Setup & docs 5/5
  • Auth experience 3/5
  • Reliability 3/5
  • Maintainer responsiveness 5/5
Lukas Weber Platform engineer
Trusts with caveats Recommends

Recommended it to two teams already

Simple to set up in Cursor, simple to reason about. The OAuth flow worked first time in Claude Code. Sign-in flow was painless and I never had to paste a key into a config file. You can tell it is actively maintained, the rough edges keep getting fixed. Keep permissions tight and it is a good tool.

Used for Meeting prep from shared docs

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Sara Lindqvist Product manager
Trusts in production Recommends

Does what it says, no drama

Been running this for about a month now. Releases come often and the changelog is clear. Sign-in flow was painless and I never had to paste a key into a config file. Hosted endpoint means no local process to babysit.

Used for Posting daily standup summaries

  • Setup & docs 5/5
  • Auth experience 4/5
  • Reliability 5/5
  • Maintainer responsiveness 5/5
Lucas Silva Engineering manager
Trusts with caveats

Mixed feelings after two weeks

It does the job, but it took some tweaking. You can tell it is actively maintained, the rough edges keep getting fixed. The OAuth flow worked first time in Claude Code.

Used for Meeting prep from shared docs

  • Setup & docs 3/5
  • Auth experience 2/5
  • Reliability 3/5
  • Maintainer responsiveness 3/5

Write a review

Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.

How was it overall?

Would you trust it in production?
Would you recommend it to another team?

Score the details

Setup & docs
Auth experience
Reliability
Maintainer responsiveness

Tell other teams how it went

About you