# Asana MCP Hybrid Integration

Asana公式MCP V2 + ローカルMCPガードサーバーのハイブリッド構成で、  
Cursor Agent から自然言語でAsanaのポートフォリオ/プロジェクト/タスク管理を安全に実行する基盤。

## Architecture

| MCP Server | Role | Transport |
|---|---|---|
| **asana-official** | 日常操作 (閲覧, 作成, 更新, 検索) | npx mcp-remote → Asana MCP V2 |
| **asana-guard** | ガード付き操作 (削除, 一括更新, 命名規則, 監査) | Python stdio |

## Prerequisites

- Windows 10+
- Python 3.12+
- Node.js v22+ (for `npx mcp-remote`)
- Asana account with Developer Console access

## Quick Start

```powershell
# 1. Activate virtual environment
.venv\Scripts\Activate.ps1

# 2. Store your Asana PAT
python scripts\setup_auth.py

# 3. Verify connection
python scripts\verify_connection.py

# 4. Restart Cursor to load MCP servers
```

## Guard MCP Tools

| Tool | Description |
|---|---|
| `guard_delete_task` | Preview task deletion + issue confirm token |
| `guard_delete_project` | Preview project deletion + issue confirm token |
| `guard_confirm_delete` | Execute deletion with valid confirm token |
| `guard_audit_log` | Search audit log entries |
| `guard_check_connection` | Verify Asana API connectivity |

## Security

- Secrets are stored in Windows Credential Manager via `keyring` (DPAPI encrypted)
- All guarded operations are logged to `logs/audit_YYYYMMDD.jsonl`
- Delete operations require two-step confirmation (preview → approve → execute)
- Sensitive values are automatically masked in audit logs