asana-full-mcp

A local MCP server exposing the full Asana REST API — usable directly from Claude Code as a stdio server, or packaged as an MCPB bundle for one-click install into Claude Desktop.

Why

Hosted Asana connectors expose a curated subset of the API, and some operations just aren't reachable through them (attaching custom fields to projects, setting library field values, portfolio/goal plumbing, batch endpoints, …). Working around that meant one-off scripts with a PAT every time the curated tools fell short.

This server takes the opposite approach: one generic pass-through tool covering the entire Asana API surface, plus a few curated convenience tools for the common operations — with the safety guardrails enforced in code, not in prompts, so an over-eager model can't talk its way past them.

Related MCP server: Asana MCP Server

Tools

Guardrails

These are enforced in server code, so a confused or over-eager model cannot talk its way past them:

• DELETE is blocked by default. Any DELETE via asana_request is refused unless the bundle was installed with Allow DELETE requests turned on. The curated tools cannot delete at all.

• Optional workspace allowlist. If configured, every non-GET request is checked against a list of allowed workspace GIDs. The server resolves the affected workspace from the request body or target resource; if it cannot be determined, the request is refused (fail closed). Reads are never restricted.

Use with Claude Code (stdio)

Build the self-contained server bundle, then register it:

git clone https://github.com/AlexDay3000/asana-full-mcp && cd asana-full-mcp
npm install
npm run build   # bundles src/ into server/index.js (no runtime deps needed)

claude mcp add asana-full \
  --env ASANA_PAT=your-asana-pat \
  --env ASANA_WORKSPACE_ALLOWLIST= \
  --env ASANA_ALLOW_DELETE=false \
  -- node "$PWD/server/index.js"

Configuration is via environment variables:

Use with Claude Desktop (MCPB)

Build the .mcpb bundle (see below) and open it with Claude Desktop. You'll be prompted for:

The token is stored by the host's user-config mechanism — it is never baked into the bundle.

Build from source

npm install
npm run pack   # esbuild-bundles src/ into server/index.js, then packs the .mcpb

Requires Node 18+ (uses global fetch).

License

MIT

This project is not affiliated with or endorsed by Asana, Inc. "Asana" is a trademark of Asana, Inc. Your use of the Asana API through this server is subject to Asana's API terms.