# Configure the Asana MCP Server

Connect Asana's official hosted MCP server to a Dtwo gateway via OAuth.

## Overview

Asana operates an official hosted MCP server (V2) at `mcp.asana.com`, covering task, project, portfolio, and status reads and writes, free-text search, and comments. Access is authorized through OAuth via an app you register yourself in the Asana Developer Console; every tool call is scoped to what the authorizing workspace member can see in Asana.

## 1. Configure Asana

1. Go to the <a href="https://app.asana.com/0/my-apps" target="_blank" rel="noopener noreferrer">Asana Developer Console</a> and choose **Create new app**.
2. Give the app a name and select **MCP** as the app type.
3. Copy the **Client ID** and **Client Secret** Asana generates for the app.
4. Under **OAuth**, add your gateway's OAuth redirect URI — found in the Overview tab for your gateway in the Dtwo UI.
5. Under **Manage distribution**, choose either **Specific workspaces** and add the workspace you want to use, or **Any workspace**.
6. Confirm your Asana plan tier. Enterprise+ and Legacy Enterprise workspaces can additionally allow or block individual MCP clients per workspace from Asana's app management console — if yours does, have an admin allow this app before continuing.

## 2. Add the MCP server to your gateway config

Go to your gateway in the Dtwo UI and open **Configuration → Advanced**. In the `mcp_servers` section add the following entry:

```yaml
  - name: asana
    description: "Asana's official hosted MCP server (V2) for tasks, projects, portfolios, and search."
    url: https://mcp.asana.com/v2/mcp
    transport_type: streamablehttp
    authentication:
      type: oauth
      grant_type: authorization_code
      scopes:
        - default
      client_id: "<CLIENT_ID>"
      client_secret: "<CLIENT_SECRET>"
      authorization_url: https://app.asana.com/-/oauth_authorize
      token_url: https://app.asana.com/-/oauth_token
      redirect_uri: "<CALLBACK_URL>"
```

Replace the placeholder values:

- `<CLIENT_ID>` and `<CLIENT_SECRET>` — come from the app you registered in step 1.
- `<CALLBACK_URL>` — the same redirect URI you set in step 1, found in the Overview tab for your gateway in the Dtwo UI.

## 3. Deploy and verify

Save the configuration and deploy the gateway.

Then, in your AI client, ask it to authorize Asana via the gateway. This opens the Asana login screen — sign in as the workspace member whose visibility the agent should inherit, and approve the consent prompt. Once authorized, confirm the server's tools appear and run a quick call to make sure the connection works.

If the tools don't appear after you authorize, refresh the tool list in your AI client — some clients don't pick it up automatically.

---

Having trouble? Email [support@dtwo.ai](mailto:support@dtwo.ai).