sourcey
Submit

agents:SKILL.mdmcp.jsonopenapi.yml

← Asana

Can an agent create a task with Asana?

The agent needs you to sign it up or register a client and provide a key or token. You also handle changes to its access. Interface found; job not yet run.

observedProbed revision sha256:e878f888719d…

Who does each step

how grades work →

Whether the agent handles it alone or a person has to step in.

  1. 01

    Discover

    Machine

    The vendor's machine-readable docs show the agent where and how to call this job.

  2. 02

    Access

    Workaround · setup

    You give the agent a key or token.

  3. 03

    Onboard

    Workaround · setup

    You sign up or register a client for the agent.

  4. 04

    Pay

    Not applicable

    Nothing to pay for the job.

  5. 05

    Confirm

    Machine

    The response or specification defines errors the agent can distinguish from success.

  6. 06

    Sustain

    Workaround · setup

    You replace or revoke the agent's access when it needs to change.

  • Access: handing over a key or token.
  • Onboard: signing up or registering a client for the agent.
  • Sustain: renewing, replacing or revoking its access.

To remove these handoffs: support OAuth client registration so the agent can register its own client and ask for consent; provide an agent registration route, such as auth.md, a sign-up API or OAuth client registration; provide key management or OAuth refresh and revocation so the agent can maintain its own access.

Agent surfaces

2 kinds · 7 entries
For agents
app.asana.com3 more
mcp.asana.comasana.com/llms.txtdevelopers.asana.com/llms.txt
Names the job's endpoint
OAuth
app.asana.com2 more
mcp.asana.commcp.asana.com/v2/mcp
protected resource · authorization server

The probe

13 Oct 2026 · 09:34 UTC · 70.61 s

Each request it sent and what came back; the descriptors it read, counted, with what they named.

Discover46 descriptor reads10 facts
Found
For agentsasana.com/llms.txtOAuthmcp.asana.com/v2/mcpOAuthapp.asana.comOAuthapp.asana.comOAuthmcp.asana.comOAuthmcp.asana.comOAuthmcp.asana.comFor agentsdevelopers.asana.com/llms.txtOAuthapp.asana.comOAuthmcp.asana.com
From
asana.com/llms.txt · mcp.asana.com/.well-known/oauth-protected-resource/v2/mcp · app.asana.com/.well-known/oauth-authorization-server · mcp.asana.com/.well-known/oauth-authorization-server · mcp.asana.com/.well-known/oauth-protected-resource · developers.asana.com/llms.txt · developers.asana.com/docs/overview · developers.asana.com/docs/using-asanas-mcp-server
This endpoint
app.asana.com/api/1.0 is named by a document written for agents
Job requestPOST app.asana.com/api/1.0/tasks40166 ms
Request
POST https://app.asana.com/api/1.0/tasks
Response
401 · application/json · 181 bytes
Body
sha256:94313bcc68e0c00870ece6d037a4888701c57c6ce5c2c6c336f84789c4f2f8b8
Exchange
sha256:d28a2291040e81534943088b89b85a34e8fd6af1ccf17762523956e29eef14ca
Resource metadataGET app.asana.com/.well-known/oauth-protected-resource/api/1.0/tasks40067 ms
Request
GET https://app.asana.com/.well-known/oauth-protected-resource/api/1.0/tasks
Response
400 · text/html · 468 bytes
Body
sha256:a85cf2f720aa7429f5075ee8a9197195973450188ec0662355d36463ed177ebd
Exchange
sha256:2499c7e024cd42ebac497f9bf78b76afdf90c378b59e64be4a09a9b8a3078c98
Resource metadataGET app.asana.com/.well-known/oauth-protected-resource40070 ms
Request
GET https://app.asana.com/.well-known/oauth-protected-resource
Response
400 · text/html · 468 bytes
Body
sha256:a85cf2f720aa7429f5075ee8a9197195973450188ec0662355d36463ed177ebd
Exchange
sha256:a86f46b17bacc478c4239db7dcabf6809d5ee98f1cc4f0a7abb175476a03eca3
Job requestsession openedPOST mcp.asana.com/v2/mcp40162 ms
Request
POST https://mcp.asana.com/v2/mcp
Response
401 · application/json · 100 bytes
Body
sha256:46d2491e41d0554e199112527ef4cdc68c5a93dba4ebcfc471864c4ae6ec9d8f
Exchange
sha256:341adbed39f2e9c8ba78abaa4ce7031c6ea9c73347f3107129ff6ddc8847acd1
Resource metadataGET mcp.asana.com/.well-known/oauth-protected-resource/v220067 ms
Request
GET https://mcp.asana.com/.well-known/oauth-protected-resource/v2
Response
200 · application/json · 324 bytes
Body
sha256:8f4bd465a09701c0e04d7e82736486153d7ed59e3aaff2e1de29aa44f90ce2d9
Exchange
sha256:0c8c34c972ad7a913747d357055fedf3ee0a603ea399189c967c2fdd1ec0caec
Authorization serverGET app.asana.com/.well-known/oauth-authorization-server20077 ms
Request
GET https://app.asana.com/.well-known/oauth-authorization-server
Response
200 · application/json · 579 bytes
Body
sha256:f60d41a5138f3e07b86b06f4f5ac4a2d8c325657ebc0384274648a70ee01f024
Exchange
sha256:8af78d74e6f0e7fd6303efa23e49e98a8ebaaa0ad096d3c65015767bcd94969c
Declared pageGET asana.com/create-account200104 ms
Request
GET https://asana.com/create-account
Response
200 · text/html · 383604 bytes
Body
sha256:108ca9836e98d34ae405de5c600f20ac54223498125895d2d561b76e62b0e672
Exchange
sha256:75e0398b66d3c884fcc01d5e63a2ee853e5f598dc2ef348454c71337d87c593c

Asana on the startup-offers board

catalog record →

The grade’s badge

One image that keeps itself current, linking here.

Live badge for Asana, agent grade: B+[![agent grade](https://sourcey.com/badges/agent-readiness/arp_01m4t9s32gzjpyxbrxt7a1ewnd.svg)](https://sourcey.com/c/asana/agent-readiness/asana-work-management/task-create)

Improve the report

Correct it, probe it again, or improve the path.

Report outdated evidenceRequest reassessmentClaim this record
Profile
arp_01m4t9s32gzjpyxbrxt7a1ewnd
Projection
sha256:736870cc40b7802e5ad0bcef07c0ffed1cb3962e0b73a9e68383662e0ba93d4d
Policy
kind-2026-10-12.2 · sha256:b612172aad277b54461de84e006815126f2df566563954b02f4432a39cad89ac

A report or a reassessment request names this profile, its revision and its projection. How report cards are assessed →View the exact declaration