Asana

Use the installed asana CLI. Start with asana status. If it reports not_connected, run asana authorize-url and share only the returned connect_url with the user.

OAuth uses the fixed Muse Asana MCP app, PKCE, and Asana's MCP resource indicator through authd. CAGI supplies the client secret for token exchange, refresh, and revocation; the secret must never enter Muse or be requested in chat. Do not request ordinary Asana API scopes because MCP apps reject them.

Run asana list-tools to inspect the live provider catalogue and schemas, then call an advertised tool with:

asana call-tool --name <tool> --arguments-json '<json-object>'