guider

Asana

Agent draftUpdated 29 Oct 2026developers.asana.com

Asana OAuth setup is straightforward, with workspace-restricted testing available before review. Plan for review before public launch because the publication instructions require it for access beyond your organization, despite conflicting sharing instructions.

No review needed

Test without review using Specific workspace distribution. Testers must belong to an allowed workspace; access tokens last one hour and support refresh.

Your timeAbout 30 minutesestimateReview waitNo review queue[3]
  1. 01

    Create and configure the app [1]

    You
    Open My apps
    Redirect URL to paste
    https://backend.composio.dev/api/v3/toolkits/auth/callback

    Register only the scopes your agent needs. Match those scopes in Composio; use Full permissions only for endpoints requiring it.

    Client IDPaste into your Composio auth config, never into a chat
    Client secretPaste into your Composio auth config, never into a chat
    Authorization returns forbidden_scopes. Register every requested scope under OAuth > Permission scopes. With Full permissions enabled, omit specific scopes or request default.
    Show me how
    1. Select Create new app and enter App name.
    2. Set Redirect URL to the Composio callback.
    3. Under OAuth > Permission scopes, select the required scopes.
    4. Save the client ID and client secret from OAuth.
  2. 02

    Allow your testing workspace [2]

    You
    Open My apps
    A tester cannot authorize. Ensure the tester belongs to an allowed workspace. Add another workspace only if you belong to it.
    Show me how
    1. Open your app’s Manage distribution tab.
    2. Select Specific workspace and save.
    3. Select + Add workspace.
    4. Choose a workspace you belong to and select Add.
  3. 03

    Connect through Composio [6]

    Agent
    Open Composio Dashboard

    Create an Asana OAuth2 auth config using your credentials and registered scopes. Set Redirect URI explicitly to the same Composio callback, then test authorization and a permitted API operation.

    Redirect URI mismatch. Set the same callback in Asana and Composio. Explicitly configure oauth_redirect_uri to avoid a legacy callback default.
    Show me how
    1. Select Create Auth Config, then Asana.
    2. Choose OAuth2 and enable Use your own developer credentials.
    3. Enter credentials, scopes, and Redirect URI; save.
    4. Select Connect Account and complete authorization with a workspace member.

Not sure yet

  • ?Whether Any workspace authorization without review remains permitted despite conflicting publication instructions.
  • ?Whether specific scopes or Full permissions trigger stricter review.
  • ?Whether development distribution has numerical user or workspace caps.
  • ?Whether domain verification or additional legal URLs are required beyond the listing checklist.
  • ?How long final approval takes after the initial review response.

Sources