> ## Documentation Index
> Fetch the complete documentation index at: https://docs.amplify.security/llms.txt
> Use this file to discover all available pages before exploring further.

# Asana

> Agents create, read, and comment on Asana tasks in the workspaces the bot account belongs to.

## What it's for

Tracking findings as Asana tasks. A workflow step creates a task per confirmed finding in the project your
team triages from; a chat agent checks whether a finding is already tracked and adds what it learned as a
comment.

## Before you connect

1. Create the bot Asana account and invite it to the workspaces and projects agents should reach. See
   [the bot account](/integrations/connecting#the-bot-account). A guest or project-limited member is usually
   right.
2. Sign your browser into the bot account, then follow [the connect flow](/integrations/connecting#connecting).

The authorization screen asks for Asana's standard access, which grants what the bot account itself can do.

## What agents can do

| Tool | What it does |
| - | - |
| `Asana_ListWorkspaces` | Lists the workspaces the bot account can see. |
| `Asana_ListProjects` | Lists projects. |
| `Asana_GetProjectById` | Returns one project. |
| `Asana_GetTasksWithoutId` | Searches for tasks. |
| `Asana_GetTaskById` | Returns one task. |
| `Asana_CreateTask` | Creates a task in a project, workspace, or under a parent task. |
| `AsanaApi_AddTaskComment` | Comments on a task. |
| `AsanaApi_GetUserDetails` | Looks up a user. |

A task created without an assignee is assigned to the bot account — that's Asana's default for the
authenticated user, and agents are told about it. If you want tasks unassigned or assigned to someone
specific, say so in the agent's instructions.

## What agents can't do

* Update a task's fields, or mark it complete
* Delete tasks, projects, or comments
* Reach a workspace or project the bot account isn't a member of

## Example

Ask in chat, with Asana connected:

```
Search the "Security backlog" project for a task about finding #9. If there
isn't one, create it with the finding's title, assign it to nobody, and put the
explanation and a link back here in the description.
```

## Revoking fully

Disconnecting in Console deletes Amplify's stored authorization. To remove Asana's side of the grant too,
sign in as the bot account and remove the Amplify app under **Asana Settings → Apps**.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.