Back to Browse

Taskboard Port MCP Server

Developer ToolsModerate5.5MCP RegistryLocal
Free

Server data from the Official MCP Registry

Asana workspaces, projects and tasks via the REST API, as MCP tools.

About

Asana workspaces, projects and tasks via the REST API, as MCP tools.

Security Report

5.5
Moderate5.5Moderate Risk

taskboard-port is a straightforward Asana REST client that matches its stated purpose: it reads the bearer token from ASANA_ACCESS_TOKEN, exposes 11 Asana tools, and validates inputs with zod. No exfiltration, obfuscation, shell execution, or hardcoded secrets were found. The main points to be aware of are that ASANA_API_URL can redirect the bearer token to any host and that delete_task is destructive, both of which are low-severity given the design. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

stdio

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

ASANA_ACCESS_TOKENRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-taskboard-port": {
      "env": {
        "ASANA_ACCESS_TOKEN": "your-asana-access-token-here"
      },
      "args": [
        "-y",
        "@reneturcios/taskboard-port"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

taskboard-port

Asana workspaces, projects and tasks as MCP tools, talking to the Asana REST API. taskboard-port is a clean-room rebuild of the core subset of the Asana MCP surface, under a new name: fresh code written from the public Asana API documentation, no copied branding. The original Asana server is hosted/remote with OAuth; this rebuild is a REST client for the same upstream API using a personal access token, and does not reproduce the hosted OAuth surface.

Tools (core subset, 11)

get_current_user, list_workspaces, list_projects, get_project, create_project, list_tasks, get_task, create_task, update_task, delete_task, search_tasks.

Not in this subset: sections, tags, stories/comments, subtasks, custom fields, portfolios/goals, rules, attachments, teams/users admin, typeahead, events/webhooks.

Notes on shaping: Asana wraps request bodies and responses in a data envelope — create/update calls send {data: {...}} and parsed responses are returned as-is. list_tasks picks its route deterministically (project tasks endpoint, else assignee query, else a capped list) and applies the completed filter client-side, since Asana's list endpoints take no such parameter.

Setup

export ASANA_ACCESS_TOKEN=...

Optionally override the API base with ASANA_API_URL (default https://app.asana.com/api/1.0). Without the token, every tool call fails with an error naming the missing variable.

CLI

npx @reneturcios/taskboard-port get_task '{"task_gid":"12345"}'
npx @reneturcios/taskboard-port mcp        # stdio MCP server

Each tool name is a subcommand taking one JSON object argument.

MCP client config

{
  "mcpServers": {
    "taskboard-port": {
      "command": "npx",
      "args": ["-y", "@reneturcios/taskboard-port", "mcp"],
      "env": { "ASANA_ACCESS_TOKEN": "..." }
    }
  }
}

Docker

docker run -i -e ASANA_ACCESS_TOKEN ghcr.io/cloudcorprecords/taskboard-port

Development

npm install
npm run build
npm test

License

MIT

Reviews

No reviews yet

Be the first to review this server!