Asana MCP OAuth fails: redirect_uri not registered for application

Summary

Authenticating the Asana MCP connector fails with an OAuth invalid_request error from Asana:

invalid_request: The redirect_uri parameter does not match a valid url for the application.

Details

When calling mcp__asana__authenticate, the returned authorization URL contains:

• MCP server: https://mcp.asana.com/v2/mcp
• OAuth client ID: 1214705605233431
• redirect_uri sent: http://localhost:8080/callback
• scope: default
• resource: https://mcp.asana.com/v2/mcp

Opening that URL in a browser and signing into Asana returns the invalid_request error above instead of redirecting back to localhost. This indicates http://localhost:8080/callback is not on the allowed redirect URI list for OAuth client 1214705605233431 on Asana's side.

Reproduction

1. In Claude Code, ensure the Asana MCP connector is configured.
2. Trigger any Asana MCP tool call (or call mcp__asana__authenticate directly).
3. Open the returned authorization URL in a browser.
4. Sign in to Asana.
5. Observe the Asana OAuth error page instead of the localhost callback.

Environment

• Claude Code on macOS (Darwin 25.4.0)
• Model: Claude Opus 4.7
• Asana MCP server: https://mcp.asana.com/v2/mcp

Likely fix

Either:

• The Asana OAuth app (client_id=1214705605233431) needs http://localhost:8080/callback (and any other ports the MCP flow may use) added to its allowed redirect URIs, or
• The MCP server should use a hosted callback URL that is already registered on the Asana OAuth app.