> ## Documentation Index
> Fetch the complete documentation index at: https://docs.corsair.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Get Credentials

> Step-by-step instructions for obtaining Asana API credentials.

## Authentication Method

* **[`api_key`](/concepts/api-key)** - Personal access token

## Personal Access Token Setup

### Step 1: Create a Personal Access Token

1. Log in to [Asana](https://app.asana.com)
2. Click your profile photo → **My Settings**
3. Go to the **Apps** tab
4. Click **Manage Developer Apps**
5. Under **Personal access tokens**, click **+ New access token**
6. Give it a name and click **Create token**
7. Copy the token immediately — you won't be able to see it again
8. Store it securely

**Storing Credentials:**

```bash theme={null}
pnpm corsair setup --plugin=asana api_key=your-personal-access-token
```

## Webhook Setup (Optional)

Asana webhooks are managed through the API. Use Corsair to create a webhook subscription:

```ts theme={null}
await corsair.asana.api.webhooks.create({
    resource: "project-id",
    target: "https://yourapp.com/webhooks/asana",
    filters: [{ resource_type: "task", action: "added" }],
});
```

Store the webhook secret for signature verification:

```bash theme={null}
pnpm corsair setup --plugin=asana webhook_signature=your-webhook-secret
```

## Required Credentials Summary

| Credential            | Required For         | Where to Find                               |
| --------------------- | -------------------- | ------------------------------------------- |
| Personal Access Token | All API calls        | My Settings → Apps → Personal access tokens |
| Webhook Secret        | Webhook verification | Returned when creating webhook              |

For general information about how Corsair handles authentication, see [Authentication](/concepts/auth).
