asana-webhooks

name	asana-webhooks
description	Receive and verify Asana webhooks. Use when setting up Asana webhook handlers, implementing the X-Hook-Secret handshake, debugging X-Hook-Signature verification, or handling task, project, and story events like added, changed, removed, deleted, and undeleted.
license	MIT
metadata	{"author":"hookdeck","version":"0.1.0","repository":"https://github.com/hookdeck/webhook-skills"}

Asana Webhooks

When to Use This Skill

• How do I receive Asana webhooks?
• How do I implement the Asana X-Hook-Secret handshake?
• How do I verify Asana webhook signatures (X-Hook-Signature)?
• How do I handle task, project, or story events (added, changed, removed, deleted, undeleted)?
• Why is my Asana webhook signature verification failing?

How Asana Webhooks Work

Asana webhooks have two phases that both POST to your target URL:

1. Handshake (once, at creation). When you call POST /webhooks, Asana sends a request carrying an X-Hook-Secret header and no X-Hook-Signature. Your endpoint must echo that same back as a response header and return . — it is the key for verifying every future delivery. This secret is shown only during the handshake.