Asana vs ONES

Asana 77

Graded on the hosted lines for the REST API and the V2 MCP server. Statuspage at status.asana.com with API, App, Mobile, Automations, Webhooks and Notifications components in five regions (20). Between 3 August and 1 November 2026 the history lists nine incidents. One was a full outage, on 21 October, when an infrastructure change made DynamoDB unreachable and every service in the US, EU, Japan and Australia was unavailable for about 30 minutes and mostly unavailable for a further 20, with a published postmortem. The others were partial, read as minor the way other listings' partial incidents are read. They were a webhook and event stream fault from 4 to 6 August that dropped most task change events, about two hours on 31 August for roughly 25 per cent of users, about 40 minutes on 2 September for a subset of customers, slow performance on 17 September, EU automations on 21 September, an EU API outage on 29 September, a partial API outage of 50 minutes on 30 September and background jobs degraded from 23 to 24 October. One major outage (10). Limits are published as 150 requests a minute on free domains and 1,500 on paid, 60 a minute for search, 50 concurrent reads and 15 concurrent writes (15). Every 429 carries Retry-After and the docs give backoff guidance, and ask callers to make retried POSTs idempotent themselves, but no idempotency keys were found for writes (12). The trust page states a 99.9 per cent uptime commitment for Enterprise customers (10). The REST API is GA and the V2 MCP server has been GA since 4 February 2026 (10).

ONES 25

Graded as a hosted service on ONES.com Cloud's Open API and MCP server. No status page is linked from ones.com, the trust centre or the docs, and status.ones.com did not resolve (0). With no readable history the incident line scores 5. No rate limit with numbers was found in the developer docs index or the terms, which only reserve the right to restrict excessive traffic (0). No 429, backoff or idempotency guidance found (0). The pricing page states 99.9% uptime on Business and 99.95% on Enterprise (10). The MCP server has been in the release notes since 6.42.0 on 26 August 2025 and carries no beta label (10). 0 + 5 + 0 + 0 + 10 + 10 = 25.

Asana 91

OpenAPI 3.0.0 in the public Asana/openapi repository, 271 operations on 1 November (251 on 8 October; the Tables, Records and Notifications endpoints were added in October), with a Postman collection (25). llms.txt and a Markdown copy of each docs page (10). All 271 operations carry descriptions, and the MCP tools reference says when to use each tool and when not to (18). 325 enum lists and typed schemas in the spec. MCP input schemas are served only by tools/list, which needs a token, so we didn't read them (13). 1,256 examples, and 400, 401, 403, 404 and 500 on 270 operations, but no 429 in the spec and error bodies are a free-text message (12). One API version (1.0) with a written deprecation process and a dated changelog kept on the developer forum, not in the docs (13).

ONES 55

No downloadable OpenAPI file was found. The reference is rendered pages, and the MCP docs list tool names and one-line descriptions without input schemas (0). llms.txt with sized indexes and a Markdown copy of every page (10). Endpoint and tool descriptions state what each does in one line, with version history per endpoint but little on when not to use one (10 of 20). Parameters are typed with defaults, limits (limit at most 100) and required marks (10 of 15). Each endpoint lists 200, 401, 403, 404 and 500 responses with schemas and examples (10 of 15). API version 2.0, a History table per endpoint and dated release notes (15). 0 + 10 + 10 + 10 + 10 + 15 = 55.

Asana 71

REST responses are compact by default and opt_fields names the fields to return. The MCP tools reference now lists 33 tools (20 read, 10 write, 3 interactive, up from 27 on 8 October) with no read-only subset or toolsets. The line is held at 20 because the listing is graded as an HTTP API, where opt_fields sizes responses (20). limit from 1 to 100 with offset tokens, and a task search with filters that is limited to paid workspaces (18). Status codes are documented and 402 marks a paid-only call, but errors carry only a message string and the three rate limiters return the same 429 (13). No idempotency keys. The official SDKs retry on 429. MCP tool annotations weren't readable without a token (5). Current official SDKs for JavaScript and Python. Ruby, Java and PHP are end-of-support (15).

ONES 40

Scored on the MCP server and the Open API together. 67 MCP tools load by default (5), and a client granted fewer scope groups is limited to fewer tools (5 back). Lists take limit and cursor with project and issue type filters, and query_issues_by_onesql runs a filtered query (15 of 20). Error status codes are documented per endpoint with response schemas, but no error code catalogue was found (8 of 20). No idempotency keys or MCP annotations found (0). One official SDK, @ones-open/node-sdk, aimed at ONES Apps, and the MCP setup is one mcp-remote line (7 of 15). 10 + 15 + 8 + 0 + 7 = 40.

Asana 84

Closed service with published user terms, subscriber terms and API terms. The SDKs are MIT. The OpenAPI repository has no licence file (15). Privacy statement effective 1 September 2026 and a DPA of the same date, with deletion on request or at termination but no retention period in days. The privacy statement says domain metadata trains Asana's machine learning models when Asana AI is enabled, and that third-party LLM providers may not train on customer data (22). A written deprecation process with start, activation and end dates, Asana-Change response headers and opt-in and opt-out request headers, with no minimum notice period stated (16). Subprocessor list updated 11 September 2026 with countries, and data residency in Europe, Australia and Japan (20).

ONES 62

Closed service under terms naming The Beautiful ONES Technology PTE. LTD. and Singapore law (15 of 30). The privacy policy of 7 January 2026 deletes business data 30 days after a service ends with no login for 365 days, and honours deletion requests within 30 days, but no DPA or subprocessor list is public (12 of 30). Endpoint version histories record changes, with no deprecation policy (5 of 20). The privacy policy names AWS, Oracle cloud and OpenAI and says data is transferred mostly to the US, China and Singapore, with no subprocessor list or regions (6 of 20). 15 + 12 + 5 + 6 = 38.

Asana 80

JavaScript SDK v3.4.0 and Python SDK v5.5.1 were tagged on 27 October 2026, and the OpenAPI repository was rebuilt on 29 October (30). The API changelog has entries on 10 August, 26 August, 28 September, 8, 9, 13, 26 and 27 October 2026 (two on 27 October), and each SDK has three or more tags since 3 August (20). The developer forum is active, with staff replies on changelog threads (12). JavaScript and Python SDKs are current, while Ruby, Java and PHP are end-of-support (13). The SDK repositories show only a publish workflow, no test run, and node-asana had 72 open issues per the 8 October check, not re-read on 1 November (5).

ONES 68

Latest dated release notes are 7.33.0 on 30 September 2026, 37 days before this check. The registry entry moved to 1.0.3 on 8 October with no release note behind it, so it doesn't set recency (20). Nine dated releases since 8 August, several adding Open API endpoints or MCP capabilities (7.23.0, 7.26.0, 7.27.0, 7.29.0) (20). Closed service with a public changelog and support by email, with no public issue tracker (8 of 15). Verified com.ones/ones namespace in the official MCP registry (15). One official SDK for apps, with package health not checked (5 of 10). 20 + 20 + 8 + 15 + 5 = 68.