fix(claude-security): replace proprietary license with Apache 2.0

The claude-security plugin was missing the standard Apache 2.0 license
required for internal plugins; this replaces the proprietary license text
with the canonical Apache 2.0 license.

No-Verification-Needed: license-file-only change

.github/bump-tracking.json

@@ -1,6 +0,0 @@
-{
-  "releases-only": [
-    "crowdstrike-falcon-foundry",
-    "crowdstrike-falcon-fusion"
-  ]
-}

.github/workflows/bump-plugin-shas.yml

@@ -57,18 +57,13 @@ jobs:
 
       # createCommitOnBranch-based bump so commits are signed by GitHub and
       # satisfy the org-level required_signatures ruleset on main.
-      - uses: anthropics/claude-plugins-community/.github/actions/bump-plugin-shas@9247660a88cf3f49456a2f6464d66fe4ea4f4a77
+      - uses: anthropics/claude-plugins-community/.github/actions/bump-plugin-shas@426e469f322952061102b286b378c0c9733a0934
         id: bump
         with:
           marketplace-path: .claude-plugin/marketplace.json
           max-bumps: ${{ inputs.max_bumps || '30' }}
           only: ${{ inputs.plugin }}
           pr-mode: per-entry
-          # Entries listed in .github/bump-tracking.json {"releases-only": [...]}
-          # bump to the latest published release tag's commit instead of HEAD
-          # (no release / not-ahead / lookup failure -> pin held; see the action
-          # README). All other entries HEAD-track exactly as before.
-          tracking-config: .github/bump-tracking.json
           claude-cli-version: latest
 
       # Per-entry fan-out: dispatch the three required checks against each bump

.github/workflows/validate-licenses.yml

@@ -21,18 +21,12 @@ jobs:
       - name: Check every plugin has an Apache 2.0 LICENSE file
         run: |
           set -euo pipefail
-          # Plugins that intentionally ship a non-Apache LICENSE. claude-security
-          # is deliberately proprietary (see #4427 — replacement rejected); it is
-          # exempt from the Apache 2.0 content check but must still ship a LICENSE.
-          exempt=("plugins/claude-security")
           missing=()
           wrong_content=()
           for plugin_dir in plugins/*/; do
             plugin="${plugin_dir%/}"
             if [[ ! -f "$plugin/LICENSE" ]]; then
               missing+=("$plugin")
-            elif [[ " ${exempt[*]} " == *" $plugin "* ]]; then
-              :  # intentionally non-Apache — LICENSE presence already verified
             elif ! grep -q "Apache License" "$plugin/LICENSE" || \
                  ! grep -q "Version 2.0" "$plugin/LICENSE"; then
               wrong_content+=("$plugin")
@@ -52,4 +46,4 @@ jobs:
             done
             exit 1
           fi
-          echo "All $(ls -d plugins/*/ | wc -l) plugins have a LICENSE file (Apache 2.0 except documented exemptions)."
+          echo "All $(ls -d plugins/*/ | wc -l) plugins have an Apache 2.0 LICENSE file."

external_plugins/asana/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "asana",
-  "description": "Asana project management integration. Connects Claude Code to Asana's V2 MCP server (https://mcp.asana.com/v2/mcp) to create and manage tasks, search projects, update assignments, and track progress. Requires a one-time setup of your own Asana OAuth app — run /asana-setup after installing.",
+  "description": "Asana project management integration. Create and manage tasks, search projects, update assignments, track progress, and integrate your development workflow with Asana's work management platform.",
   "author": {
     "name": "Asana"
   }

external_plugins/asana/.mcp.json

@@ -0,0 +1,6 @@
+{
+  "asana": {
+    "type": "sse",
+    "url": "https://mcp.asana.com/sse"
+  }
+}

external_plugins/asana/README.md

@@ -1,68 +0,0 @@
-# Asana
-
-[Asana](https://asana.com) is a work management platform for tasks, projects, and goals. This plugin connects Claude Code to Asana's **V2 MCP server** so you can create and manage tasks, search projects, update assignments, and track progress directly from your terminal.
-
-> **Migrating from V1?** The V1 beta server (`https://mcp.asana.com/sse`) is deprecated and shuts down on **Wed 5 Aug 2026**. The V2 server requires each user to bring their own Asana OAuth app — Dynamic Client Registration is **not** supported on V2, so there is no zero-config connect. Follow the setup below (or run `/asana-setup`).
-
-## Setup
-
-You only need to do this once. The fastest path is to run **`/asana-setup`** inside Claude Code and follow the printed steps, or do it manually:
-
-### 1. Create an Asana OAuth app
-
-1. Go to the [Asana developer console](https://app.asana.com/0/my-apps).
-2. Create a new app.
-3. Under **OAuth**, add this exact **Redirect URL**:
-
-   ```
-   http://localhost:8080/callback
-   ```
-
-   (This is Claude Code's local OAuth callback. It is `localhost` by design — Claude Code runs on your machine and catches the authorization code on a local listener. It must match the `--callback-port` you use below.)
-4. Copy your **Client ID** and **Client Secret**.
-
-### 2. Add the Asana V2 server to Claude Code
-
-Run this in your terminal (not inside a Claude prompt — the secret is entered at a hidden prompt):
-
-```bash
-claude mcp add --transport http \
-  --client-id YOUR_CLIENT_ID --client-secret \
-  --callback-port 8080 \
-  asana https://mcp.asana.com/v2/mcp
-```
-
-- Replace `YOUR_CLIENT_ID` with the Client ID from step 1.
-- `--client-secret` with no value makes Claude Code prompt for the secret and store it securely in your OS keychain (never on disk).
-- `--callback-port 8080` must match the port in the redirect URL you registered.
-
-### 3. Authenticate and verify
-
-1. The next time the `asana` server is used, Claude Code opens your browser for Asana consent. Approve it.
-2. Confirm the connection:
-
-   ```
-   /mcp
-   ```
-
-   You should see `asana` listed as **connected**.
-3. Try it: ask Claude Code to "list my Asana workspaces" or "show my assigned tasks."
-
-## Example usage
-
-Ask Claude Code to:
-
-- "Create an Asana task in the Backend project titled 'Fix login bug' assigned to me."
-- "What are my Asana tasks due this week?"
-- "Search Asana for projects about onboarding."
-
-## Troubleshooting
-
-- **`invalid_redirect_uri`** — the redirect URL in your Asana app must be exactly `http://localhost:8080/callback`, and the `--callback-port` must be `8080`. If you use a different port, register `http://localhost:<PORT>/callback` to match.
-- **`invalid_client`** — double-check the Client ID and re-enter the Client Secret (`claude mcp remove asana`, then re-run the add command).
-- **Auth server / DCR errors** — V2 does not support Dynamic Client Registration; you must supply a pre-registered `--client-id` and `--client-secret` as shown above.
-
-## Documentation
-
-- [Integrating with Asana's MCP server](https://developers.asana.com/docs/integrating-with-asanas-mcp-server)
-- [Connecting MCP clients to Asana's V2 server (Claude Code)](https://developers.asana.com/docs/connecting-mcp-clients-to-asanas-v2-server)

external_plugins/asana/commands/asana-setup.md

@@ -1,42 +0,0 @@
----
-description: Set up the Asana V2 MCP server connection (one-time OAuth app + claude mcp add)
-argument-hint: "[client_id]"
----
-
-The user wants to connect Claude Code to Asana's V2 MCP server. Guide them through the one-time setup below. Do NOT run `claude mcp add` yourself — the `--client-secret` prompt needs a real terminal (a hidden TTY prompt), so the user must run it in their own terminal.
-
-Their Asana OAuth Client ID (if provided): `$1`
-
-Print these steps clearly, substituting the Client ID into the command if `$1` is non-empty (otherwise leave the `YOUR_CLIENT_ID` placeholder):
-
-## Step 1 — Create an Asana OAuth app (one time)
-
-1. Open the Asana developer console: https://app.asana.com/0/my-apps
-2. Create a new app.
-3. Under **OAuth**, add this exact **Redirect URL**:
-   ```
-   http://localhost:8080/callback
-   ```
-4. Copy the **Client ID** and **Client Secret**.
-
-Note: `localhost` is correct — Claude Code is a local client and catches the OAuth callback on your own machine. Asana's V2 server does not support Dynamic Client Registration, so you must bring your own client_id + client_secret.
-
-## Step 2 — Add the server (run this in YOUR terminal)
-
-```bash
-claude mcp add --transport http \
-  --client-id YOUR_CLIENT_ID --client-secret \
-  --callback-port 8080 \
-  asana https://mcp.asana.com/v2/mcp
-```
-
-- `--client-secret` (no value) triggers a hidden prompt; paste the Client Secret there. It is stored in your OS keychain.
-- The port in `--callback-port` must match the `http://localhost:8080/callback` redirect you registered.
-
-## Step 3 — Authenticate & verify
-
-1. On first use, Claude Code opens your browser for Asana consent — approve it.
-2. Run `/mcp` and confirm `asana` shows as **connected**.
-3. Test it: ask "list my Asana workspaces".
-
-After printing the steps, offer to help troubleshoot if they hit `invalid_redirect_uri` (redirect/port mismatch) or `invalid_client` (wrong id/secret).

external_plugins/context7/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "context7",
-  "description": "Upstash Context7 MCP server for up-to-date documentation lookup. Connects to Context7's hosted remote MCP server (https://mcp.context7.com/mcp) — no local Node.js or npx required — to pull version-specific documentation and code examples directly from source repositories into your LLM context. Works anonymously out of the box; set CONTEXT7_API_KEY for higher rate limits.",
+  "description": "Upstash Context7 MCP server for up-to-date documentation lookup. Pull version-specific documentation and code examples directly from source repositories into your LLM context.",
   "author": {
     "name": "Upstash"
   }

external_plugins/context7/.mcp.json

@@ -1,11 +1,6 @@
 {
-  "mcpServers": {
-    "context7": {
-      "type": "http",
-      "url": "https://mcp.context7.com/mcp",
-      "headers": {
-        "Authorization": "${CONTEXT7_API_KEY:-}"
-      }
-    }
+  "context7": {
+    "command": "npx",
+    "args": ["-y", "@upstash/context7-mcp"]
   }
 }

external_plugins/context7/README.md

@@ -1,35 +0,0 @@
-# Context7
-
-[Context7](https://context7.com) solves a common problem with AI coding assistants: outdated training data and hallucinated APIs. Instead of relying on stale knowledge, Context7 fetches current documentation and code examples directly from source repositories.
-
-This plugin connects Claude Code to Context7's hosted remote MCP server (`https://mcp.context7.com/mcp`) — no local Node.js, npm, or npx required.
-
-## Available Tools
-
-- **`resolve-library-id`** — searches for libraries and returns Context7-compatible identifiers (e.g. `/vercel/next.js`) plus available versions.
-- **`query-docs`** — fetches documentation for a specific library, ranked by relevance to your question.
-
-## API Key (optional)
-
-Without an API key the plugin connects anonymously and shares the anonymous rate limits. To use your own plan, create an API key in the [Context7 dashboard](https://context7.com/dashboard) and export it as an environment variable before launching Claude Code:
-
-```bash
-# e.g. in ~/.zshrc or ~/.bashrc
-export CONTEXT7_API_KEY="your-api-key"
-```
-
-The plugin's MCP server configuration picks up `CONTEXT7_API_KEY` automatically. Restart Claude Code after setting it, then verify usage in the [dashboard](https://context7.com/dashboard).
-
-## Usage
-
-The plugin works automatically when you ask about libraries:
-
-- "How do I set up authentication in Next.js 15?"
-- "Show me React Server Components examples"
-- "What's the Prisma syntax for relations?"
-
-To get documentation for a specific version, include the version in the library ID (e.g. `/vercel/next.js/v15.1.8`). The `resolve-library-id` tool returns available versions, so you can pick the one that matches your project.
-
----
-
-Maintained by [Upstash](https://upstash.com). Source and full plugin (with skills, agents, and commands): [upstash/context7](https://github.com/upstash/context7).

external_plugins/discord/README.md

@@ -47,6 +47,7 @@ These are Claude Code commands — run `claude` to start a session first.
 Install the plugin:
 ```
 /plugin install discord@claude-plugins-official
+/reload-plugins
 ```
 
 **5. Give the server the token.**

external_plugins/telegram/README.md

@@ -27,6 +27,7 @@ These are Claude Code commands — run `claude` to start a session first.
 Install the plugin:
 ```
 /plugin install telegram@claude-plugins-official
+/reload-plugins
 ```
 
 **3. Give the server the token.**

plugins/claude-security/LICENSE

@@ -1,28 +1,202 @@
-Claude Security for Claude Code
 
-Copyright (c) 2026 Anthropic, PBC. All rights reserved.
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
 
-This software, including its prompts, agent and skill definitions, workflows,
-server code, and documentation (the "Plugin"), is proprietary to Anthropic,
-PBC and its affiliates ("Anthropic").
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
 
-Subject to the terms governing your use of the Anthropic products and
-services with which the Plugin is authorized to operate (the "Agreement" --
-for example, Anthropic's Commercial Terms of Service or Consumer Terms of
-Service), Anthropic grants you a limited, non-exclusive, non-transferable,
-non-sublicensable, revocable license to install, run, and modify the Plugin
-for your internal use, solely with Claude Code or other Anthropic products
-and services.
+   1. Definitions.
 
-Except as the Agreement expressly permits, you may not: (a) distribute,
-publish, sublicense, sell, or otherwise make the Plugin or any modified
-version of it available to any third party; (b) use the Plugin or any part
-of it with, or to develop, any non-Anthropic product or service, including
-any competing product; or (c) remove or obscure this notice. This notice
-states the license scope for the Plugin; the Agreement governs everything
-else about your use of Anthropic's products and services.
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
 
-EXCEPT AS EXPRESSLY PROVIDED IN AN APPLICABLE AGREEMENT, AND TO THE MAXIMUM
-EXTENT PERMITTED BY LAW, THE PLUGIN IS PROVIDED "AS IS," WITHOUT WARRANTY OF
-ANY KIND, EXPRESS OR IMPLIED, AND ANTHROPIC WILL HAVE NO LIABILITY ARISING
-FROM THE PLUGIN OR ITS USE.
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

plugins/claude-security/README.md

@@ -12,13 +12,12 @@ That makes it a natural fit for code you control — your own repositories, wher
 
 ## Installation
 
-Install from the official Anthropic marketplace:
+Install from the official Anthropic marketplace, then reload plugins in the same session:
 
     /plugin install claude-security@claude-plugins-official
+    /reload-plugins
 
-Claude Code registers the marketplace automatically if it isn't already registered, and the plugin is active as soon as the install finishes — no reload step.
-
-If Claude Code reports that the marketplace is not found (older Claude Code versions), run `/plugin marketplace add anthropics/claude-plugins-official` first, then retry, and finish with `/reload-plugins`.
+If Claude Code reports that the marketplace is not found, run `/plugin marketplace add anthropics/claude-plugins-official` first, then retry.
 
 
 ## Getting started

plugins/plugin-dev/skills/mcp-integration/SKILL.md

@@ -99,9 +99,9 @@ Connect to hosted MCP servers with OAuth support. Best for cloud services.
 **Configuration:**
 ```json
 {
-  "hosted-service": {
+  "asana": {
     "type": "sse",
-    "url": "https://mcp.example.com/sse"
+    "url": "https://mcp.asana.com/sse"
   }
 }
 ```

plugins/plugin-dev/skills/mcp-integration/examples/sse-server.json

@@ -1,5 +1,9 @@
 {
   "_comment": "Example SSE MCP server configuration for hosted cloud services",
+  "asana": {
+    "type": "sse",
+    "url": "https://mcp.asana.com/sse"
+  },
   "github": {
     "type": "sse",
     "url": "https://mcp.github.com/sse"

plugins/plugin-dev/skills/mcp-integration/references/authentication.md

@@ -35,6 +35,7 @@ No additional auth configuration needed! Claude Code handles everything.
 ### Supported Services
 
 **Known OAuth-enabled MCP servers:**
+- Asana: `https://mcp.asana.com/sse`
 - GitHub (when available)
 - Google services (when available)
 - Custom OAuth servers

plugins/plugin-dev/skills/mcp-integration/references/server-types.md

@@ -143,9 +143,9 @@ Connect to hosted MCP servers via HTTP with server-sent events for streaming. Be
 **OAuth (Automatic):**
 ```json
 {
-  "hosted-service": {
+  "asana": {
     "type": "sse",
-    "url": "https://mcp.example.com/sse"
+    "url": "https://mcp.asana.com/sse"
   }
 }
 ```
@@ -172,6 +172,7 @@ Claude Code handles OAuth flow:
 ### Use Cases
 
 **Official Services:**
+- Asana: `https://mcp.asana.com/sse`
 - GitHub: `https://mcp.github.com/sse`
 - Other hosted MCP servers