# Create task with personal access token

**URL:** <https://forum.asana.com/t/create-task-with-personal-access-token/4503>\
**Category:** API & Developers\
**Created:** [3 July 2017 08:16 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503 "2017-07-03T08:16:47Z")\
**Posts on this page:** 15\
**Page:** 1

<div class="post-metadata">

**Author:** ![Thomas\_Delattre](https://luna1.co/8d76cd.png) [@Thomas\_Delattre](https://forum.asana.com/u/Thomas_Delattre)\
**Post date:** [3 July 2017 08:16 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/1 "2017-07-03T08:16:47Z")

</div>

Hello,

I’m actually trying to create a task with ASANA api with personal access token.

I use Boomerang (chrome-extension) for my test.  
With POST :  
Endpoint URL : [https://app.asana.com/api/1.0/tasks](https://app.asana.com/api/1.0/tasks)  
My header : Authorization: Bearer accessToken  
and my body JSON

{  
“data” : {  
“name” : “name of the task”,  
“workspace” : 01234567891234,  
“projects” : 98765432112456  
}  
}

but I systematically get an error 401. (I changed the id of workspace and projects)

I do not understand why I am not allowed while I acced to the url [https://app.asana.com/api/1.0/users/me](https://app.asana.com/api/1.0/users/me) with GET

Ty for the help !

---

<div class="post-metadata">

**Author:** ![LenSantos](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/lensantos/32/68355_2.png) [@LenSantos](https://forum.asana.com/u/LenSantos)\
**Post date:** [4 July 2017 03:23 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/2 "2017-07-04T03:23:14Z")

</div>

Hello @Thomas_Delattre,

I’m pretty sure that the issue is with the authorization.

I’m using Postman, also a chrome-extension. Here’s a successful test.  
 ![](https://us1.discourse-cdn.com/asana/original/2X/d/d2d9159eca3cc835a6b9db0becec71025a180fb5.png)

But if I deliberately use an incorrect access token, here’s what I get:  
 ![](https://us1.discourse-cdn.com/asana/original/2X/b/b5e829fc40e00e0a78235944cbcabbfda77f6b07.png)

 ![](https://us1.discourse-cdn.com/asana/original/2X/4/46e85d4fa03a3f442cf0ef546c7d762eb401c994.png)

Can you double check the authorization parameters?

---

<div class="post-metadata">

**Author:** ![Thomas\_Delattre](https://luna1.co/8d76cd.png) [@Thomas\_Delattre](https://forum.asana.com/u/Thomas_Delattre)\
**Post date:** [4 July 2017 07:17 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/3 "2017-07-04T07:17:43Z")

</div>

In Boomerang, I put in Headers name: " Authorization: Bearer " and in value my token ?

I really don’t understand why with the same personal access token, I can get data from users/me, /workspace, /projects, I don’t have error 401.

How can I access url get but not for a POST 😕

PS: Sorry for my English, I’m french

---

<div class="post-metadata">

**Author:** ![Matt\_Bramlage](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/matt_bramlage/32/145_2.png) [@Matt\_Bramlage](https://forum.asana.com/u/Matt_Bramlage)\
**Post date:** [5 July 2017 17:16 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/4 "2017-07-05T17:16:30Z")

</div>

Hey @Thomas_Delattre, it’s possible to get other authorization errors, for instance that you have access to your Asana workspace (so can access /users/me), but not that particular project. “Private” projects and projects that are “Private to members” where you are not the owner / a member of the project would send back 401 when you try to access them.

Can you double check that you can successfully do a GET request to [https://app.asana.com/api/1.0/projects/project\_id](https://app.asana.com/api/1.0/projects/project_id) with your access token and that it works?

---

<div class="post-metadata">

**Author:** ![Thomas\_Delattre](https://luna1.co/8d76cd.png) [@Thomas\_Delattre](https://forum.asana.com/u/Thomas_Delattre)\
**Post date:** [6 July 2017 15:13 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/5 "2017-07-06T15:13:37Z")

</div>

Hey, ty for the answer.

I have just done the test and I have access to the project with a GET request.

Unfortunately, I still can not create a task on this project with a POST request, I still get " Not authorized ".

To be sure, to create a task in a particular project :

- POST : [https://app.asana.com/api/1.0/tasks](https://app.asana.com/api/1.0/tasks)
- Body :  
{  
“data”: {  
“name”: “Test Task Name”,  
“projects”: 368596298543831  
}  
}

Headers : Authorization: Bearer value\_token

Thanks.

---

<div class="post-metadata">

**Author:** ![Matt\_Bramlage](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/matt_bramlage/32/145_2.png) [@Matt\_Bramlage](https://forum.asana.com/u/Matt_Bramlage)\
**Post date:** [7 July 2017 01:24 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/6 "2017-07-07T01:24:00Z")

</div>

🤔 Hmm. That project looks fine, and I see you’re the owner, so you should have access. However, when I go to see if you have any personal access tokens, I don’t see any associated with your account. Could you double check in your [account apps settings page](https://app.asana.com/-/account_api) and clicking on “Manage developer apps” that you have a personal access token listed (screenshot below)? Could you try to do your POST request if you get a new token on that page and use it instead?

 ![](https://us1.discourse-cdn.com/asana/original/2X/8/81e7f47f4bcc86b930d73689730fc7a415361a5c.png)

---

<div class="post-metadata">

**Author:** ![Thomas\_Delattre](https://luna1.co/8d76cd.png) [@Thomas\_Delattre](https://forum.asana.com/u/Thomas_Delattre)\
**Post date:** [7 July 2017 07:45 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/7 "2017-07-07T07:45:32Z")

</div>

Yes, I have two personal access token.

 ![](https://us1.discourse-cdn.com/asana/original/2X/1/153d9a1c6e15ec8641d4fd4466af402c303c8dcf.PNG)

By creating a new one, I still have not authorized.  
Cf screenhot

 ![](https://us1.discourse-cdn.com/asana/original/2X/2/2d02337fa349e636778631056edad10959255a80.PNG) ![](https://us1.discourse-cdn.com/asana/original/2X/1/1349877cc359208d27c24dea7ef535558becf007.PNG) ![](https://us1.discourse-cdn.com/asana/original/2X/b/b34a7a7bbfd8d2964984858774b09e6ae01d0d1d.PNG)

And the new access token

 ![](https://us1.discourse-cdn.com/asana/original/2X/0/0834d7c0be148ae88d6d4bdbc278e2edcc23eb2d.PNG)

Thanks.

---

<div class="post-metadata">

**Author:** ![Thomas\_Delattre](https://luna1.co/8d76cd.png) [@Thomas\_Delattre](https://forum.asana.com/u/Thomas_Delattre)\
**Post date:** [10 July 2017 14:41 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/8 "2017-07-10T14:41:16Z")

</div>

Update : I finally succeeded with the help of the Asana support.

The key should be Authorization and the value should be Bearer with Boomerang !

Thanks

---

<div class="post-metadata">

**Author:** ![Matt\_Bramlage](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/matt_bramlage/32/145_2.png) [@Matt\_Bramlage](https://forum.asana.com/u/Matt_Bramlage)\
**Post date:** [10 July 2017 17:59 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/9 "2017-07-10T17:59:13Z")

</div>

Glad we got everything sorted out @Thomas_Delattre!

---

<div class="post-metadata">

**Author:** ![Joaquin\_Gonzalez](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/joaquin_gonzalez/32/14583_2.png) [@Joaquin\_Gonzalez](https://forum.asana.com/u/Joaquin_Gonzalez)\
**Post date:** [22 March 2018 11:30 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/10 "2018-03-22T11:30:24Z")

</div>

Hi,  
what do you exactly put in the header??

---

<div class="post-metadata">

**Author:** ![Diego\_Garcia](https://luna1.co/8d76cd.png) [@Diego\_Garcia](https://forum.asana.com/u/Diego_Garcia)\
**Post date:** [3 July 2018 09:40 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/11 "2018-07-03T09:40:27Z")

</div>

A bit old, but if it helps anyone:

> <https://stackoverflow.com/questions/45582952/how-to-provide-access-token-in-postmen-for-asana-api-requests>

Should be Key: “Authorization”. Value: “Bearer 0/d267ae6b40551be54edb7474e249bed1” .  
so…“Bearer [your App token]”

Here´s a postman asana collection, includes an example with an authorized call that helped me to get it all going

> **[Asana](https://documenter.getpostman.com/view/906519/asana/6YySEFh#4b863534-9e0c-9909-090d-f2f3a2601b82)**
>
> The Postman Documenter generates and maintains beautiful, live documentation for your collections. Never worry about maintaining API documentation again.

---

<div class="post-metadata">

**Author:** ![Diakoptis](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/diakoptis/32/22726_2.png) [@Diakoptis](https://forum.asana.com/u/Diakoptis)\
**Post date:** [3 July 2018 10:00 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/12 "2018-07-03T10:00:26Z")

</div>

hey mods. This postman collection contains an active bearer token. Remove it pls 🙂

cc @Bastien_Siebman

---

<div class="post-metadata">

**Author:** ![Diego\_Garcia](https://luna1.co/8d76cd.png) [@Diego\_Garcia](https://forum.asana.com/u/Diego_Garcia)\
**Post date:** [3 July 2018 10:11 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/13 "2018-07-03T10:11:46Z")

</div>

Dunno if working tokens are forbidden, but just in case, the one included in the collection looks totally made for testing purposes… unless you really think someones it´s using the Microsoft workspace…  
{“data”:[{“id”:177987220357060,“name”:“Microsoft”},{“id”:498346170860,“name”:“Personal Projects”}]}

---

<div class="post-metadata">

**Author:** ![Diakoptis](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/diakoptis/32/22726_2.png) [@Diakoptis](https://forum.asana.com/u/Diakoptis)\
**Post date:** [3 July 2018 10:27 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/14 "2018-07-03T10:27:25Z")

</div>

Dunno if it is for testing purposes but an active token is an active token and someone can use it on behalf of the user.

I had to mention in case the user published it by mistake. Have a great day \<3

---

<div class="post-metadata">

**Author:** ![system](https://sea2.discourse-cdn.com/asana/user_avatar/forum.asana.com/system/32/276370_2.png) [@system](https://forum.asana.com/u/system)\
**Post date:** [30 May 2025 18:58 UTC](https://forum.asana.com/t/create-task-with-personal-access-token/4503/15 "2025-05-30T18:58:17Z")

</div>


