[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_131":132},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_57":49,"_58":59,"_60":61,"_62":63,"_64":65,"_66":67,"_68":49,"_69":70,"_71":72,"_73":74,"_75":76,"_77":78,"_79":-5,"_80":-5,"_81":-5,"_82":49,"_83":-5,"_84":85,"_86":87,"_88":89,"_90":91,"_92":93,"_94":95,"_96":97},"apiUrl","https://odel.app/api","creator","atlassian","moduleId","atlassian-mcp-server","@atlassian/atlassian-mcp-server","displayName","Atlassian Rovo MCP Server","tagline","Connect to Atlassian Jira, Confluence, and Compass to search, create, and manage your work.","iconKey","https://avatars.githubusercontent.com/u/168166?v=4","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://mcp.atlassian.com/v1/mcp\",\"transport\":\"streamable-http\",\"authType\":\"none\"}","pricingModel","free","creatorUserId","system:external-import","createdAt",1781363244000,"updatedAt",1788757705000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=com.atlassian%2Fatlassian-mcp-server","sourceVerified",false,"sourceMissingSince","importedAt","upstreamStars",1021,"upstreamUpdatedAt",1788460084000,"detectedTransport","streamable-http","detectedAuthType","bearer","probeStatus","ok","lastProbedAt","githubRepoUrl","https://github.com/atlassian/atlassian-mcp-server","githubRepoFullName","atlassian/atlassian-mcp-server","releaseId","ext-atlassian-atlassian-mcp-server","version","1.1.3","descriptionMarkdown","

\n $\"Atlassian\"$ \n

\n\n

Atlassian Rovo MCP Server

\n\n

\n The official Model Context Protocol (MCP) server for Atlassian: a cloud-hosted bridge that gives your AI tools secure, real-time access to Jira, Confluence, Jira Service Management, Bitbucket, Compass, Loom, and the wider Atlassian platform — powered by your Teamwork Graph.\n

\n\n\n

\n $\"Official$ \n $\"GitHub$ \n $\"License:$ \n $\"Status:$ \n

\n\n\n

\n $\"Model$ \n $\"MCP$ \n $\"Auth:$ \n $\"Hosting:$ \n

\n\n\n

\n $\"Jira\"$ \n $\"Confluence\"$ \n $\"Jira$ \n $\"Bitbucket\"$ \n $\"Loom\"$ \n $\"Compass\"$ \n $\"Rovo\"$ \n

\n\n

\n Getting started ·\n Supported tools ·\n Security & admin ·\n Community\n

\n\n---\n\nThe **official Atlassian Rovo MCP Server** is a cloud-based bridge between your Atlassian Cloud site and compatible external tools. Once configured, it enables those tools to interact with **Jira, Confluence, Jira Service Management, Bitbucket, Compass, Loom, and Atlassian platform data (Projects, Goals, Teams, Focus, Talent, and the Teamwork Graph)** in real time. Authentication uses **OAuth 2.1** or **API tokens**, so every action respects the user's existing access controls.\n\nWith the Atlassian Rovo MCP Server, you can:\n\n* **Summarize and search** Jira, Jira Service Management, Confluence, Bitbucket, Projects, Goals, and more without switching tools.\n* **Retrieve and review** recordings of videos and meetings from Loom.\n* **Create and update** work items or pages based on natural language commands.\n* **Automate repetitive work**, like generating work items from meeting notes or specs.\n\nConnect once, then describe what you want — no tab switching and no copy-pasting. Your AI selects and runs the right actions.\n\nIt's built for developers, content creators, and project teams who work in IDEs or AI tools and want to use Atlassian data without constantly switching context.\n\n> [!IMPORTANT]\n> **v2 is now the recommended version.** New setups should use `https://mcp.atlassian.com/v2/mcp`, which exposes more tools and more products. Existing v1 connections automatically start to expose and use v2 tools; incompatible clients may need to clear cached client IDs or `.well-known` credentials to keep authenticating. For setup steps, see [Getting started with the Atlassian Rovo MCP Server](https://support.atlassian.com/atlassian-rovo-mcp-server/docs/getting-started-with-the-atlassian-remote-mcp-server/).\n\n## One-click setup\n\nPick your AI client below to install the official Atlassian Rovo MCP Server. Each button uses your client's native install link, so you don't need to edit any JSON config by hand.\n\n\n \n \n \n \n \n \n

\n \n $\"Add$
\n Add to Cursor\n \n
_{Reference issues and log work in your codebase.}\n

\n \n $\"Add$
\n Add to VS Code\n \n
_{Search and create Jira issues via GitHub Copilot.}\n

\n \n $\"Add$
\n Add to ChatGPT\n \n
_{Search, summarize, and create right from ChatGPT.}\n

\n \n $\"Add$
\n Add to Claude\n \n
_{Bring Jira and Confluence into Claude workflows.}\n

\n\n### Let your agent do the setup\n\nMost AI coding agents can install, authenticate, and configure the server themselves. Copy and paste this prompt into your agent:\n\n```\nSet up Atlassian Rovo MCP for this agent using the official setup guide at\nhttps://support.atlassian.com/atlassian-rovo-mcp-server/docs/getting-started-with-the-atlassian-remote-mcp-server/\nand the MCP server URL https://mcp.atlassian.com/v2/mcp. Then start the Atlassian MCP\nauthentication flow so I can sign in.\n```\n\nOr add the server manually with your client's own command:\n\n| Client | Command or configuration |\n| --- | --- |\n| Claude Code | `claude mcp add --transport http atlassian https://mcp.atlassian.com/v2/mcp`, then run `/mcp` in a session to authenticate |\n| Codex | `codex mcp add atlassian --url https://mcp.atlassian.com/v2/mcp` |\n| Claude Desktop | **Settings → Extensions → Browse extensions → Plugins**, then search for **Atlassian** |\n| Codex Desktop | **Plugins** or **Connectors**, then install **Atlassian Rovo** |\n| VS Code / GitHub Copilot | Extensions view → search `@mcp Atlassian` → **Install** |\n| Cursor | [Atlassian plugin for Cursor with MCP](https://cursor.com/marketplace/atlassian) → **Add to Cursor** |\n| Windsurf | **Cascade → MCP servers → Add Server → Add custom server**, with `serverUrl` set to `https://mcp.atlassian.com/v2/mcp` |\n| Any other MCP client | Use the server URL `https://mcp.atlassian.com/v2/mcp` |\n\n## Contents\n\n* [One-click setup](#one-click-setup)\n* [Supported clients](#supported-clients)\n* [Plugin packaging and compatibility](#plugin-packaging-and-compatibility)\n* [Supported products and tools](#supported-products-and-tools)\n* [How the server exposes tools](#how-the-server-exposes-tools)\n* [MCP gateways](#mcp-gateways)\n* [Before you start](#before-you-start)\n* [Data and security](#data-and-security)\n* [How it works](#how-it-works)\n* [Example workflows](#example-workflows)\n* [Tips and tricks](#tips-and-tricks)\n* [Admin notes: managing access](#admin-notes-managing-access)\n* [Security](#security)\n* [Support and feedback](#support-and-feedback)\n* [Disclaimer](#disclaimer)\n\n---\n\n## Supported clients\n\nThe Atlassian Rovo MCP Server works with a growing list of MCP-compatible clients:\n\n| Client | Setup reference |\n| --- | --- |\n| OpenAI ChatGPT | [Connectors / MCP guide](https://platform.openai.com/docs/guides/tools-connectors-mcp) |\n| OpenAI Codex (CLI and Desktop) | [Codex MCP docs](https://developers.openai.com/codex/mcp/) |\n| Claude (Claude.ai, Desktop, and Code) | [Claude MCP docs](https://code.claude.com/docs/en/mcp) |\n| Cursor | [Atlassian on the Cursor marketplace](https://cursor.com/marketplace/atlassian) |\n| Visual Studio Code (GitHub Copilot) | [VS Code MCP docs](https://code.visualstudio.com/docs/copilot/chat/mcp-servers) |\n| GitHub Copilot CLI | [About Copilot CLI](https://docs.github.com/en/copilot/concepts/agents/about-copilot-cli) |\n| Google Gemini CLI | [Gemini CLI MCP docs](https://github.com/google-gemini/gemini-cli/blob/main/docs/tools/mcp-server.md) |\n| Windsurf | [Windsurf MCP docs](https://docs.windsurf.com/windsurf/cascade/mcp) |\n| Docker | [Docker MCP Catalog and Toolkit](https://docs.docker.com/ai/mcp-catalog-and-toolkit/) |\n| Kiro and other Agent Plugins clients | [Kiro Powers documentation](https://kiro.dev/docs/powers/create/) |\n| Amazon Quick Suite | [MCP integration guide](https://docs.aws.amazon.com/quicksuite/latest/userguide/mcp-integration.html) |\n\nThe Atlassian Rovo MCP Server also supports any **local MCP-compatible client** that can run on `localhost` and connect to the server via the [`mcp-remote`](https://www.npmjs.com/package/mcp-remote) proxy. This enables custom or third-party integrations that follow the MCP specification.\n\n> [!TIP]\n> For the current, canonical list of supported clients and step-by-step setup, see [Getting started with the Atlassian Rovo MCP Server](https://support.atlassian.com/atlassian-rovo-mcp-server/docs/getting-started-with-the-atlassian-remote-mcp-server/). You can also refer to your client's own MCP documentation or built-in assistant.\n\n---\n\n## Plugin packaging and compatibility\n\nThis repository publishes the same MCP server and skills in several package formats so clients can use their native discovery and installation flows:\n\n| Format | Manifest and configuration | Shared components |\n| --- | --- | --- |\n| [Agent Plugins v1](https://agent-plugins.org/) | [`plugin.json`](https://github.com/atlassian/atlassian-mcp-server/blob/main/plugin.json) and [`mcp.json`](https://github.com/atlassian/atlassian-mcp-server/blob/main/mcp.json) | [`skills/`](https://github.com/atlassian/atlassian-mcp-server/blob/main/skills/) |\n| Claude Code plugin | [`.claude-plugin/plugin.json`](https://github.com/atlassian/atlassian-mcp-server/blob/main/.claude-plugin/plugin.json) and [`.claude-plugin/marketplace.json`](https://github.com/atlassian/atlassian-mcp-server/blob/main/.claude-plugin/marketplace.json) | [`.mcp.json`](https://github.com/atlassian/atlassian-mcp-server/blob/main/.mcp.json) and [`skills/`](https://github.com/atlassian/atlassian-mcp-server/blob/main/skills/) |\n| Cursor plugin | [`.cursor-plugin/plugin.json`](https://github.com/atlassian/atlassian-mcp-server/blob/main/.cursor-plugin/plugin.json) | [`.mcp.json`](https://github.com/atlassian/atlassian-mcp-server/blob/main/.mcp.json) and [`skills/`](https://github.com/atlassian/atlassian-mcp-server/blob/main/skills/) |\n| Gemini extension | [`gemini-extension.json`](https://github.com/atlassian/atlassian-mcp-server/blob/main/gemini-extension.json) | MCP server configuration embedded in the manifest |\n| MCP Registry | [`server.json`](https://github.com/atlassian/atlassian-mcp-server/blob/main/server.json) | Remote server metadata |\n\nThe skills in [`skills/`](https://github.com/atlassian/atlassian-mcp-server/blob/main/skills/) target the `/v2/mcp` endpoint and are what every packaged plugin\ninstalls. The previous generation is archived in [`skills/v1/`](https://github.com/atlassian/atlassian-mcp-server/blob/main/skills/v1/) for anyone still on a v1\nendpoint; it is not installed by any plugin and is set up manually. See\n[`skills/README.md`](https://github.com/atlassian/atlassian-mcp-server/blob/main/skills/README.md) for the differences.\n\nBoth `mcp.json` and `.mcp.json` are intentional. Agent Plugins requires the root `mcp.json` filename and its portable transport vocabulary; existing clients continue to use `.mcp.json` and their native configuration vocabulary. Keep their endpoint settings aligned when changing either file.\n\nThe root package can be imported by clients that implement Agent Plugins, including Kiro Powers. Client-specific manifests remain available and are not replaced by the portable package.\n\n---\n\n## Supported products and tools\n\nTools are organized by product and intent (read, write, search, delete, or manage). Organization admins grant or revoke access at the permission-group level, and each tool inherits the access of its parent group.\n\n| Product | Permission groups | OAuth 2.1 | API token |\n| --- | --- | :---: | :---: |\n| **Jira** | `read_jira` · `write_jira` · `search_jira` | ✅ | ✅ |\n| **Jira** (admin-enabled) | `delete_jira` · `manage_jira` | ✅ | ✅ |\n| **Confluence** | `read_confluence` · `write_confluence` · `search_confluence` | ✅ | ✅ |\n| **Bitbucket Cloud** | `read_bitbucket` · `write_bitbucket` | ✅ | ✅ |\n| **Jira Service Management** | `read_jsm` · `write_jsm` | — | ✅ (only) |\n| **Atlassian platform** | `read_teamwork_graph` · `write_teamwork_graph` · `search_atlassian` | ✅ | ✅ |\n| **Loom** | `read_loom` · `write_loom` | ✅ | ✅ |\n| **Goals** | `read_goals` · `write_goals` | ✅ | ✅ |\n| **Projects** | `read_projects` · `write_projects` | ✅ | ✅ |\n| **Teams** | `read_teams` · `write_teams` | ✅ | ✅ |\n| **Focus** | `read_focus` · `write_focus` | ✅ | ✅ |\n| **Talent** | `read_talent` · `write_talent` | ✅ | ✅ |\n| **Compass** | `read_compass` · `write_compass` | ✅ (only) | — |\n\nProduct-specific conditions:\n\n* **`delete_jira` and `manage_jira`** are **disabled by default** and must be enabled by an admin before they can be used.\n* **Bitbucket Cloud** tools are only available if your Bitbucket workspace is linked to an organization. Workspaces that aren't linked to an organization can't be selected when authenticating.\n* **Jira Service Management** tools only support authentication via API token, and are only available if an organization admin has enabled API token authentication.\n* **Loom** tools are only available for Loom workspaces linked to an Atlassian site.\n* **Teamwork Graph** tools can retrieve data from third-party services connected to Jira, such as linked pull requests, builds, and deployments. For **GitHub for Atlassian**, *full access* means tools retrieve GitHub data based on the user's GitHub permissions, while *limited access* means they retrieve data based on the user's Jira permissions. Azure DevOps, GitLab, Jenkins, and Spinnaker connectors follow the limited access model.\n\n> [!NOTE]\n> For the complete, current tool reference, including the required scope for each permission group, see [Supported tools](https://support.atlassian.com/atlassian-rovo-mcp-server/docs/supported-tools/).\n\n---\n\n## How the server exposes tools\n\nRather than sending every tool definition to the AI client at connection time, the Atlassian Rovo MCP Server exposes a small set of the most-used tools and lets the client discover the rest on demand. Tools marked **Primary** are visible directly to agents.\n\nThis has two benefits:\n\n* Your client's context stays free for the task at hand instead of being filled with tool definitions.\n* New tools become available without the client needing to reconnect.\n\n## MCP gateways\n\nIf you're using an MCP gateway, or otherwise need every tool available up front rather than using the discovery and execute methods, use the `tools=all` override to expose all tools as a paginated flat tool list:\n\n```\nhttps://mcp.atlassian.com/v2/mcp?tools=all\n```\n\n---\n\n## Before you start\n\nCheck that your environment meets these requirements before you set up the server.\n\n### Prerequisites\n\nThe requirements depend on how you connect:\n\n#### For supported clients\n\n* An **Atlassian Cloud site** with one or more of Jira, Confluence, Jira Service Management, Bitbucket, or Compass\n* Access to **the client of choice**\n* A modern browser to complete the OAuth 2.1 authorization flow, or API token credentials for headless authentication\n\nIf your organization admin has disabled authentication via API token, MCP clients can't connect with a token and need to use OAuth 2.1 instead.\n\n#### For IDEs or local clients (desktop setup)\n\n* An **Atlassian Cloud site** with one or more supported products\n* A supported IDE (for example, **Claude Desktop, VS Code, or Cursor**) or a custom MCP-compatible client\n* **Node.js v18+** installed to run the local MCP proxy ([`mcp-remote`](https://www.npmjs.com/package/mcp-remote))\n* A modern browser for completing OAuth login, or API token credentials for headless authentication\n\n---\n\n## Data and security\n\nThe server enforces several security controls:\n\n* All traffic is encrypted in transit over **HTTPS (TLS 1.2 or later)**, per [Atlassian's security practices](https://www.atlassian.com/trust/security/security-practices).\n* **OAuth 2.1** and **API token** authentication provide secure access control.\n* Data access respects user permissions across every connected Atlassian product, including Jira, Confluence, Jira Service Management, Bitbucket, Compass, and Loom.\n* If your organization uses IP allowlisting for Atlassian Cloud products, tool calls made through the Atlassian Rovo MCP Server also honor those IP rules.\n\nFor a deeper overview of the security model and admin controls, see:\n\n* [Understand Atlassian Rovo MCP Server](https://support.atlassian.com/security-and-access-policies/docs/understand-atlassian-rovo-mcp-server/)\n* [Control Atlassian Rovo MCP Server settings](https://support.atlassian.com/security-and-access-policies/docs/control-atlassian-rovo-mcp-server-settings/)\n\n---\n\n## How it works\n\n### Architecture and communication\n\n1. A supported client connects to the server endpoint. The recommended endpoint for all clients is:\n\n ```\n https://mcp.atlassian.com/v2/mcp\n ```\n\n The v1 endpoints (`https://mcp.atlassian.com/v1/mcp/authv2` and `https://mcp.atlassian.com/v1/mcp`) remain supported, and existing v1 connections automatically start to expose and use v2 tools.\n2. Depending on your setup, a secure browser-based OAuth 2.1 flow is triggered, or API token authentication is used.\n3. Once authorized, the client streams contextual data and receives real-time responses from your connected Atlassian products.\n\n> [!WARNING]\n> **After 30 June 2026, the legacy Server-Sent Events endpoint (`https://mcp.atlassian.com/v1/sse`) will no longer be supported.** Update any custom clients configured to use `/sse` so they point to `/mcp` — preferably `https://mcp.atlassian.com/v2/mcp`.\n\n> [!NOTE]\n> Clients that can't complete authentication after the move to v2 tools may need to clear cached client IDs or `.well-known` credentials.\n\n### Permission management\n\nAccess is granted only to data that the user already has permission to view in Atlassian Cloud. All actions respect existing project or space-level roles. OAuth and API token authentication both honor configured scopes and Atlassian permissions.\n\n### API token authentication (headless)\n\nAPI token authentication is available for headless, service-style, or non-interactive client setups (for example, backend systems or automations). It is also **required** for Jira Service Management tools.\n\nTwo mechanisms are supported:\n\n| Mechanism | Header |\n| --- | --- |\n| Personal API token (Basic auth) | `Authorization: Basic ` |\n| Service account API key (Bearer token) | `Authorization: Bearer ` |\n\n* **Admin enablement required:** An organization admin must enable API token authentication for the Rovo MCP Server (**Atlassian Administration → Rovo → Rovo MCP server → Authentication**).\n* **Scoped token required:** Create a personal API token, or ask your admin for a service account API key, with the scopes required for the tools and data you need to access.\n* **Configuration guide:** [Configure authentication via API token](https://support.atlassian.com/atlassian-rovo-mcp-server/docs/configuring-authentication-via-api-token/)\n* **Admin setting reference:** [Control Atlassian Rovo MCP Server settings: Configure authentication](https://support.atlassian.com/security-and-access-policies/docs/control-atlassian-rovo-mcp-server-settings/#Configure-authentication)\n\n---\n\n## Example workflows\n\nOnce connected, you can run tasks like these from your client.\n\n### Jira workflows\n\n* **Search**: \"Find all open bugs in Project Alpha.\"\n* **Create/update**: \"Create a story titled 'Redesign onboarding'.\"\n* **Bulk create**: \"Make five Jira issues from these notes.\"\n\n### Confluence workflows\n\n* **Summarize**: \"Summarize the Q2 planning page.\"\n* **Create**: \"Create a page titled 'Team Goals Q3'.\"\n* **Navigate**: \"What spaces do I have access to?\"\n\n### Compass workflows\n\n* **Create**: \"Create a service component based on the current repository.\"\n* **Bulk create**: \"Import components and custom fields from this CSV/JSON.\"\n* **Query**: \"What depends on the `api-gateway` service?\"\n\n### Loom workflows\n\n* **Retrieve**: \"Find the Loom recording of last week's design review.\"\n* **Summarize**: \"Summarize this Loom walkthrough and list the action items.\"\n\n### Projects and Goals workflows\n\n* **Status**: \"What's the current status of the Checkout Revamp project?\"\n* **Roll up**: \"Which goals are at risk this quarter, and why?\"\n\n### Combined tasks\n\n* **Link content**: \"Link these three Jira work items to the 'Release Plan' page.\"\n* **Find documentation**: \"Fetch the Confluence documentation page linked to this Compass component.\"\n* **Move work forward**: \"Move PROJ-456 to 'In Review' and add a comment that the PR is up.\"\n\n> [!NOTE]\n> Actual capabilities vary depending on your permission level and client platform.\n\n---\n\n## Tips and tricks\n\n### Set default CloudId, Jira project, and Confluence space\n\nUpdate your [AGENTS.md](https://agents.md/) with the Markdown below to reduce discovery tool calls, save time and tokens, and set maximum search results.\n\n```md\n## Atlassian Rovo MCP\n\nWhen connected to atlassian-rovo-mcp:\n- **MUST** use Jira project key = YOURPROJ\n- **MUST** use Confluence spaceId = \"123456\"\n- **MUST** use cloudId = \"https://yoursite.atlassian.net\" (do NOT call getAccessibleAtlassianResources)\n- **MUST** use `maxResults: 10` or `limit: 10` for ALL Jira JQL and Confluence CQL search operations.\n```\n\n### Use skills\n\nIf you're using a desktop client like Claude, you can create or reuse skills for repeated tasks. [See the default Rovo MCP skills](https://github.com/atlassian/atlassian-mcp-server/tree/main/skills).\n\nFor [Cursor](https://cursor.com/marketplace/atlassian), skills are part of the marketplace plugin.\n\n---\n\n## Admin notes: managing access\n\nIf you're an admin preparing your organization to use the Atlassian Rovo MCP Server, review the points below. For more detailed admin guidance, see:\n\n* [Understand Atlassian Rovo MCP Server](https://support.atlassian.com/security-and-access-policies/docs/understand-atlassian-rovo-mcp-server/)\n* [Control Atlassian Rovo MCP Server settings](https://support.atlassian.com/security-and-access-policies/docs/control-atlassian-rovo-mcp-server-settings/)\n* [Manage Atlassian Rovo MCP Server](https://support.atlassian.com/security-and-access-policies/docs/manage-atlassian-rovo-mcp-server/)\n* [Monitor Atlassian Rovo MCP Server activity](https://support.atlassian.com/security-and-access-policies/docs/monitor-atlassian-rovo-mcp-server-activity/)\n\n### Manage, monitor, and revoke access\n\n* **Admin controls:**\n Site and organization admins can manage, review, or revoke the MCP app's access from [Manage your organization's Marketplace and third-party apps](https://support.atlassian.com/security-and-access-policies/docs/manage-your-users-third-party-apps/).\n* **Domain controls:**\n Use the **Rovo MCP server** settings page in Atlassian Administration to control which external AI tools and domains are allowed to connect. By default, Atlassian-supported domains are allowed; you can add trusted domains or block supported ones. Domain controls apply to OAuth 2.1 connections. For details, see [Available Atlassian Rovo MCP server domains](https://support.atlassian.com/security-and-access-policies/docs/available-atlassian-rovo-mcp-server-domains/).\n* **IP controls:**\n If your organization uses IP allowlisting for Atlassian Cloud apps, requests made through the Atlassian Rovo MCP Server must originate from an IP address allowed by your organization's IP allowlist for the relevant app. For configuration details, see [Specify IP addresses for product access](https://support.atlassian.com/security-and-access-policies/docs/specify-ip-addresses-for-product-access/).\n* **End-user controls:**\n Individual users can revoke their own app authorizations from their profile settings.\n* **Audit logging:**\n Every time a tool is used through the Atlassian Rovo MCP Server, an event is recorded in your organization's audit log. Admins can review these in Atlassian Administration under **Insights → Audit log** (filter for _Rovo MCP User Actions_ or search _MCP_). For more information, see [Monitor Atlassian Rovo MCP server activity](https://support.atlassian.com/security-and-access-policies/docs/monitor-atlassian-rovo-mcp-server-activity/).\n\n### Troubleshooting common issues\n\n* **\"You don't have permission to connect from this IP address. Please ask your admin for access.\"**\n This usually indicates that IP allowlisting is enabled and the user's current IP address isn't allowed to access Jira, Confluence, Jira Service Management, Bitbucket, or Compass via the Atlassian Rovo MCP Server. Ask your site or organization admin to review the IP allowlist configuration and add the relevant network or VPN IP ranges if appropriate.\n\n---\n\n## Security\n\nModel Context Protocol (MCP) lets AI agents connect to tools and Atlassian data using your account's permissions, which creates powerful workflows but also structural risks. Any MCP client or server you enable (for example, IDE plugins, desktop apps, hosted MCP servers, or \"one-click\" integrations) can cause an AI agent to perform actions on your behalf.\n\nLarge language models (LLMs) are vulnerable to [prompt injection](https://owasp.org/www-community/attacks/PromptInjection) and related attacks (such as indirect prompt injection and [tool poisoning](https://invariantlabs.ai/blog/mcp-security-notification-tool-poisoning-attacks)). These attacks can instruct the agent to exfiltrate data or make unintended changes without explicit requests.\n\nTo reduce risk, only use trusted MCP clients and servers, carefully review which tools and data each agent can access, and apply least privilege (scoped tokens, minimal project/workspace access). For any high-impact or destructive action, require human confirmation and monitor audit logs for unusual activity. We strongly recommend reviewing Atlassian's guidance on MCP risks at [MCP Clients: Understanding the potential security risks](https://www.atlassian.com/blog/artificial-intelligence/mcp-risk-awareness).\n\n---\n\n## Support and feedback\n\nWe use your feedback to improve the Atlassian Rovo MCP Server. If you hit a bug or limitation, or have a suggestion:\n\n* Visit the [Atlassian Support Portal](https://support.atlassian.com/) to report issues and feature requests.\n* Share your experiences and questions on the [Atlassian Community](https://community.atlassian.com/), and developer-related asks on the [Atlassian Developer Community](https://community.developer.atlassian.com/).\n* Go to our [Ecosystem Developer Portal](https://ecosystem.atlassian.net/servicedesk/customer/portal/14/user/login?destination=portal%2F14) if you are building an app and found a bug or issue, or have suggestions.\n\n---\n\n## Disclaimer\n\nMCP clients can perform actions across Atlassian products with your existing permissions. Use least privilege, review high-impact changes before confirming, and monitor audit logs for unusual activity.\n\nLearn more: [MCP Clients: Understanding the potential security risks](https://www.atlassian.com/blog/artificial-intelligence/mcp-risk-awareness).\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays",0,"iconType","image","upstream",{"_114":115,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125},"requiredSecrets",[],"tags",[100,101,19,102,103,104,105,106,107,108,109,110,111,112,113],"assets",[],"stats",{"_98":85,"_99":85},"ratingAvg","reviewCount","ai","ai-agents","bitbucket","chatgpt","claude","compass","confluence","copilot","cursor","developer-tools","jira","jira-service-management","llm","oauth","topics",[100,101,19,102,103,104,105,106,107,108,109,110,111,112,126,127,128,113,129,130],"license","Apache-2.0","language","JavaScript","registryName","com.atlassian/atlassian-mcp-server","homepage","https://support.atlassian.com/atlassian-rovo-mcp-server/docs/getting-started-with-the-atlassian-remote-mcp-server/","packages",[],"mcp","mcp-server","model-context-protocol","rovo","vscode","ENV",{"_133":134,"_135":136,"_137":138},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]