Atlassian BitbucketCAUTION
Node.js/TypeScript MCP server for Atlassian Bitbucket. Enables AI systems (LLMs) to interact with workspaces, repositories, and pull requests via tools (list, get, comment, search). Connects AI directly to version control workflows through the standard MCP interface.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Transform how you work with Bitbucket by connecting Claude, Cursor AI, and other AI assistants directly to your repositories, pull requests, and code. Get instant insights, automate code reviews, and streamline your development workflow.
[](https://www.npmjs.com/package/@aashari/mcp-server-atlassian-bitbucket) [](https://github.com/aashari/mcp-server-atlassian-bitbucket/blob/main/LICENSE)
What You Can Do
- Ask AI about your code: "What's the latest commit in my main repository?"
- Get PR insights: "Show me all open pull requests that need review"
- Search your codebase: "Find all JavaScript files that use the authentication function"
- Review code changes: "Compare the differences between my feature branch and main"
- Manage pull requests: "Create a PR for my new-feature branch"
- Automate workflows: "Add a comment to PR #123 with the test results"
Perfect For
- Developers who want AI assistance with code reviews and repository management
- Team Leads needing quick insights into project status and pull request activity
- DevOps Engineers automating repository workflows and branch management
- Anyone who wants to interact with Bitbucket using natural language
Requirements
- Node.js 18.0.0 or higher
- Bitbucket Cloud account (not Bitbucket Server/Data Center)
- Authentication credentials: Scoped API Token (recommended) or App Password (legacy)
Quick Start
Get up and running in 2 minutes:
1. Get Your Bitbucket Credentials
IMPORTANT: Bitbucket App Passwords are being deprecated and will be removed by June 2026. We recommend using Scoped API Tokens for new setups.
Option A: Scoped API Token (Recommended - Future-Proof)
Bitbucket is deprecating app passwords. Use t
f94a336ea86fOBSERVED · 2026-10-06Exposed tools (6)
2 read · 3 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
bb_clone | read | |
bb_delete | destructive | |
bb_get | read | |
bb_patch | write | |
bb_post | write | |
bb_put | write |
Trust audit
CAUTIONgrade B · trust 88/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (3 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (7)
'http://127.0.0.1',
'https://127.0.0.1',
bb_delete
.node-version
.releaserc.json
@modelcontextprotocol/sdk, @toon-format/toon, commander, cors, dotenv, express, jmespath, zod
Gates applied: no_behavioural_pass, no_license.
f94a336ea86ffull audit observations/trust-audit/mcp-server/aashari__atlassian-bitbucket.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-06 | f94a336ea86f | CAUTION | B | 88 | first audit |
Questions
What is the Atlassian Bitbucket MCP server?
Node.js/TypeScript MCP server for Atlassian Bitbucket. Enables AI systems (LLMs) to interact with workspaces, repositories, and pull requests via tools (list, get, comment, search). Connects AI directly to version control workflows through the standard MCP interface.
What tools does Atlassian Bitbucket expose?
6 in total: 2 read-only, 3 that write, and 1 that can delete or overwrite (bb_delete). Every one is listed on this page with its risk.
Is Atlassian Bitbucket safe to connect to an agent?
With care. The audit graded it B (88/100) and found 7 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Atlassian Bitbucket need?
It reads ATLASSIAN_API_TOKEN and ATLASSIAN_BITBUCKET_APP_PASSWORD from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Atlassian Bitbucket run?
It speaks stdio and streamable-http, so it runs as a local process your client starts.
How current is this page?
The grade is for one exact copy of the source (f94a336ea86f), read on 2026-10-06. The repository is watched and re-audited when it changes.