Atlassian Integration

Overview

From the repository's own README, as read at the audited commit.

# MCP Atlassian![PyPI Version](https://img.shields.io/pypi/v/mcp-atlassian)![PyPI - Downloads](https://img.shields.io/pypi/dm/mcp-atlassian)![PePy - Total Downloads](https://static.pepy.tech/personalized-badge/mcp-atlassian?period=total&units=international_system&left_color=grey&right_color=blue&left_text=Total%20Downloads)[![Run Tests](https://github.com/sooperset/mcp-atlassian/actions/workflows/tests.yml/badge.svg)](https://github.com/sooperset/mcp-atlassian/actions/workflows/tests.yml)![License](https://img.shields.io/github/license/sooperset/mcp-atlassian)[![Docs](https://img.shields.io/badge/docs-mintlify-blue)](https://mcp-atlassian.soomiles.com)Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Supports both Cloud and Server/Data Center deployments.https://github.com/user-attachments/assets/35303504-14c6-4ae4-913b-7c25ea511c3e<details><summary>Confluence Demo</summary>https://github.com/user-attachments/assets/7fe9c488-ad0c-4876-9b54-120b666bb785</details>## Quick Start### 1. Get Your API TokenGo to https://id.atlassian.com/manage-profile/security/api-tokens and create a token.> For Server/Data Center, use a Personal Access Token instead. See [Authentication](https://mcp-atlassian.soomiles.com/docs/authentication).### 2. Configure Your IDEAdd to your Claude Desktop or Cursor MCP configuration:```json{  "mcpServers": {    "mcp-atlassian": {      "command": "uvx",      "args": ["mcp-atlassian"],      "env": {        "JIRA_URL": "https://your-company.atlassian.net",        "JIRA_USERNAME": "[email protected]",        "JIRA_API_TOKEN": "your_api_token",        "CONFLUENCE_URL": "https://your-company.atlassian.net/wiki",        "CONFLUENCE_USERNAME": "[email protected]",        "CONFLUENCE_API_TOKEN": "your_api_token"      }    }  }}```> **Server/Data Center users**: Use `JIRA_PERSONAL_TOKEN` instead of `JIRA_USERNAME` + `JIRA_API_TOKEN`. See [Authentication](https://mcp-atlassian.soomiles.com/docs/authentication) for detai

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add mcp-atlassian --env ATLASSIAN_OAUTH_ACCESS_TOKEN=${ATLASSIAN_OAUTH_ACCESS_TOKEN} --env ATLASSIAN_OAUTH_ALLOWED_CLIENT_REDIRECT_URIS=${ATLASSIAN_OAUTH_ALLOWED_CLIENT_REDIRECT_URIS} --env ATLASSIAN_OAUTH_ALLOWED_GRANT_TYPES=${ATLASSIAN_OAUTH_ALLOWED_GRANT_TYPES} --env ATLASSIAN_OAUTH_CLIENT_ID=${ATLASSIAN_OAUTH_CLIENT_ID} -- uvx mcp-atlassian

{
  "mcpServers": {
    "mcp-atlassian": {
      "command": "uvx",
      "args": [
        "mcp-atlassian"
      ],
      "env": {
        "ATLASSIAN_OAUTH_ACCESS_TOKEN": "${ATLASSIAN_OAUTH_ACCESS_TOKEN}",
        "ATLASSIAN_OAUTH_ALLOWED_CLIENT_REDIRECT_URIS": "${ATLASSIAN_OAUTH_ALLOWED_CLIENT_REDIRECT_URIS}",
        "ATLASSIAN_OAUTH_ALLOWED_GRANT_TYPES": "${ATLASSIAN_OAUTH_ALLOWED_GRANT_TYPES}",
        "ATLASSIAN_OAUTH_CLIENT_ID": "${ATLASSIAN_OAUTH_CLIENT_ID}"
      }
    }
  }
}

Exposed tools (4) 4 read · 0 write · 0 destructive

Details

Source

sooperset/mcp-atlassian

PyPI

mcp-atlassian

Transports

sse · stdio · streamable-http

Credentials it reads

ATLASSIAN_OAUTH_ACCESS_TOKENATLASSIAN_OAUTH_ALLOWED_CLIENT_REDIRECT_URISATLASSIAN_OAUTH_ALLOWED_GRANT_TYPESATLASSIAN_OAUTH_CLIENT_IDATLASSIAN_OAUTH_CLIENT_SECRETATLASSIAN_OAUTH_CLOUD_IDATLASSIAN_OAUTH_ENABLEATLASSIAN_OAUTH_INSTANCE_URLATLASSIAN_OAUTH_REDIRECT_URIATLASSIAN_OAUTH_SCOPECLOUD_E2E_API_TOKENCLOUD_E2E_JSM_ISSUE_KEY

License

MIT

Stars

5,896 · pushed 0d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

none-observed

Network

declared (13 observation(s))

Shell

none-observed

Dependencies

pinned

Secrets in source

found

Findings (25)

blocked_hostnames = {"localhost", "metadata.google.internal"}

super().cert_verify(conn, url, verify=False, cert=cert)

verify=False,  # Always disable SSL verification for this adapter

logger.warning(f"TOOLSETS: unknown toolset name '{token}' — ignoring.")

"exfiltration."

#ATLASSIAN_OAUTH_ALLOWED_CLIENT_REDIRECT_URIS=http://localhost:*,http://127.0.0.1:*,https://chatgpt.com/connector_platform_oauth_redirect

"http://127.0.0.1:*",

map(ord, "")  # ZWSP, ZWNJ, ZWJ, word-joiner, BOM

token="test-personal-access-token",

token="test-personal-access-token",

.mintignore

.pre-commit-config.yaml

.worktreeinclude

unpickled_error = pickle.loads(pickled_data)

"https://example.com/file", "../../../etc/passwd"

"../../../etc/passwd",

"normal/../../../etc/shadow",

"CC-1/../../PROJ-2",

validate_safe_path("../../etc/passwd", base_dir=tmp_path)

secret.write_bytes(b"SECRET-EXFIL")

secret.write_bytes(b"SECRET-EXFIL")

secret.write_bytes(b"SECRET-EXFIL")

secret.write_text("SECRET-EXFIL", encoding="utf-8")

internal_redirect.headers = {"Location": "http://169.254.169.254/latest/meta-data/"}

result = validate_url_for_ssrf("http://169.254.169.254")

Gates applied: no_behavioural_pass.

Audited 2026-09-15 · audit v0.4.0 · source sha 1c8f08d9a884 · full audit: observations/trust-audit/mcp-server/sooperset__atlassian-integration.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions