Jira MCP Server
Provides AI models with full access to Jira Cloud functionality, enabling issue management, project tracking, sprint planning, and agile board operations through the Jira REST API v3 and Agile API 1.0.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
undici WebSocket client vulnerable to denial of service via cumulative fragment bypass
undici vulnerable to TLS certificate validation bypass via dropped requestTls in SOCKS5 ProxyAgent
undici WebSocket client vulnerable to denial of service via fragment count bypass
undici vulnerable to HTTP response queue poisoning via keep-alive socket reuse
undici vulnerable to Set-Cookie SameSite attribute downgrade via permissive substring matching
process.env. You'll be asked to provide them before it can run.ANTHROPIC_API_KEYDEEPSEEK_API_KEYGITHUB_MODELS_MODELGITHUB_REPOSITORYGITHUB_REPOSITORY_OWNERGITHUB_TOKENGOOGLE_API_KEYGOOGLE_MODEL_IDGROQ_API_KEYISSUE_NUMBERJIRA_API_TOKEN— API token from [Atlassian Account Settings](https://id.atlassian.com/manage-profile/security/api-tokens) YesJIRA_BENCH_TICKET_RICHJIRA_BENCH_TICKET_SIMPLEJIRA_CLOUD_ID— Cloud ID for scoped (ATATT/ATSTT) tokens; auto-fetched if omitted NoJIRA_DISABLED_ACTIONS— Comma-separated category.action blacklist. Enforced at the dispatch layer in both modes. NoJIRA_EMAIL— Atlassian account email YesJIRA_ENABLED_CATEGORIES— Comma-separated category whitelist. Empty = all 16 categories enabled. NoJIRA_HOST— Jira instance URL (e.g. https://yourcompany.atlassian.net) YesJIRA_MCP_SOCKET— Set JIRA_TOOL_MODE=code-api to expose a single MCP tool, jira_code_api. Calling it returns the path to the bundled jira-cli binary plus the address. The agent then drives Jira from a shell:JIRA_TOOL_MODE— "classic" (default — 16 consolidated tools) or "code-api" (one tool, agent drives via the bundled jira-cli shell binary) NoMAX_ISSUESMISTRAL_API_KEYOPENAI_API_KEYOPENROUTER_API_KEYPERPLEXITY_API_KEYPR_DIFF_FILEPR_NUMBERREPO_NAMEREPO_OWNERREQUIRED_LABELTEST_REPO_NAMETEST_REPO_OWNERUSE_GITHUB_MODELSUSE_MODEL_ROUTER[](https://m8ven.ai/mcp/scottlepp-jira-mcp-jydhgo)