69
/ 100
1 month ago
glama

mcp-atlassian

An MCP server for integrating with Atlassian products including Confluence, Jira, Bitbucket, and Xray for Jira, enabling AI-powered operations like searching, creating, and updating issues, pages, and test results.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 8 credentials: ATLASSIAN_OAUTH_CLIENT_SECRET, CONFLUENCE_API_TOKEN, CONFLUENCE_PERSONAL_TOKEN, JIRA_API_TOKEN, JIRA_PERSONAL_TOKEN, ATLASSIAN_OAUTH_ACCESS_TOKEN, BITBUCKET_APP_PASSWORD, BITBUCKET_PERSONAL_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configATLASSIAN_OAUTH_CLIENT_IDUnused Variables: The standard OAuth client variables (, ATLASSIAN_OAUTH_CLIENT_SECRET, ATLASSIAN_OAUTH_REDIRECT_URI, ATLASSIAN_OAUTH_SCOPE) are not used and can be omitted when configuring for BYOT.
🔐 secretATLASSIAN_OAUTH_CLIENT_SECRETUnused Variables: The standard OAuth client variables (ATLASSIAN_OAUTH_CLIENT_ID, , ATLASSIAN_OAUTH_REDIRECT_URI, ATLASSIAN_OAUTH_SCOPE) are not used and can be omitted when configuring for BYOT.
configATLASSIAN_OAUTH_REDIRECT_URIUnused Variables: The standard OAuth client variables (ATLASSIAN_OAUTH_CLIENT_ID, ATLASSIAN_OAUTH_CLIENT_SECRET, , ATLASSIAN_OAUTH_SCOPE) are not used and can be omitted when configuring for BYOT.
configATLASSIAN_OAUTH_SCOPE"": "read:jira-work write:jira-work read:confluence-content.all write:confluence-content offline_access",
configTRANSPORT
configPORT
configHOST
configSTREAMABLE_HTTP_PATH
configCLI_READ_ONLY_MODE
configCLI_JIRA_READ_ONLY_MODE
configCLI_CONFLUENCE_READ_ONLY_MODE
configCLI_BITBUCKET_READ_ONLY_MODE
configENABLED_TOOLSComma-separated list of tool names to enable (e.g., "confluence_search,jira_get_issue")
configCONFLUENCE_URL"": "https://your-company.atlassian.net/wiki",
configCONFLUENCE_USERNAME"": "your.email@company.com",
🔐 secretCONFLUENCE_API_TOKEN"": "your_confluence_api_token",
🔐 secretCONFLUENCE_PERSONAL_TOKEN"": "your_confluence_pat",
configJIRA_URL"": "https://your-company.atlassian.net",
configJIRA_USERNAME"": "your.email@company.com",
🔐 secretJIRA_API_TOKEN"": "your_jira_api_token",
🔐 secretJIRA_PERSONAL_TOKEN"": "your_jira_pat",
configATLASSIAN_OAUTH_CLOUD_ID(from wizard)
🔐 secretATLASSIAN_OAUTH_ACCESS_TOKENYour pre-existing OAuth 2.0 access token. (CLI: --oauth-access-token)
configREAD_ONLY_MODESet to true to disable write operations for all products
configJIRA_READ_ONLY_MODESet to true to disable write operations for Jira only
configCONFLUENCE_READ_ONLY_MODESet to true to disable write operations for Confluence only
configBITBUCKET_READ_ONLY_MODESet to true to disable write operations for Bitbucket only
configCONFLUENCE_SSL_VERIFY"": "false",
configCONFLUENCE_SPACES_FILTERFilter by space keys (e.g., "DEV,TEAM,DOC")
configJIRA_SSL_VERIFY"": "false"
configJIRA_PROJECTS_FILTERFilter by project keys (e.g., "PROJ,DEV,SUPPORT")
configBITBUCKET_URL"": "https://bitbucket.org",
configATLASSIAN_OAUTH_ENABLEdocker run -e =true -p 9000:9000 \
configBITBUCKET_USERNAME"": "your.email@company.com",
🔐 secretBITBUCKET_APP_PASSWORD"": "your_bitbucket_app_password"
🔐 secretBITBUCKET_PERSONAL_TOKEN
configBITBUCKET_WORKSPACES_FILTER
configBITBUCKET_HTTP_PROXY
configHTTP_PROXYSupports standard , HTTPS_PROXY, NO_PROXY, SOCKS_PROXY.
configBITBUCKET_HTTPS_PROXY
configHTTPS_PROXYSupports standard HTTP_PROXY, , NO_PROXY, SOCKS_PROXY.
configBITBUCKET_NO_PROXY
configNO_PROXYSupports standard HTTP_PROXY, HTTPS_PROXY, , SOCKS_PROXY.
configBITBUCKET_SOCKS_PROXY
configSOCKS_PROXYSupports standard HTTP_PROXY, HTTPS_PROXY, NO_PROXY, .
configCONFLUENCE_HTTP_PROXY
configCONFLUENCE_HTTPS_PROXY
configCONFLUENCE_NO_PROXYService-specific overrides are available (e.g., JIRA_HTTPS_PROXY, ).
configCONFLUENCE_SOCKS_PROXY
configJIRA_HTTP_PROXY
configJIRA_HTTPS_PROXYService-specific overrides are available (e.g., , CONFLUENCE_NO_PROXY).
configJIRA_NO_PROXY
configJIRA_SOCKS_PROXY
configMCP_SERVER_BASE_URL
configPOD_NAME
configREQUIRE_USERNAME
configHOSTNAME
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/sharkynd-mcp-atlassian-1dox2t)](https://m8ven.ai/mcp/sharkynd-mcp-atlassian-1dox2t)
commit: 15534085341f129d85fb2f67d7ec1f75bd5b6d6a
code hash: dfb3cf0bbdcbfafd40157f97479ad16212e2731ba3fec32ffe3970ea365ac4a8
verified: 6/21/2026, 10:44:21 AM
view raw JSON →