Back to MCP Trust Indexm8ven
73
/ 100
1 day ago
glama

Confluence MCP Server

A Model Context Protocol (MCP) server that connects AI agents to Confluence Cloud. Agents can search, read, create, and update Confluence content — pages, comments, links, images, and labels.

→ skshatriya95/confluence-mcp-server· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: TEST_BEARER, CONFLUENCE_API_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretTEST_BEARER
configCONFLUENCE_AUTH_MODE— no oauth (default) or token.
configATLASSIAN_AUDIENCE— Overridable via env: ATLASSIAN_AUTHORIZE_URL, .
configHOST— / PORT no Bind address / port (default 0.0.0.0:8000).
configPORT— HOST / no Bind address / port (default 0.0.0.0:8000).
configCONFLUENCE_READONLY— Safety by design: write tools support a preview (dry-run) mode; update_page's replace_section is idempotent; =true disables all writes; there is no delete tool.
configCONFLUENCE_BASE_URL— =https://your-site.atlassian.net/wiki
configCONFLUENCE_EMAIL— =you@example.com
🔐 secretCONFLUENCE_API_TOKEN— =... (https://id.atlassian.com/manage-profile/security/api-tokens)
configCONFLUENCE_DEFAULT_SPACE— no Default space key for create_page.
configCONFLUENCE_SITE_URL— no (oauth) Pin to one site if the token can access several.
configMCP_ALLOWED_HOSTS— no Comma-separated Host values to allow (turns on MCP DNS-rebinding protection). Default: disabled — appropriate behind an authenticating TLS gateway/ingress.
configMCP_ALLOWED_ORIGINS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/skshatriya95-confluence-mcp-server-wu93qq)](https://m8ven.ai/mcp/skshatriya95-confluence-mcp-server-wu93qq)
commit: 55ecfb03f3827263b9174a0a5baafe50afb80333
code hash: c269e55f1fb7288a85eaf589000d08788a959bc3e43387040d6b724a1918489f
verified: 7/30/2026, 9:08:19 AM
view raw JSON →