/ 100

1 month ago

mcp_so

MCP Atlassian

MCP server for Atlassian tools (Confluence, Jira)

→ sooperset/mcp-atlassian · listed on mcp_so

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

mcp.so Official

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

73 tools verified — handlers match their declared behaviour

43 read-only tools verified — handlers contain no write/delete/exec

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 12 credentials: ATLASSIAN_OAUTH_CLIENT_SECRET, CONFLUENCE_API_TOKEN, CONFLUENCE_PERSONAL_TOKEN, JIRA_API_TOKEN, JIRA_PERSONAL_TOKEN, ATLASSIAN_OAUTH_ACCESS_TOKEN, CONFLUENCE_CLIENT_KEY, CONFLUENCE_CLIENT_KEY_PASSWORD, JIRA_CLIENT_KEY, JIRA_CLIENT_KEY_PASSWORD, JIRA_OAUTH_CLIENT_SECRET, CONFLUENCE_OAUTH_CLIENT_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configATLASSIAN_OAUTH_CLIENT_ID

🔐 secretATLASSIAN_OAUTH_CLIENT_SECRET

configATLASSIAN_OAUTH_REDIRECT_URI

configATLASSIAN_OAUTH_SCOPE

configTRANSPORT

configPORT

configHOST

configSTREAMABLE_HTTP_PATH

configENABLED_TOOLS

configTOOLSETS

configCONFLUENCE_URL— "": "https://your-company.atlassian.net/wiki",

configCONFLUENCE_USERNAME— "": "your.email@company.com",

🔐 secretCONFLUENCE_API_TOKEN— "": "your_api_token"

🔐 secretCONFLUENCE_PERSONAL_TOKEN

configJIRA_URL— "": "https://your-company.atlassian.net",

configJIRA_USERNAME— "": "your.email@company.com",

🔐 secretJIRA_API_TOKEN— "": "your_api_token",

🔐 secretJIRA_PERSONAL_TOKEN— Server/Data Center users: Use instead of JIRA_USERNAME + JIRA_API_TOKEN. See [Authentication](https://mcp-atlassian.soomiles.com/docs/authentication) for details.

configATLASSIAN_OAUTH_CLOUD_ID

🔐 secretATLASSIAN_OAUTH_ACCESS_TOKEN

configREAD_ONLY_MODE

configCONFLUENCE_SSL_VERIFY

configCONFLUENCE_SPACES_FILTER

configJIRA_SSL_VERIFY

configJIRA_PROJECTS_FILTER

configNO_PROXY

configATLASSIAN_OAUTH_ENABLE

configCONFLUENCE_HTTP_PROXY

configHTTP_PROXY

configCONFLUENCE_HTTPS_PROXY

configHTTPS_PROXY

configCONFLUENCE_NO_PROXY

configCONFLUENCE_SOCKS_PROXY

configSOCKS_PROXY

configCONFLUENCE_CLIENT_CERT

🔐 secretCONFLUENCE_CLIENT_KEY

🔐 secretCONFLUENCE_CLIENT_KEY_PASSWORD

configCONFLUENCE_TIMEOUT

configJIRA_SLA_METRICS

configJIRA_SLA_WORKING_HOURS_START

configJIRA_SLA_WORKING_HOURS_END

configJIRA_SLA_WORKING_DAYS

configJIRA_SLA_TIMEZONE

configJIRA_HTTP_PROXY

configJIRA_HTTPS_PROXY

configJIRA_NO_PROXY

configJIRA_SOCKS_PROXY

configDISABLE_JIRA_MARKUP_TRANSLATION

configJIRA_CLIENT_CERT

🔐 secretJIRA_CLIENT_KEY

🔐 secretJIRA_CLIENT_KEY_PASSWORD

configJIRA_TIMEOUT

configATLASSIAN_OAUTH_ALLOWED_CLIENT_REDIRECT_URIS

configATLASSIAN_OAUTH_ALLOWED_GRANT_TYPES

configATLASSIAN_OAUTH_INSTANCE_URL

configJIRA_OAUTH_CLIENT_ID

configCONFLUENCE_OAUTH_CLIENT_ID

🔐 secretJIRA_OAUTH_CLIENT_SECRET

🔐 secretCONFLUENCE_OAUTH_CLIENT_SECRET

configPUBLIC_BASE_URL

configMCP_ALLOWED_URL_DOMAINS

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/sooperset-mcp-atlassian-r5am1z)](https://m8ven.ai/mcp/sooperset-mcp-atlassian-r5am1z)

commit: d8bc78698a63cb6b321c7ca796d6329d448f7f6d

code hash: 626b790e4f38a718865705d04b74cbc1ef4e073fe387ca097ab46b51af5606a0

verified: 6/17/2026, 11:46:46 AM

view raw JSON →