Jira MCP Server
Supercharge your AI assistant with seamless Jira integration. Enables AI assistants like GitHub Copilot and Claude to interact with your Jira Cloud instance.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
tezaswiraj7222
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.
These names and descriptions are the publisher's own, read from the source code. We print them as written. Our assessment is the findings above, not this list.
jira_get_boardsGet all Scrum and Kanban boards, optionally filtered by project or type.
jira_get_boardGet details of a specific board including configuration.
jira_get_board_configurationGet the configuration of a board including columns, estimation, and ranking.
jira_get_sprintsGet sprints for a board, optionally filtered by state.
jira_get_sprintGet details of a specific sprint.
jira_create_sprintCreate a new sprint on a board.
jira_update_sprintUpdate sprint details including name, dates, and goal.
jira_start_sprintStart a sprint that is in 'future' state.
jira_complete_sprintComplete an active sprint. Optionally move incomplete issues to another sprint or backlog.
jira_get_sprint_issuesGet all issues in a sprint.
jira_move_issues_to_sprintMove issues to a sprint.
jira_get_backlog_issuesGet issues in the backlog (not in any active sprint) for a board.
jira_move_issues_to_backlogMove issues from a sprint back to the backlog.
jira_rank_issuesChange the rank of issues on a board by placing them before or after another issue.
jira_get_attachmentsGet all attachments for an issue.
jira_upload_attachmentUpload a file attachment to an issue. Requires the file path on the local filesystem.
jira_get_attachment_metadataGet metadata for a specific attachment by ID.
jira_get_attachment_contentGet the content/download URL for an attachment. Returns the redirect URL or content depending on redirect setting.
_internal_jira_set_authUse when the user wants to connect Jira using Basic Auth (email + API token). This tool should only be called when the user explicitly provides credentials.
jira_oauth_get_auth_urlGenerate the OAuth 2.0 authorization URL that the user should visit to grant access. Returns the URL and required state parameter.
jira_oauth_exchange_codeExchange the authorization code for access tokens after the user has completed the OAuth flow.
jira_oauth_set_tokensSet OAuth tokens directly if you already have them (e.g., from a previous session or external OAuth flow).
jira_oauth_refreshManually refresh the OAuth access token using the refresh token.
jira_oauth_list_sitesList all Jira sites accessible with the current OAuth token.
jira_clear_authUse when the user asks to remove or reset stored Jira credentials.
jira_auth_statusCheck the current authentication status and type.
jira_bulk_edit_issuesEdit multiple issues at once. Supports bulk editing of labels, assignee, priority, components, and fix versions. Returns a taskId to track progress.
jira_bulk_watch_issuesAdd watchers to multiple issues at once. Returns a taskId to track progress.
jira_bulk_unwatch_issuesRemove watchers from multiple issues at once. Returns a taskId to track progress.
jira_get_bulk_operation_progressCheck the progress of an async bulk operation using its taskId.
jira_whoamiUse when the user asks who they are in Jira or wants to verify the Jira account in use.
jira_get_issuejira_search_issuesjira_search_issues_summaryjira_resolvePrimary routing tool. Use this tool first when the user intent is clear (get issue, search, or my issues) but the exact Jira tool to call is uncertain.
jira_get_issue_summaryjira_get_my_open_issuesjira_get_issue_commentsUse when the user asks for the discussion or comments on a specific ticket; returns a clean list.
jira_add_commentUse when the user asks to add a comment to a specific ticket; confirm intent before posting.
jira_list_projectsUse when the user asks which Jira projects they can access or wants a list of projects.
jira_get_projectUse when the user mentions a project key and asks for project details or metadata.
jira_create_issueCreate a new Jira issue. Requires project key, issue type, and summary at minimum.
jira_update_issueUpdate an existing Jira issue. Only provided fields will be modified.
jira_assign_issueAssign or unassign a Jira issue to a user.
jira_get_transitionsGet available workflow transitions for an issue. Use before transitioning to see valid options.
jira_transition_issueMove a Jira issue to a different status by executing a workflow transition.
jira_get_epicsGet epics for a board.
jira_get_epic_issuesGet all issues belonging to an epic.
jira_move_issues_to_epicMove issues to an epic.
jira_remove_issues_from_epicRemove issues from their epic (move to no epic).
jira_get_filtersGet saved filters, optionally filtered by name.
jira_get_filterGet details of a specific filter.
jira_create_filterCreate a new saved filter.
jira_update_filterUpdate an existing filter.
jira_get_my_filtersGet filters owned by the current user.
jira_get_favourite_filtersGet filters marked as favourite by the current user.
jira_get_dashboardsGet a list of dashboards. Can filter by favourite or owned dashboards.
jira_search_dashboardsSearch for dashboards by name, owner, or other criteria.
jira_get_dashboardGet details of a specific dashboard by ID.
jira_get_dashboard_gadgetsGet all gadgets on a dashboard.
jira_add_dashboard_gadgetAdd a gadget to a dashboard. Provide either moduleKey or uri to specify the gadget type.
jira_get_all_labelsGet all labels used across all issues in the Jira instance.
jira_add_labelsAdd, set, or remove labels on an issue. Use 'add' to append, 'set' to replace all, or 'remove' to delete specific labels.
jira_autocomplete_jqlGet autocomplete suggestions for JQL field values. Useful for building JQL queries interactively.
jira_validate_jqlValidate one or more JQL queries for syntax and semantic correctness.
jira_parse_jqlParse JQL queries and return their abstract syntax tree (AST) structure. Useful for understanding query structure.
jira_get_issue_typesGet available issue types, optionally filtered by project.
jira_get_prioritiesGet available priority levels for issues.
jira_get_statusesGet available statuses, optionally filtered by project.
jira_get_componentsGet components for a specific project.
jira_get_versionsGet versions for a specific project.
jira_search_usersSearch for Jira users by name, email, or username.
jira_get_changelogGet the history of changes for an issue.
jira_get_fieldsGet all available fields including custom fields.
jira_get_create_metadataGet metadata for creating issues in a project, including available issue types and their fields. Uses the modern non-deprecated API endpoints.
jira_get_edit_metadataGet metadata for editing a specific issue, including editable fields.
jira_get_issue_linksGet all linked issues for a specific issue.
jira_create_issue_linkCreate a link between two issues.
jira_get_link_typesGet available link types for linking issues.
jira_get_watchersGet the list of users watching an issue.
jira_add_watcherAdd a user to watch an issue.
jira_remove_watcherRemove a user from watching an issue.
jira_get_votesGet the vote count and voters for an issue.
jira_add_voteAdd your vote to an issue.
jira_remove_voteRemove your vote from an issue.
jira_add_worklogUse when the user wants to log time/work on a specific Jira ticket. Allows specifying time spent, start date/time, and an optional description.
jira_get_issue_worklogsjira_get_updated_worklog_idsGet IDs of worklogs that were created or updated since a specific date/time. Use this to discover worklogs for reporting purposes.
jira_get_worklogs_by_idsGet full worklog details for a list of worklog IDs. Use after getting IDs from jira_get_updated_worklog_ids.
jira_get_user_worklogsjira_get_deleted_worklog_idsGet IDs of worklogs that were deleted since a specific date/time. Useful for audit and sync purposes.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
When Vitest UI server is listening, arbitrary file can be read and executed
Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening
axios Vulnerable to Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`
axios Vulnerable to Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge
Axios is Vulnerable to Denial of Service via __proto__ Key in mergeConfig
JIRA_ACCEPTANCE_CRITERIA_FIELDCustom field ID for acceptance criteria —JIRA_API_TOKEN"": "your-api-token"JIRA_BASE_URL"": "https://your-domain.atlassian.net",JIRA_CLOUD_IDYour Jira Cloud ID ✅JIRA_EMAIL"": "your-email@example.com",JIRA_OAUTH_ACCESS_TOKENAccess token ✅JIRA_OAUTH_CLIENT_IDOAuth Client ID ✅JIRA_OAUTH_CLIENT_SECRETOAuth Client Secret ✅JIRA_OAUTH_REFRESH_TOKENRefresh token ⬜Tool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
91/91 tools missing one or more hints — jira_get_boards (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); jira_get_board (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); jira_get_board_configuration (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +88 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Tool handlers catch errors
5/8 tool handlers wrap calls in try/catch (63%)
Wrap each tool handler body in try/catch and return a structured error response.
Tool test coverage
Only 3/91 tools referenced in tests (3%)
Write tests that reference each tool by name so every tool has at least one test.
Production dependencies are patched
0 critical, 12 high severity in production deps — axios@1.13.4 (high), axios@1.13.4 (high)
Run npm audit fix, or upgrade the affected packages to a non-vulnerable version.
Dev dependencies
2 critical/high in dev-only deps (does not ship to users)
Upgrade dev dependencies when convenient.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/tezaswiraj7222/jira-mcp)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check