MCP Atlassian
io.github.sooperset/mcp-atlassian
Overview
Model Context Protocol server for Atlassian Jira and Confluence, supporting Cloud and Server/Data Center deployments with API token, PAT, OAuth, stdio, SSE, and Streamable HTTP transports.
Documentation
MCP Atlassian
MCP Atlassian is a Model Context Protocol server for Atlassian Jira and Confluence. It supports Cloud and Server/Data Center deployments.
Install and Launch
Recommended stdio launch:
{
"mcpServers": {
"mcp-atlassian": {
"command": "uvx",
"args": ["mcp-atlassian"],
"env": {
"JIRA_URL": "",
"JIRA_USERNAME": "",
"JIRA_API_TOKEN": "",
"CONFLUENCE_URL": "",
"CONFLUENCE_USERNAME": "",
"CONFLUENCE_API_TOKEN": ""
}
}
}
}
Docker is also documented with ghcr.io/sooperset/mcp-atlassian:latest. HTTP deployments can use --transport sse at /sse or --transport streamable-http at /mcp.
Capabilities
The server provides Jira and Confluence tools for search, page and issue retrieval, issue creation/update/transition, comments, attachments, Jira agile boards/sprints, fields, projects, users, worklogs, service desk queues/SLA metrics, Confluence pages, labels, spaces, and related workflows. The README lists 72 tools total and detailed tool docs are in the repository docs.
Authentication
Supported auth modes include Atlassian Cloud username/API token, Server/Data Center Personal Access Token, OAuth 2.0, bring-your-own OAuth token, and HTTP per-request headers for multi-user Streamable HTTP deployments. OAuth proxy discovery and dynamic client registration are opt-in with ATLASSIAN_OAUTH_PROXY_ENABLE=true.
Limits and Security
Atlassian credentials are sensitive and should be provided through environment variables, secrets, or secure client configuration. READ_ONLY_MODE=true disables write operations. Header-provided URLs are protected against SSRF, with MCP_ALLOWED_URL_DOMAINS available for trusted allowlists. Streamable HTTP OAuth/header auth can be disabled for proxy-injected headers with IGNORE_HEADER_AUTH=true.
Wardn Hub Source Review Notes
- Wardn import was called first but returned 404 with no usable imported serverJson; no imported transport fields were available to preserve.
- Package identifier and version are split: PyPI identifier
mcp-atlassian, version0.21.1. - The default launch args are only
["mcp-atlassian"]; optional auth, transport, filtering, and setup flags are listed as package arguments withincludeInLaunch=false. - Secret and user-specific values are empty. Non-secret defaults are included where documented or implemented.