AgentArmorHQ
Sign in

mcp-atlassian

MCP server · GitHub · ★ 6.1k · graded 2026-10-21Source linked

MCP server for Atlassian tools (Confluence, Jira)

6 incidents on file

Use this only if you fully trust the people prompting Claude and have restricted your Atlassian API credentials to the minimum necessary projects and permissions.

Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee.

Was this verdict for MCP Atlassian helpful?

What it can access

  • Local filesNo local folder access notedLOW
  • Command executionNo shell command runner notedLOW
  • Network reachConnects to outside service APINOTED
  • CredentialsRequires API key or tokenREVIEW
  • Package sourceGitHub (sooperset/mcp-atlassian)PUBLIC

Inferred from this listing’s public package details and description. Check the project’s source before installing.

Install

No npm or PyPI package is listed. Install from source: github.com/sooperset/mcp-atlassian ↗

All setup options ↓

Check this skillWatch it in my stackCompareREADME badgeView project

Everything known

1 critical incident, 4 high incidents and 1 medium incident on record. The newest is from 2026-09-22. Every report lists a fix. Use 0.22.0 or later to get them all.

6 incidents · 0 advisories · 0 news articles · 19 community threads · checked 2026-10-30

Popularity grade: B (from public signals such as stars and downloads, not a code review). Graded 2026-10-21.

Showing 1-10 of 25Showing all 25Showing 6 incidents of 25Showing 19 community threads of 25

  1. IncidentAuthentication bypass in mcp-atlassian HTTP transportAgentArmorHQ incident library · 2026-09-22 · Severity: Critical · Fixed in 0.22.0
  2. IncidentMCP Atlassian: HTTP upload tools accept arbitrary server-local file pathsAgentArmorHQ incident library · 2026-09-22 · Severity: High · Fixed in 0.22.0
  3. IncidentMCP Atlassian: Insecure File Permissions on OAuth Token StorageAgentArmorHQ incident library · 2026-09-22 · Severity: Medium · Fixed in 0.22.0
  4. IncidentMCP Atlassian: SSRF Protection BypassAgentArmorHQ incident library · 2026-09-22 · Severity: High · Fixed in 0.22.0
  5. Incidentmcp-atlassian confluence_upload_attachment tool reads any local file and uploads it to an attacker-chosen Confluence hostAgentArmorHQ incident library · 2026-09-22 · Severity: High · Fixed in 0.22.0
  6. Incidentmcp-atlassian has an incomplete SSRF remediationAgentArmorHQ incident library · 2026-09-22 · Severity: High · Fixed in 0.22.0
  7. Communityconfluence_upload_attachment always fails on Confluence Data CenterAgentArmorHQ community · 2026-10-26
  8. CommunityDoes mcp-atlassian support Jira Service Management (JSM) tools?AgentArmorHQ community · 2026-10-26
  9. CommunityHow to get available values for a Jira custom field in mcp-atlassian?AgentArmorHQ community · 2026-10-26
  10. CommunityHow to list Jira issue types and required fields before creating an issue with mcp-atlassian?AgentArmorHQ community · 2026-10-26
  11. CommunityHow to mention users (ADF mention nodes) in mcp-atlassian jira_add_comment?AgentArmorHQ community · 2026-10-26
  12. Communityjira_create_issue fails for subtasks with generic 'Error calling tool' in mcp-atlassianAgentArmorHQ community · 2026-10-26
  13. Communityjira_search fails with 'API has been removed' (CHANGE-2046) in mcp-atlassian 0.11.9 on Jira CloudAgentArmorHQ community · 2026-10-26
  14. Communitymcp-atlassian crashes at startup: cannot import name 'FakeConnection' from 'fakeredis.aioredis'AgentArmorHQ community · 2026-10-26
  15. Communitymcp-atlassian crashes with Pydantic 2.12.0: 'cannot specify both default and default_factory'AgentArmorHQ community · 2026-10-26
  16. Communitymcp-atlassian Docker fails on startup with 'ValueError: I/O operation on closed file' — fixed?AgentArmorHQ community · 2026-10-26
  17. Communitymcp-atlassian ignores `Authorization: Token` header; how to pass a PAT via headers?AgentArmorHQ community · 2026-10-26
  18. Communitymcp-atlassian Jira search_issues: 'requested API has been removed' error and total -1AgentArmorHQ community · 2026-10-26
  19. Communitymcp-atlassian stdio: session.list_tools() returns empty array — why?AgentArmorHQ community · 2026-10-26
  20. Communitymcp-atlassian: 'JiraConfig' object has no attribute 'read_only' when calling create_issueAgentArmorHQ community · 2026-10-26
  21. Communitymcp-atlassian: 'user auth_type is oauth' error despite PAT Server/Data Center configAgentArmorHQ community · 2026-10-26
  22. Communitymcp-atlassian: Copilot coding agent retrieves 0 tools from Docker MCP serverAgentArmorHQ community · 2026-10-26
  23. CommunityOAuth 2.0 for Confluence Data Center (on-prem) in mcp-atlassian?AgentArmorHQ community · 2026-10-26
  24. CommunityPydantic ValidationError in mcp-atlassian jira_search when descriptions are in ADF formatAgentArmorHQ community · 2026-10-26
  25. CommunityWhy does confluence_reply_to_comment create a footer comment instead of an inline reply?AgentArmorHQ community · 2026-10-26

Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.

Check a specific version →

About MCP Atlassian

This is a connector that links Claude to Atlassian tools like Confluence (a documentation platform) and Jira (a project tracking tool). It lets Claude read and potentially modify content, tickets, and project information stored in those systems.

Who it’s for

Teams using Atlassian tools who want Claude to help search documents, look up tickets, or automate Jira tasks. It's for developers or AI builders setting up integrations between Claude and Atlassian.

Alternatives

  • Jira's native API integrations with AI tools.
  • Atlassian's official AI features (where available in your Atlassian plan).
  • Generic database connectors that query Atlassian data more strictly.
  • Custom-built integrations with tighter permission controls.

Setup

Check these steps against the project’s own instructions before running anything.

Follow the project's README at https://github.com/sooperset/mcp-atlassian (opens external site) for installation and configuration instructions. Typically requires adding API credentials (username and API token from your Atlassian account) to authenticate the connection.

Why this grade

BB — Some risk signals

Signal-based grade (4/7 points): very widely starred on GitHub, public source code. This reflects adoption and transparency, not a code review.

Popularity and upkeep

41/100
GitHub stars
6.1k
Listing last refreshed
2026-10-29

These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.

Risks to watch for

  • Account access: Whoever sets this up must provide Atlassian API credentials, giving the connector full access to any Confluence pages and Jira tickets those credentials can reach.
  • Data exposure: Claude could accidentally leak confidential project details, private tickets, or internal documentation if asked the wrong questions.
  • Malicious prompts: An attacker could ask Claude to search for and summarize sensitive tickets or confidential design documents.
  • Injection attacks: Specially crafted text in Jira tickets or Confluence pages could trick Claude into performing unintended actions or ignoring safety guidelines.
  • Token leaks: API credentials could be exposed in logs, error messages, or Claude's responses if not handled carefully.

How to lower the risk

Least-privilege permissions

  • Create an Atlassian API token with access only to required projects, not your entire workspace.
  • Use a dedicated Atlassian user account for this connector instead of your personal account.

Network isolation

  • Run this connector on a trusted network, not on shared or public machines.
  • Monitor outbound API calls to Atlassian to detect unexpected data requests.

Monitoring

  • Log all queries Claude makes to Atlassian and review them regularly.
  • Check your Atlassian API audit logs for unusual access patterns.

Red flags to watch for

  • Claude suddenly asking to search for or summarize tickets you didn't mention.
  • Unexpected changes to Jira tickets or Confluence pages after Claude interactions.
  • Error messages containing your API token or account credentials.

Questions

How do I install MCP Atlassian?

MCP Atlassian does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/sooperset/mcp-atlassian.

Are there security reports about MCP Atlassian?

6 reports were found for this package in our research. Titles and dates (AgentArmorHQ incident library) are listed in the Reports section above. MCP Atlassian currently holds Grade B (Some risk signals) based on public adoption and transparency signals. Key risk areas to watch include account access, data exposure, malicious prompts.

Is MCP Atlassian actively maintained?

MCP Atlassian has 6.1k GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/sooperset/mcp-atlassian before pinning it in production.

What are alternatives to MCP Atlassian?

Notable alternatives to MCP Atlassian include Jira's native API integrations, Atlassian's official AI features, Generic database connectors, Custom-built integrations. You can also compare MCP Atlassian side by side with other MCP servers in the Related tools section on this page.

README badge and team notes

Maintain or use MCP Atlassian? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.

AgentArmorHQ Risk Grade B for MCP Atlassian

GitHub README Markdown:

markdown
[![AgentArmorHQ Risk Grade for MCP Atlassian](https://agentarmorhq.com/api/badge/sooperset-mcp-atlassian)](https://agentarmorhq.com/skills/sooperset-mcp-atlassian)

HTML embed:

html
<a href="https://agentarmorhq.com/skills/sooperset-mcp-atlassian"><img src="https://agentarmorhq.com/api/badge/sooperset-mcp-atlassian" alt="AgentArmorHQ Risk Grade for MCP Atlassian" height="20" /></a>

Terminal check:

terminal
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "sooperset-mcp-atlassian"

Share with your security lead

Need sign-off to use mcp-atlassian? Copy this note for Slack, a ticket or a pull request.

### AgentArmorHQ Security Review Memo: mcp-atlassian
- **Listing URL:** https://agentarmorhq.com/skills/sooperset-mcp-atlassian
- **Type:** App connector
- **Risk Grade:** Grade B (Some risk signals)
- **Outside Security Advisories on File:** 6
- **Public Adoption:** 6.1k GitHub stars

#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** Requires API key or token
- **Package source:** GitHub (sooperset/mcp-atlassian)

#### Recommended Hardened Setup
- **Source Repo:** https://github.com/sooperset/mcp-atlassian
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.

_Based on public adoption and transparency signals as of Oct 21, 2026. Our opinion, not a code audit or security guarantee._

Key facts

Type
App connector
Publisher
sooperset
Source code
github.com/sooperset/mcp-atlassian
Est. context load
~700 tokens / turn (~4 tool schemas, 0.35% of 200k context)
Popularity
6.1k GitHub stars
Last updated
2026-10-29
Last graded
2026-10-21

Community

Discussions for MCP Atlassian

Ask questions or share configuration tips. Governed by our Community Rules & Terms.

No posts match this filter yet.

Be the first to ask a question or share a working tip.

Was this listing for MCP Atlassian helpful?

Check before you install, in Claude

Your assistant answers Block, Review or No known issues for any package before it installs it.

Get this check inside Claude