GPT-5.6 (Sol / Terra / Luna) is now evaluated on TrustVector โ€” with day-1 independent verification, incl. METR's benchmark-cheating findings.

Read the evaluation
Evaluation record ยท mcp-server-atlassian

MCP Atlassian Server

vhosted remote (GA 2026-02)

Atlassian

MCPproject-managementjiramcpmodel-context-protocol
79
Strong
About This MCP

Official Atlassian (Rovo) MCP server, generally available since February 2026 as a hosted remote at https://mcp.atlassian.com/v1/mcp (OAuth 2.1 via /v1/mcp/authv2, or API-token auth for machine-to-machine use). Connects Jira, Confluence, Jira Service Management, Bitbucket, and Compass to AI models for project management, issue tracking, and knowledge base operations. The legacy /v1/sse endpoint is unsupported after 2026-06-30.

Last Evaluated: July 9, 2026
Official Website

Trust Vector Analysis

Dimension Breakdown

๐Ÿš€Performance & Reliability
+
api reliability

API stability analysis

Evidence
Atlassian Cloud API โ€” Built on Atlassian's reliable REST APIs with 99.9% uptime
highVerified: 2026-07-09
issue operation success

Operation success testing

Evidence
Atlassian MCP Server โ€” High success rate for issue and page operations
highVerified: 2026-07-09
rate limit handling

Rate limiting behavior testing

Evidence
Atlassian Rate Limits โ€” Respects Atlassian rate limits with retry logic
mediumVerified: 2026-07-09
search accuracy

Search result quality assessment

Evidence
Jira Search API โ€” Powerful JQL-based search with good accuracy
highVerified: 2026-07-09
error recovery

Error handling testing

Evidence
Implementation Review โ€” Handles API errors with retry and graceful fallback
mediumVerified: 2026-07-09
๐Ÿ›ก๏ธSecurity
+
authentication security

Authentication mechanism review

Evidence
Atlassian Authentication โ€” Uses Atlassian API tokens or OAuth 2.0 for secure authentication
Atlassian Support - Configuring OAuth 2.1 (Rovo MCP Server) โ€” Hosted Rovo MCP server uses browser-based OAuth 2.1 (endpoint https://mcp.atlassian.com/v1/mcp/authv2); API-token auth added for machine-to-machine use without an interactive consent screen
highVerified: 2026-07-09
token exposure risk

Token security analysis

Evidence
MCP Security Model โ€” API token stored locally; AI can perform actions within token scope
highVerified: 2026-07-09
permission scope control

Permission scope testing

Evidence
Atlassian Permissions โ€” Respects Jira/Confluence permissions but requires careful token scoping
mediumVerified: 2026-07-09
data modification risk

Operation authorization testing

Evidence
Security Analysis โ€” AI can create, modify, and delete issues and pages
highVerified: 2026-07-09
audit logging

Audit logging review

Evidence
Atlassian Audit Log โ€” All operations logged in Atlassian audit system
highVerified: 2026-07-09
cross project access

Access boundary testing

Evidence
Implementation Review โ€” Can access all projects/spaces within token permissions
mediumVerified: 2026-07-09
๐Ÿ”’Privacy & Compliance
+
project data exposure

Data flow analysis

Evidence
MCP Data Flow โ€” Jira issues and Confluence pages sent to LLM provider for analysis
highVerified: 2026-07-09
sensitive issue protection

Privacy controls assessment

Evidence
Security Analysis โ€” No built-in filtering for sensitive issues or confidential pages
mediumVerified: 2026-07-09
team member privacy

User privacy assessment

Evidence
Privacy Analysis โ€” User names, emails, and activity data may be exposed
mediumVerified: 2026-07-09
third party data sharing

Data sharing analysis

Evidence
LLM Provider Policies โ€” Project data shared with LLM provider per their privacy policy
highVerified: 2026-07-09
attachment handling

File handling assessment

Evidence
Implementation Review โ€” May access and transmit issue attachments and page attachments
mediumVerified: 2026-07-09
๐Ÿ‘๏ธTrust & Transparency
+
documentation quality

Documentation completeness review

Evidence
Atlassian MCP Docs โ€” Comprehensive documentation with Jira and Confluence examples
highVerified: 2026-07-09
operation visibility

Logging and traceability assessment

Evidence
Atlassian Audit Log โ€” All operations logged in Atlassian audit trail and MCP logs
highVerified: 2026-07-09
open source transparency

Source code review

Evidence
GitHub Repository โ€” Open source implementation from Atlassian
highVerified: 2026-07-09
api coverage clarity

API documentation review

Evidence
MCP Server Documentation โ€” Clear documentation of supported Jira and Confluence operations
mediumVerified: 2026-07-09
โš™๏ธOperational Excellence
+
ease of setup

Setup complexity assessment

Evidence
Setup Documentation โ€” Requires Atlassian API token and site configuration
Atlassian - Remote MCP Server โ€” Hosted remote requires no install: connect to https://mcp.atlassian.com/v1/mcp and complete browser OAuth 2.1 (or configure an API token)
highVerified: 2026-07-09
api performance

Performance benchmarking

Evidence
Atlassian API Performance โ€” Response times vary (typically 200-800ms); depends on query complexity
mediumVerified: 2026-07-09
reliability

Reliability analysis

Evidence
Atlassian Cloud Status โ€” Depends on Atlassian Cloud uptime (99.9% SLA)
highVerified: 2026-07-09
feature coverage

Feature coverage assessment

Evidence
Atlassian MCP Server โ€” Covers Jira issues, JQL search, Confluence pages, and spaces
Atlassian MCP Server (official repo) โ€” Coverage expanded beyond Jira/Confluence to Jira Service Management, Bitbucket, and Compass
highVerified: 2026-07-09
community adoption

Community activity analysis

Evidence
GitHub Community โ€” Growing adoption among Atlassian users
Atlassian Community - Rovo MCP server GA announcement โ€” Rovo MCP server generally available (GA February 2026) with an active dedicated community forum
mediumVerified: 2026-07-09
Strengths
  • +Official Atlassian implementation with deep Jira and Confluence expertise
  • +Hosted remote (Rovo MCP Server) generally available since 2026-02 with OAuth 2.1 or API-token auth
  • +Coverage spans Jira, Confluence, Jira Service Management, Bitbucket, and Compass for project management and documentation
  • +Built on reliable Atlassian Cloud APIs with strong SLAs
  • +Full operation auditability through Atlassian audit logs
  • +Open source with Atlassian support
  • +Powerful JQL search for complex issue queries
Limitations
  • !Jira issues and Confluence pages exposed to LLM provider
  • !Risk of unintended issue creation or modification
  • !No built-in filtering for sensitive or confidential content
  • !May expose team member names, emails, and activity patterns
  • !Subject to Atlassian API rate limits
  • !Attachments and file content may be transmitted to LLM provider
  • !Legacy SSE endpoint (https://mcp.atlassian.com/v1/sse) unsupported after 2026-06-30; clients must migrate to /v1/mcp
Metadata
license: MIT
supported platforms
0: All platforms with Node.js/Python
programming languages
0: TypeScript
1: Python
mcp version: 1.0
github repo: https://github.com/atlassian/atlassian-mcp-server
api dependency: Jira REST API, Confluence REST API, Jira Service Management, Bitbucket, Compass
authentication: OAuth 2.1 (browser flow) or Atlassian API token (machine-to-machine)
remote endpoint: https://mcp.atlassian.com/v1/mcp (OAuth: https://mcp.atlassian.com/v1/mcp/authv2)
remote ga date: 2026-02
deprecated endpoint: https://mcp.atlassian.com/v1/sse (unsupported after 2026-06-30)
first release: 2024-11
maintained by: Atlassian
status: Active - Atlassian Rovo MCP Server GA since 2026-02
transport types
0: streamable-http (hosted remote)

Use Case Ratings

code generation

Useful for issue tracking and documentation generation in development workflows

customer support

Excellent for support ticket management and knowledge base access

content creation

Great for creating and managing documentation in Confluence

data analysis

Good for analyzing project metrics, sprint data, and team performance

research assistant

Useful for researching project history and knowledge base content

legal compliance

Moderate risk; careful consideration needed for confidential projects

healthcare

Risk of exposing patient project data; requires careful access controls

financial analysis

Moderate risk for financial project management; requires data controls

education

Excellent for managing educational projects and course documentation

creative writing

Good for managing writing projects and collaboration in Confluence