atlassian-mcp-server

Compare original and translation side by side

🇺🇸

Original

English
🇨🇳

Translation

Chinese

Atlassian MCP Server

Atlassian MCP Server

Skill by ara.so — MCP Skills collection.
The Atlassian Rovo MCP Server is a cloud-based remote MCP server that bridges AI agents, IDEs, and other MCP clients with Atlassian Cloud (Jira, Confluence, Compass). It enables natural language interaction with Atlassian data using secure OAuth 2.1 or API token authentication, respecting user permissions.
ara.so提供的Skill — MCP Skills合集。
Atlassian Rovo MCP Server是一款基于云的远程MCP服务器,可将AI agents、IDE及其他MCP客户端与Atlassian Cloud(Jira、Confluence、Compass)连接起来。它支持通过安全的OAuth 2.1或API令牌认证与Atlassian数据进行自然语言交互,同时遵循用户权限设置。

What It Does

功能介绍

  • Search & Summarize: Query Jira issues, Confluence pages, and Compass components
  • Create & Update: Generate issues, pages, and components from natural language
  • Automate Workflows: Link content, bulk create items, extract data across Atlassian products
  • Respect Permissions: All actions honor existing Atlassian Cloud access controls
  • 搜索与总结:查询Jira问题、Confluence页面和Compass组件
  • 创建与更新:通过自然语言生成问题、页面和组件
  • 工作流自动化:关联内容、批量创建条目、跨Atlassian产品提取数据
  • 权限合规:所有操作均遵循Atlassian Cloud现有的访问控制规则

Server Endpoint

服务器端点

https://mcp.atlassian.com/v1/mcp
The server is hosted by Atlassian (remote MCP) — no local installation required. For desktop clients (Claude, Cursor, VS Code), you'll use the
mcp-remote
proxy package.
https://mcp.atlassian.com/v1/mcp
该服务器由Atlassian托管(远程MCP)——无需本地安装。对于桌面客户端(Claude、Cursor、VS Code),您需要使用
mcp-remote
代理包。

Installation & Configuration

安装与配置

For Desktop Clients (Claude, Cursor, VS Code)

桌面客户端(Claude、Cursor、VS Code)

1. Install mcp-remote Proxy

1. 安装mcp-remote代理

bash
undefined
bash
undefined

Using npm

使用npm

npm install -g @modelcontextprotocol/mcp-remote
npm install -g @modelcontextprotocol/mcp-remote

Using npx (no install)

使用npx(无需安装)

npx @modelcontextprotocol/mcp-remote
undefined
npx @modelcontextprotocol/mcp-remote
undefined

2. Configure Client

2. 配置客户端

Claude Desktop (
~/Library/Application Support/Claude/claude_desktop_config.json
on macOS):
json
{
  "mcpServers": {
    "atlassian-rovo": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/mcp-remote",
        "https://mcp.atlassian.com/v1/mcp"
      ],
      "env": {
        "MCP_REMOTE_AUTH_TYPE": "oauth"
      }
    }
  }
}
Cursor (
.cursor/config.json
in project root):
json
{
  "mcpServers": {
    "atlassian-rovo": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/mcp-remote",
        "https://mcp.atlassian.com/v1/mcp"
      ],
      "env": {
        "MCP_REMOTE_AUTH_TYPE": "oauth"
      }
    }
  }
}
VS Code (settings.json):
json
{
  "mcp.servers": {
    "atlassian-rovo": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/mcp-remote",
        "https://mcp.atlassian.com/v1/mcp"
      ],
      "env": {
        "MCP_REMOTE_AUTH_TYPE": "oauth"
      }
    }
  }
}
Claude Desktop(macOS路径:
~/Library/Application Support/Claude/claude_desktop_config.json
):
json
{
  "mcpServers": {
    "atlassian-rovo": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/mcp-remote",
        "https://mcp.atlassian.com/v1/mcp"
      ],
      "env": {
        "MCP_REMOTE_AUTH_TYPE": "oauth"
      }
    }
  }
}
Cursor(项目根目录下的
.cursor/config.json
):
json
{
  "mcpServers": {
    "atlassian-rovo": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/mcp-remote",
        "https://mcp.atlassian.com/v1/mcp"
      ],
      "env": {
        "MCP_REMOTE_AUTH_TYPE": "oauth"
      }
    }
  }
}
VS Code(settings.json):
json
{
  "mcp.servers": {
    "atlassian-rovo": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/mcp-remote",
        "https://mcp.atlassian.com/v1/mcp"
      ],
      "env": {
        "MCP_REMOTE_AUTH_TYPE": "oauth"
      }
    }
  }
}

3. Authentication Flow

3. 认证流程

On first use, the client will:
  1. Open a browser to Atlassian OAuth consent screen
  2. Prompt you to authorize access to Jira/Confluence/Compass
  3. Store credentials securely for future sessions
首次使用时,客户端将:
  1. 打开浏览器跳转至Atlassian OAuth授权页面
  2. 提示您授权访问Jira/Confluence/Compass
  3. 安全存储凭据以便后续会话使用

For Headless/API Token Authentication

无头/API令牌认证

Admins must first enable API token auth in Atlassian Administration.
json
{
  "mcpServers": {
    "atlassian-rovo": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/mcp-remote",
        "https://mcp.atlassian.com/v1/mcp"
      ],
      "env": {
        "MCP_REMOTE_AUTH_TYPE": "apitoken",
        "ATLASSIAN_EMAIL": "${ATLASSIAN_EMAIL}",
        "ATLASSIAN_API_TOKEN": "${ATLASSIAN_API_TOKEN}",
        "ATLASSIAN_CLOUD_ID": "${ATLASSIAN_CLOUD_ID}"
      }
    }
  }
}
Required environment variables:
  • ATLASSIAN_EMAIL
    : Your Atlassian account email
  • ATLASSIAN_API_TOKEN
    : Rovo MCP scoped API token (from Atlassian account settings)
  • ATLASSIAN_CLOUD_ID
    : Your site URL (e.g.,
    https://yoursite.atlassian.net
    )
管理员必须先在Atlassian管理后台启用API令牌认证。
json
{
  "mcpServers": {
    "atlassian-rovo": {
      "command": "npx",
      "args": [
        "-y",
        "@modelcontextprotocol/mcp-remote",
        "https://mcp.atlassian.com/v1/mcp"
      ],
      "env": {
        "MCP_REMOTE_AUTH_TYPE": "apitoken",
        "ATLASSIAN_EMAIL": "${ATLASSIAN_EMAIL}",
        "ATLASSIAN_API_TOKEN": "${ATLASSIAN_API_TOKEN}",
        "ATLASSIAN_CLOUD_ID": "${ATLASSIAN_CLOUD_ID}"
      }
    }
  }
}
必填环境变量:
  • ATLASSIAN_EMAIL
    : 您的Atlassian账户邮箱
  • ATLASSIAN_API_TOKEN
    : Rovo MCP范围的API令牌(来自Atlassian账户设置)
  • ATLASSIAN_CLOUD_ID
    : 您的站点URL(例如:
    https://yoursite.atlassian.net

For Web Clients (ChatGPT, Gemini CLI, GitHub Copilot)

Web客户端(ChatGPT、Gemini CLI、GitHub Copilot)

Follow client-specific documentation to add the remote MCP server:
  • Server URL:
    https://mcp.atlassian.com/v1/mcp
  • Auth Type: OAuth 2.1 (browser flow)
Example for OpenAI ChatGPT:
  1. Go to Settings → Integrations → MCP
  2. Add server URL:
    https://mcp.atlassian.com/v1/mcp
  3. Complete OAuth flow when prompted
遵循客户端特定文档添加远程MCP服务器:
  • 服务器URL:
    https://mcp.atlassian.com/v1/mcp
  • 认证类型: OAuth 2.1(浏览器流程)
OpenAI ChatGPT示例:
  1. 进入设置 → 集成 → MCP
  2. 添加服务器URL:
    https://mcp.atlassian.com/v1/mcp
  3. 按提示完成OAuth流程

Optimizing Performance with AGENTS.md

使用AGENTS.md优化性能

Reduce token usage and tool calls by setting defaults in your project's
AGENTS.md
:
markdown
undefined
通过在项目的
AGENTS.md
中设置默认值,减少令牌使用和工具调用:
markdown
undefined

Atlassian Rovo MCP

Atlassian Rovo MCP

When connected to atlassian-rovo-mcp:
  • MUST use Jira project key = MYPROJ
  • MUST use Confluence spaceId = "123456"
  • MUST use cloudId = "https://mysite.atlassian.net" (do NOT call getAccessibleAtlassianResources)
  • MUST use
    maxResults: 10
    or
    limit: 10
    for ALL Jira JQL and Confluence CQL search operations.

Replace with your actual values:
- `MYPROJ`: Your default Jira project key
- `123456`: Your Confluence space ID (get from space settings)
- `https://mysite.atlassian.net`: Your Atlassian Cloud site URL
当连接到atlassian-rovo-mcp时:

替换为您的实际值:
- `MYPROJ`: 您的默认Jira项目密钥
- `123456`: 您的Confluence空间ID(从空间设置获取)
- `https://mysite.atlassian.net`: 您的Atlassian Cloud站点URL

Common Usage Patterns

常见使用场景

Jira Operations

Jira操作

Search Issues

搜索问题

"Find all open bugs in project MYPROJ assigned to me"
The agent will use the
jira_searchForIssuesUsingJql
tool with JQL:
jql
project = MYPROJ AND status = Open AND assignee = currentUser() AND type = Bug
"查找分配给我的MYPROJ项目中所有未解决的Bug"
Agent将使用
jira_searchForIssuesUsingJql
工具执行JQL查询:
jql
project = MYPROJ AND status = Open AND assignee = currentUser() AND type = Bug

Create Issue

创建问题

"Create a story in MYPROJ titled 'Add dark mode support' with description 'Users want dark theme option'"
The agent calls
jira_createIssue
with payload:
javascript
{
  "cloudId": "https://mysite.atlassian.net",
  "fields": {
    "project": { "key": "MYPROJ" },
    "summary": "Add dark mode support",
    "description": "Users want dark theme option",
    "issuetype": { "name": "Story" }
  }
}
"在MYPROJ项目中创建一个标题为'添加深色模式支持'的Story,描述为'用户希望有深色主题选项'"
Agent调用
jira_createIssue
接口,传入以下参数:
javascript
{
  "cloudId": "https://mysite.atlassian.net",
  "fields": {
    "project": { "key": "MYPROJ" },
    "summary": "Add dark mode support",
    "description": "Users want dark theme option",
    "issuetype": { "name": "Story" }
  }
}

Bulk Create from Notes

从笔记批量创建

"Create Jira tickets from these requirements:
1. User authentication via OAuth
2. Password reset flow
3. Email verification"
Agent creates 3 issues sequentially using
jira_createIssue
.
"根据以下需求创建Jira工单:
1. 通过OAuth实现用户认证
2. 密码重置流程
3. 邮箱验证"
Agent将使用
jira_createIssue
接口依次创建3个问题。

Update Issue

更新问题

"Update MYPROJ-123 to set status to In Progress and add comment 'Working on this now'"
Uses
jira_editIssue
and
jira_addComment
.
"将MYPROJ-123的状态更新为'In Progress',并添加评论'正在处理此问题'"
使用
jira_editIssue
jira_addComment
接口。

Confluence Operations

Confluence操作

Search Pages

搜索页面

"Find all Confluence pages about API documentation in the DEV space"
Uses
confluence_searchByCQL
with CQL:
cql
space = DEV AND text ~ "API documentation"
"查找DEV空间中所有关于API文档的Confluence页面"
使用
confluence_searchByCQL
工具执行CQL查询:
cql
space = DEV AND text ~ "API documentation"

Create Page

创建页面

"Create a Confluence page in space DEV titled 'API Integration Guide' with content:
"在DEV空间中创建一个标题为'API集成指南'的Confluence页面,内容如下:

Authentication

认证

Use OAuth 2.0 for all API requests."

Calls `confluence_createPage`:
```javascript
{
  "cloudId": "https://mysite.atlassian.net",
  "spaceId": "123456",
  "status": "current",
  "title": "API Integration Guide",
  "body": {
    "representation": "storage",
    "value": "<h1>Authentication</h1><p>Use OAuth 2.0 for all API requests.</p>"
  }
}
所有API请求均使用OAuth 2.0。"

调用`confluence_createPage`接口:
```javascript
{
  "cloudId": "https://mysite.atlassian.net",
  "spaceId": "123456",
  "status": "current",
  "title": "API Integration Guide",
  "body": {
    "representation": "storage",
    "value": "<h1>Authentication</h1><p>Use OAuth 2.0 for all API requests.</p>"
  }
}

Summarize Page

总结页面

"Summarize the Q2 Planning page in DEV space"
Agent fetches page content and provides summary.
"总结DEV空间中的Q2规划页面"
Agent将获取页面内容并提供总结。

Compass Operations

Compass操作

Create Component

创建组件

"Create a Compass component called 'api-gateway' of type SERVICE with description 'Main API gateway service'"
Uses
compass_createComponent
:
javascript
{
  "cloudId": "https://mysite.atlassian.net",
  "name": "api-gateway",
  "typeId": "SERVICE",
  "description": "Main API gateway service"
}
"创建一个名为'api-gateway'的Compass组件,类型为SERVICE,描述为'主API网关服务'"
使用
compass_createComponent
接口:
javascript
{
  "cloudId": "https://mysite.atlassian.net",
  "name": "api-gateway",
  "typeId": "SERVICE",
  "description": "Main API gateway service"
}

Query Dependencies

查询依赖

"What services depend on the api-gateway component?"
Uses
compass_searchComponents
to find dependencies.
"哪些服务依赖于api-gateway组件?"
使用
compass_searchComponents
接口查找依赖关系。

Bulk Import

批量导入

"Import these components from JSON:
[
  {\"name\": \"auth-service\", \"typeId\": \"SERVICE\"},
  {\"name\": \"user-db\", \"typeId\": \"DATABASE\"}
]"
"从JSON导入以下组件:
[
  {\"name\": \"auth-service\", \"typeId\": \"SERVICE\"},
  {\"name\": \"user-db\", \"typeId\": \"DATABASE\"}
]"

Cross-Product Workflows

跨产品工作流

Link Jira to Confluence

关联Jira与Confluence

"Link Jira issues MYPROJ-100, MYPROJ-101, MYPROJ-102 to the 'Sprint Planning' Confluence page"
Agent retrieves page, updates content with Jira macros or links.
"将Jira问题MYPROJ-100、MYPROJ-101、MYPROJ-102关联到'Sprint规划'Confluence页面"
Agent将获取页面内容,使用Jira宏或链接更新页面。

Create Issues from Confluence

从Confluence创建问题

"Read the 'Feature Requests' Confluence page and create a Jira ticket for each item"
Agent:
  1. Fetches Confluence page content
  2. Parses items
  3. Creates Jira issues using
    jira_createIssue
"读取'功能需求'Confluence页面,并为每个条目创建一个Jira工单"
Agent将:
  1. 获取Confluence页面内容
  2. 解析条目
  3. 使用
    jira_createIssue
    接口创建Jira问题

Advanced Configuration

高级配置

Custom Scopes

自定义权限范围

If you need specific Atlassian API scopes, configure during OAuth:
  • read:jira-work
    : Read Jira data
  • write:jira-work
    : Create/update Jira issues
  • read:confluence-content.all
    : Read Confluence pages
  • write:confluence-content
    : Create/update Confluence pages
  • read:compass:*
    : Read Compass data
  • write:compass:*
    : Write Compass data
The MCP server requests appropriate scopes automatically based on available tools.
如果您需要特定的Atlassian API权限范围,可在OAuth过程中配置:
  • read:jira-work
    : 读取Jira数据
  • write:jira-work
    : 创建/更新Jira问题
  • read:confluence-content.all
    : 读取Confluence页面
  • write:confluence-content
    : 创建/更新Confluence页面
  • read:compass:*
    : 读取Compass数据
  • write:compass:*
    : 写入Compass数据
MCP服务器会根据可用工具自动请求相应的权限范围。

IP Allowlisting

IP白名单

If your organization uses IP allowlisting:
  1. Ensure your current IP is allowed in Atlassian Administration
  2. Requests through MCP server must originate from allowed IPs
  3. Configure VPN if working remotely
如果您的组织使用IP白名单:
  1. 确保您当前的IP已在Atlassian管理后台被允许
  2. 通过MCP服务器发起的请求必须来自允许的IP
  3. 远程工作时请配置VPN

Multiple Sites

多站点配置

To work with multiple Atlassian sites, configure separate MCP server entries:
json
{
  "mcpServers": {
    "atlassian-prod": {
      "command": "npx",
      "args": ["-y", "@modelcontextprotocol/mcp-remote", "https://mcp.atlassian.com/v1/mcp"],
      "env": {
        "MCP_REMOTE_AUTH_TYPE": "oauth",
        "ATLASSIAN_CLOUD_ID": "https://prod.atlassian.net"
      }
    },
    "atlassian-staging": {
      "command": "npx",
      "args": ["-y", "@modelcontextprotocol/mcp-remote", "https://mcp.atlassian.com/v1/mcp"],
      "env": {
        "MCP_REMOTE_AUTH_TYPE": "oauth",
        "ATLASSIAN_CLOUD_ID": "https://staging.atlassian.net"
      }
    }
  }
}
如需处理多个Atlassian站点,请配置单独的MCP服务器条目:
json
{
  "mcpServers": {
    "atlassian-prod": {
      "command": "npx",
      "args": ["-y", "@modelcontextprotocol/mcp-remote", "https://mcp.atlassian.com/v1/mcp"],
      "env": {
        "MCP_REMOTE_AUTH_TYPE": "oauth",
        "ATLASSIAN_CLOUD_ID": "https://prod.atlassian.net"
      }
    },
    "atlassian-staging": {
      "command": "npx",
      "args": ["-y", "@modelcontextprotocol/mcp-remote", "https://mcp.atlassian.com/v1/mcp"],
      "env": {
        "MCP_REMOTE_AUTH_TYPE": "oauth",
        "ATLASSIAN_CLOUD_ID": "https://staging.atlassian.net"
      }
    }
  }
}

Available Tools (Partial List)

可用工具(部分列表)

The server exposes 50+ tools. Key examples:
服务器提供50+种工具。主要示例:

Jira

Jira

  • jira_searchForIssuesUsingJql
  • jira_createIssue
  • jira_editIssue
  • jira_addComment
  • jira_getIssue
  • jira_deleteIssue
  • jira_assignIssue
  • jira_searchForIssuesUsingJql
  • jira_createIssue
  • jira_editIssue
  • jira_addComment
  • jira_getIssue
  • jira_deleteIssue
  • jira_assignIssue

Confluence

Confluence

  • confluence_searchByCQL
  • confluence_createPage
  • confluence_updatePage
  • confluence_getPage
  • confluence_deletePage
  • confluence_getSpaces
  • confluence_searchByCQL
  • confluence_createPage
  • confluence_updatePage
  • confluence_getPage
  • confluence_deletePage
  • confluence_getSpaces

Compass

Compass

  • compass_createComponent
  • compass_searchComponents
  • compass_getComponent
  • compass_updateComponent
  • compass_deleteComponent
  • compass_createComponent
  • compass_searchComponents
  • compass_getComponent
  • compass_updateComponent
  • compass_deleteComponent

Utility

实用工具

  • getAccessibleAtlassianResources
    (list available sites - avoid if using AGENTS.md defaults)
  • getAccessibleAtlassianResources
    (列出可用站点 - 如果使用AGENTS.md默认值请避免调用)

Troubleshooting

故障排除

"Your site admin must authorize this app"

"您的站点管理员必须授权此应用"

Cause: First user to connect must be a site admin.
Solution:
  1. Have a site admin complete OAuth flow first
  2. Once installed, regular users can connect
原因:首次连接的用户必须是站点管理员。
解决方案
  1. 请站点管理员先完成OAuth流程
  2. 应用安装后,普通用户即可连接

"You don't have permission to connect from this IP address"

"您没有权限从此IP地址连接"

Cause: IP allowlisting is enabled and your IP isn't allowed.
Solution:
  1. Check Atlassian Administration → Security → IP allowlist
  2. Add your IP range or VPN IP
  3. Contact your admin if you can't modify settings
原因:IP白名单已启用,但您的IP未被允许。
解决方案
  1. 检查Atlassian管理后台 → 安全 → IP白名单
  2. 添加您的IP范围或VPN IP
  3. 如无法修改设置,请联系管理员

OAuth flow doesn't open browser

OAuth流程无法打开浏览器

Cause: Headless environment or browser not configured.
Solution:
  1. Switch to API token authentication (see headless setup above)
  2. Or ensure
    BROWSER
    environment variable points to valid browser
原因:无头环境或浏览器未配置。
解决方案
  1. 切换到API令牌认证(参见上述无头设置)
  2. 或确保
    BROWSER
    环境变量指向有效的浏览器

"App not appearing in Connected apps"

"应用未出现在已连接应用中"

Cause: Wrong account, wrong site, or permissions issue.
Solution:
  1. Verify you're logged into correct Atlassian account
  2. Check site URL matches
    cloudId
    in config
  3. Ensure you have access to Jira/Confluence/Compass on that site
  4. Try revoking and re-authorizing from Atlassian account settings
原因:账户错误、站点错误或权限问题。
解决方案
  1. 验证您登录的是正确的Atlassian账户
  2. 检查站点URL与配置中的
    cloudId
    匹配
  3. 确保您有权访问该站点的Jira/Confluence/Compass
  4. 尝试从Atlassian账户设置中撤销并重新授权

High token usage / slow responses

令牌使用率高/响应缓慢

Cause: Agent calling
getAccessibleAtlassianResources
repeatedly or searching without limits.
Solution:
  1. Add AGENTS.md configuration with
    cloudId
    , project, and space defaults
  2. Always specify
    maxResults
    or
    limit
    in search queries
  3. Cache site/project/space IDs in conversation context
原因:Agent反复调用
getAccessibleAtlassianResources
或无限制搜索。
解决方案
  1. 添加AGENTS.md配置,设置
    cloudId
    、项目和空间默认值
  2. 在搜索查询中始终指定
    maxResults
    limit
  3. 在对话上下文中缓存站点/项目/空间ID

Rate limiting errors

速率限制错误

Cause: Too many API requests in short time.
Solution:
  1. Batch operations where possible
  2. Add delays between bulk creates
  3. Use search with pagination instead of fetching all results
原因:短时间内发起过多API请求。
解决方案
  1. 尽可能批量操作
  2. 在批量创建之间添加延迟
  3. 使用分页搜索而非获取所有结果

Skills for Claude Desktop

Claude Desktop专用Skill

Pre-built skills available in
skills/
directory:
  • create-jira-issue.md: Create Jira issues from natural language
  • search-confluence.md: Search and summarize Confluence pages
  • link-content.md: Link Jira issues to Confluence pages
To use:
  1. Copy skill file to
    ~/Library/Application Support/Claude/skills/
  2. Restart Claude Desktop
  3. Reference skill: "Use the create-jira-issue skill to make a new bug"
skills/
目录下提供预构建Skill:
  • create-jira-issue.md: 通过自然语言创建Jira问题
  • search-confluence.md: 搜索并总结Confluence页面
  • link-content.md: 关联Jira问题与Confluence页面
使用方法:
  1. 将Skill文件复制到
    ~/Library/Application Support/Claude/skills/
  2. 重启Claude Desktop
  3. 引用Skill:"使用create-jira-issue skill创建一个新Bug"

Admin Considerations

管理员注意事项

First-Time Setup (Admin)

首次设置(管理员)

  1. First user must have access to all Atlassian products being integrated (Jira, Confluence, Compass)
  2. Complete OAuth flow to install app (lazy/JIT installation)
  3. App appears in Atlassian Administration → Apps → Connected apps
  1. 首位用户必须有权访问所有要集成的Atlassian产品(Jira、Confluence、Compass)
  2. 完成OAuth流程以安装应用(延迟/即时安装)
  3. 应用将出现在Atlassian管理后台 → 应用 → 已连接应用

Enabling API Token Auth (Admin)

启用API令牌认证(管理员)

  1. Go to Atlassian Administration → Security → Rovo MCP Server
  2. Enable "API token authentication"
  3. Users can then create scoped API tokens from account settings
  1. 进入Atlassian管理后台 → 安全 → Rovo MCP Server
  2. 启用"API令牌认证"
  3. 用户随后可从账户设置创建范围化API令牌

Monitoring Usage

监控使用情况

  • View audit logs in Atlassian Administration → Audit log
  • Filter by "Rovo MCP Server" to see all actions
  • Logs include user, timestamp, action, IP address
  • 在Atlassian管理后台 → 审计日志中查看审计日志
  • 按"Rovo MCP Server"过滤查看所有操作
  • 日志包含用户、时间戳、操作、IP地址

Revoking Access

撤销访问权限

Organization-wide:
  1. Atlassian Administration → Apps → Connected apps
  2. Find "Atlassian Rovo MCP Server"
  3. Click "Revoke" or "Uninstall"
Per-user:
  1. User profile → Account settings → Security
  2. Connected apps → Revoke "Atlassian Rovo MCP Server"
组织范围
  1. Atlassian管理后台 → 应用 → 已连接应用
  2. 找到"Atlassian Rovo MCP Server"
  3. 点击"撤销"或"卸载"
单用户
  1. 用户资料 → 账户设置 → 安全
  2. 已连接应用 → 撤销"Atlassian Rovo MCP Server"

Security Best Practices

安全最佳实践

  1. Never commit API tokens: Use environment variables (
    ${ATLASSIAN_API_TOKEN}
    )
  2. Use scoped tokens: Request only needed permissions
  3. Rotate tokens regularly: Refresh API tokens every 90 days
  4. Monitor audit logs: Review MCP actions weekly
  5. Enable IP allowlisting: Restrict access to known networks
  6. Educate users: Train on what data agents can access
  7. Revoke unused access: Remove old OAuth authorizations
  1. 切勿提交API令牌:使用环境变量(
    ${ATLASSIAN_API_TOKEN}
  2. 使用范围化令牌:仅请求所需权限
  3. 定期轮换令牌:每90天刷新一次API令牌
  4. 监控审计日志:每周查看MCP操作
  5. 启用IP白名单:限制对已知网络的访问
  6. 培训用户:告知用户Agent可访问的数据范围
  7. 撤销未使用的访问权限:移除旧的OAuth授权

Resources

资源