# mcp-atlassian

> MCP server for Atlassian tools (Confluence, Jira)

- **URL**: https://www.freshcrate.ai/projects/mcp-atlassian
- **Author**: sooperset
- **Category**: MCP Servers
- **Latest version**: `v0.21.1` (2026-04-10)
- **License**: MIT
- **Source**: https://github.com/sooperset/mcp-atlassian
- **Homepage**: https://mcp-atlassian.soomiles.com
- **Language**: Python
- **GitHub**: 4,993 stars, 1,116 forks
- **Registry**: github
- **Tags**: `atlassian`, `confluence`, `jira`, `mcp`, `python`

## Description

MCP server for Atlassian tools (Confluence, Jira)

## Recent releases

| Version | Date | Urgency | Changes |
| --- | --- | --- | --- |
| `v0.21.1` | 2026-04-10 | High | This release fixes a critical startup crash caused by an upstream dependency break and ships a few community-contributed features that landed on main since v0.21.0.  ## 🐛 Fixed  ### Server / Transport - **Startup crash on fresh `uvx` installs**: `fakeredis 2.35.0` renamed `FakeConnection` without a backward-compatible alias, breaking `pydocket`'s runtime import and making FastMCP's lifespan fail with `ImportError: cannot import name 'FakeConnection' from 'fakeredis.aioredis'`. Pinned `fakeredis |
| `v0.21.0` | 2026-03-02 | Low | This release adds 4 new tools (sprint management, page moves, page diffs, comment replies), OAuth proxy support, markdown table rendering, and multiple content processing fixes.  ## ✨ Features  ### Jira - **Sprint Management**: Move issues between sprints with the new `jira_add_issues_to_sprint` tool ([#1078](https://github.com/sooperset/mcp-atlassian/pull/1078)) - **Cloud Search Pagination**: `jira_search` now returns `next_page_token` for cursor-based pagination on Cloud ([#1079](https://githu |
| `v0.20.1` | 2026-02-27 | Low | This release fixes error handling for the ServiceDesk comment API on non-JSM projects.  ## 🐛 Fixed  ### Jira - **ServiceDesk 403 handling**: Non-JSM projects return 403 Forbidden (not 404) from the ServiceDesk API when using the `public` parameter for internal/external comments. The error message now clearly indicates the issue is not a JSM service desk project or the user lacks permission ([#1051](https://github.com/sooperset/mcp-atlassian/pull/1051))  **Full Changelog**: https://github.com/so |
| `v0.20.0` | 2026-02-27 | Low | This release adds JSM internal comment support, a Kubernetes Helm chart, and fixes for worklog ADF handling and tool parameter naming.  ## ✨ Features  ### Jira - **JSM Internal Comments**: New `public` parameter on `add_comment` tool for Jira Service Management issues. Set `public=true` for customer-visible comments or `public=false` for internal agent-only comments. Routes through the ServiceDesk API with plain text body ([#1049](https://github.com/sooperset/mcp-atlassian/pull/1049), fixes [#86 |
| `v0.19.0` | 2026-02-27 | Low | This release adds toolset-based tool filtering for granular control over which tools are exposed, OS native trust store support for enterprise SSL environments, and Jira issue watcher tools.  ## ✨ Features  ### Server - **Toolset-Based Tool Filtering**: New `TOOLSETS` env var groups 68 tools into 21 named toolsets (15 Jira, 6 Confluence) for granular control. Supports `all`, `default`, and comma-separated names. All toolsets enabled by default — in v0.22.0 the default will change to 6 core tools |
| `v0.18.1` | 2026-02-25 | Low | This release fixes allowlisted domains being incorrectly blocked by the SSRF DNS resolution check.  ## 🐛 Fixed  ### Server / Transport - **Allowlisted domains bypass DNS resolution check**: When `MCP_ALLOWED_URL_DOMAINS` was set, internal hosts resolving to private IPs (e.g. `10.x.x.x`) were still blocked by the DNS check. Allowlisted domains now return early before DNS resolution, while hard-blocked hostnames (`localhost`, `metadata.google.internal`) and IP literal checks remain enforced ([#10 |
| `v0.18.0` | 2026-02-25 | Low | This release adds inline image rendering for both Jira and Confluence, ADF write support for Jira Cloud, and fixes several bugs including stateless HTTP mode and Server/DC user lookup.  ## ✨ Features  ### Jira - **Inline Image Rendering**: New `jira_get_issue_images` tool returns issue image attachments as base64 `ImageContent` for direct LLM vision processing. Shared MIME detection extracted to `utils/media.py` ([#1001](https://github.com/sooperset/mcp-atlassian/pull/1001)) - **ADF Write Suppor |
| `v0.17.0` | 2026-02-24 | Low | This release fixes two security vulnerabilities, adds new Jira features, and includes multiple bug fixes and hardening improvements.  ## 🔒 Security  - **Path Traversal Guard**: Confluence attachment downloads now validate paths against directory traversal attacks via `validate_safe_path()` with symlink resolution. Jira guards refactored to use the same shared utility. Fixes GHSA-xjgw-4wvw-rgm4 ([#987](https://github.com/sooperset/mcp-atlassian/pull/987)) - **SSRF Protection**: Header-based |
| `v0.16.1` | 2026-02-21 | Low | This release fixes Confluence Cloud URL construction, adds AI platform schema compatibility, and patches a ReDoS vulnerability.  ## 🐛 Fixed  ### Confluence - **Double `/wiki` Prefix in Cloud URLs**: `base_url` already includes `/wiki` for Cloud instances (auto-appended by `atlassian-python-api`), but five URL constructions in `v2_adapter.py` and `analytics.py` were prepending it again — producing 404s for analytics views, page attachments, and attachment CRUD operations ([#964](https://github.c |
| `v0.16.0` | 2026-02-21 | Low | This release adds OAuth 2.0 for Atlassian Data Center, Basic Auth multi-user support for MCP gateways, and several auth reliability fixes.  ## ✨ Features  ### Authentication - **OAuth 2.0 for Data Center**: Extend OAuth support to Atlassian Server/Data Center instances with service-specific env vars (`JIRA_OAUTH_CLIENT_ID`, `CONFLUENCE_OAUTH_CLIENT_ID`), DC-specific token/authorize URLs, and keyring key namespacing ([#952](https://github.com/sooperset/mcp-atlassian/pull/952), fixes [#527](https: |

## Citation

- HTML: https://www.freshcrate.ai/projects/mcp-atlassian
- Markdown: https://www.freshcrate.ai/projects/mcp-atlassian.md
- Dependencies JSON: https://www.freshcrate.ai/api/projects/mcp-atlassian/deps

_Generated by freshcrate.ai. Indexes github releases for AI-agent ecosystem packages._
