Jira MCP Server: Setup, Tools and Admin Controls

The Jira MCP server is Atlassian's hosted Rovo MCP server, which lets an AI agent or coding app read and update Jira, Confluence and other Atlassian products. Point any MCP-capable app at https://mcp.atlassian.com/v2/mcp, sign in with OAuth 2.1, and the agent can act only within your existing Jira permissions.

Atlassian Rovo MCP server at a glance (support.atlassian.com, October 2026)
ItemWhat Atlassian documents
Endpointhttps://mcp.atlassian.com/v2/mcp
Sign-inOAuth 2.1; API token authentication also available as an option
ProductsJira, Jira Service Management, Confluence, Bitbucket, Projects, Goals, plus Loom recordings
PermissionsActions respect each user's existing access controls
Off by defaultThe delete_jira and manage_jira tool groups
UsageCalls use Rovo credits, per Atlassian's usage limits page

Updated

MCP, short for Model Context Protocol, is a standard way for AI apps to call outside tools. Atlassian runs its own MCP server in the cloud, so there is nothing to install: your agent connects over the internet and asks you to sign in. Use the filter below to see exactly which Jira actions an agent can take, grouped the way Atlassian groups their permissions.

Jira MCP tool finder

Every Jira tool Atlassian lists for its MCP server. Filter by permission group or type part of a name.

52 tools shown

Read

Search

Write

Delete (off by default)

Manage projects (off by default)

Connecting an MCP app

Most MCP apps take a server name and a URL. This is the shape VS Code uses in .vscode/mcp.json, with servers in a top-level servers object.

.vscode/mcp.json

No token goes in the file. The app opens Atlassian's sign-in page the first time it connects.

{
  "servers": {
    "atlassian": {
      "type": "http",
      "url": "https://mcp.atlassian.com/v2/mcp"
    }
  }
}

A JQL query an agent might send

searchJiraIssuesUsingJql takes Jira Query Language, the same syntax as Jira's advanced search.

project = WEB AND issuetype = Bug AND statusCategory != Done ORDER BY priority DESC

Admin controls for organisations

In Atlassian Administration, under Connectors and then Atlassian MCP server, an org admin can untick Allow Atlassian supported domains and add only trusted domains. Those domain rules apply to OAuth 2.1 sign-ins.

The same screen has an Authentication section where API token sign-in can be switched on or off. IP allowlists are managed elsewhere in Atlassian Administration and apply to both sign-in methods.

What a good first task looks like

Ask for a read-only summary first, for example the unresolved issues assigned to you this sprint. Read tools like searchJiraIssuesUsingJql and getJiraIssue show whether the agent picks the right project before it can change anything.

How it works

  1. Open your app's MCP settings and add a remote (HTTP) server with the URL https://mcp.atlassian.com/v2/mcp.
  2. Start the app or the server entry; it opens Atlassian's sign-in page for the OAuth 2.1 flow.
  3. Approve access with your Atlassian account. The agent then works with your own Jira permissions, nothing more.
  4. Ask for something concrete, such as a JQL search for open bugs in a project, and review any change before you confirm it.

Tips

Frequently asked questions

Is there an official Jira MCP server?

Yes. Atlassian hosts the Atlassian Rovo MCP server, which covers Jira along with Confluence, Bitbucket and other products. Community-built Jira MCP servers also exist, but the official one needs no install and uses Atlassian's own sign-in.

How does the Jira MCP server authenticate?

With OAuth 2.1: your MCP app opens an Atlassian sign-in page and you approve access. Atlassian also documents API token authentication as an option, which an org admin can turn on or off.

Can the agent delete Jira issues?

Only if enabled. Atlassian lists deleteJiraIssue in the delete_jira group and project-level tools in the manage_jira group, and both groups are disabled by default.

Does it see projects I cannot see?

No. Atlassian says OAuth ensures all actions respect users' existing access controls and permissions, so the agent can reach only what your account can reach.

What does it cost?

Atlassian says calls consume Rovo credits, scaling with data volume and reasoning complexity, and points to its Rovo usage limits page for the thresholds. Check that page for your plan, as of October 2026.

Related: What is an MCP server?, How to build an MCP server, Playwright MCP server, How to build an AI agent, What is an API key?.

Start for free or see all free tools. We.Inc is free to start, with no card needed. AI building is on paid plans from $20 a month.

More in Guides

We.Inc is an AI-powered website builder you can resell under your own brand. Launch a branded client dashboard, bill on Stripe Connect, and deliver AI-generated websites in minutes. White-label plans start at $99 a month for 25 client sites, with a 7-day free trial and no per-site fees.

Product

Who It's For

Features

Resources

Company

View Sitemap