Getting started with the Atlassian Rovo MCP Server
Overview
The Atlassian Rovo MCP Server is a cloud-based bridge between your Atlassian Cloud site and compatible external tools. Once configured, it enables those tools to interact with Jira, Compass, and Confluence data in real-time. This functionality is powered by secure OAuth 2.1 authorization, which ensures all actions respect the user’s existing access controls.
With the Atlassian Rovo MCP Server, you can:
Summarize and search Jira, Compass, and Confluence content without switching tools.
Create and update issues or pages based on natural language commands.
Automate repetitive work, like generating tickets from meeting notes or specs.
It’s designed developers, content creators, and project teams who use IDEs or AI platforms and want to work with Atlassian data without constantly context switching.
Supported clients
The Atlassian Rovo MCP Server supports several clients, including:
The Atlassian Rovo MCP Server also supports any local MCP-compatible client that can run on localhost and connect to the server via the mcp-remote proxy. This enables custom or third-party integrations that follow the MCP specification.
For detailed setup instructions, refer to your client’s own MCP documentation or built-in assistant.
Before you start
Are you an admin looking for support? See the Admin notes on this page.
Ensure your environment meets the necessary requirements to successfully set up the Atlassian Rovo MCP Server. This section outlines the technical prerequisites and key access considerations.
Prerequisites
Before connecting to the Atlassian Rovo MCP Server, review the setup requirements for your environment:
For supported clients
An Atlassian Cloud site with Jira, Compass, and/or Confluence
Access to the client of choice
A modern browser to complete the OAuth 2.1 authorization flow
For IDEs or local clients (Desktop setup)
An Atlassian Cloud site with Jira, Compass, and/or Confluence
A supported IDE (for example, Claude desktop, VS Code, or Cursor) or a custom MCP-compatible client
Node.js v18+ installed to run the local MCP proxy (
mcp-remote)A modern browser for completing the OAuth login
Data and security
Security is a core focus of the Atlassian Rovo MCP Server:
All traffic is encrypted via HTTPS using TLS 1.2 or later.
OAuth 2.1 ensures secure authentication and access control.
Data access respects Jira, Compass, and Confluence user permissions.
If your organization uses IP allowlisting for Atlassian Cloud products, tool calls made through the Atlassian Rovo MCP Server also honor those IP rules.
For a deeper overview of the security model and admin controls, see:
How it works
Architecture and communication
A supported client connects to the server endpoint:
https://mcp.atlassian.com/v1/mcpA secure browser-based OAuth 2.1 flow is triggered.
Once authorized, the client streams contextual data and receives real-time responses from Jira, Compass, or Confluence.
While /sse as a server endpoint are supported, we recommend updating any custom clients configured to use /sse so they now point to /mcp.
Permission management
Access is granted only to data that the user already has permission to view in Atlassian Cloud. All actions respect existing project or space-level roles. OAuth tokens are scoped and session-based.
Example workflows
Once connected, you can perform a variety of useful tasks from within your supported client.
Jira workflows
Search: “Find all open bugs in Project Alpha.”
Create/update: “Create a story titled ‘Redesign onboarding’.”
Bulk create: “Make five Jira issues from these notes.”
Confluence workflows
Summarize: “Summarize the Q2 planning page.”
Create: “Create a page titled ‘Team Goals Q3’.”
Navigate: “What spaces do I have access to?”
Compass workflows
Create: “Create a service component based on the current repository.”
Bulk create: “Import components and custom fields from this CSV/JSON”
Query: “What depends on the
api-gatewayservice?”
Combined tasks
Link content: “Link these three Jira tickets to the ‘Release Plan’ page.”
Find documentation: “Fetch the Confluence documentation page linked to this Compass component.”
Actual capabilities vary, depending on your permission level and client platform.
Admin notes: Managing access
If you're an admin preparing your organization to use the Atlassian Rovo MCP Server, review these key considerations. For more detailed admin guidance, see:
Installation and access
Not a Marketplace App:
The Atlassian Rovo MCP Server is not installed via the Atlassian Marketplace or the Manage apps screen. Instead, it is installed automatically the first time a user completes the OAuth 2.1 (3LO) consent flow (just-in-time or “lazy loading” installation).First-time installation requirements:
The first user to complete the 3LO consent flow for your site must have access to the Atlassian apps requested by the MCP scopes (for example, Jira and/or Confluence). This ensures the MCP app is registered with the correct permissions for your site.Subsequent user access:
After the initial install, users with access to only one Atlassian app (for example, just Jira or just Confluence) can also complete the 3LO flow to access that Atlassian app through MCP.
Manage, monitor, and revoke access
Admin controls:
Site and organization admins can manage, review, or revoke the MCP app’s access from Manage your organization's Marketplace and third-party apps. The app appears in your site’s Connected apps list after the first successful 3LO consent.End-user controls:
Individual users can revoke their own app authorizations from their profile settings.Domain and IP controls:
Use the Rovo MCP server settings page in Atlassian Administration to control which external AI tools and domains are allowed to connect. For details, see Available Atlassian Rovo MCP server domains. If your organization uses IP allowlisting for Atlassian Cloud apps, requests made through the Atlassian Rovo MCP Server must originate from an IP address that is allowed by your organization’s IP allowlist for the relevant Atlassian app. For configuration details, see Specify IP addresses for app access.Audit logging: To support monitoring and compliance, key actions performed via the Atlassian Rovo MCP Server are logged in your organization’s audit log. Admins can review these logs in Atlassian Administration. For more information, see Monitor Atlassian Rovo MCP server activity.
Troubleshooting common issues
“Your site admin must authorize this app” error:
A site admin must complete the 3LO consent flow before anyone else can use the MCP app. See “Your site admin must authorize this app" error in Atlassian Cloud apps for more details.“You don't have permission to connect from this IP address. Please ask your admin for access.”
This usually indicates that IP allowlisting is enabled and the user’s current IP address isn’t allowed to access Jira, Confluence, Compass, or Rovo via the Atlassian Rovo MCP Server. Ask your site or organization admin to review the IP allowlist configuration and add the relevant network or VPN IP ranges if appropriate.App not appearing in Connected apps:
Ensure the user is using the correct Atlassian account and site, and confirm the app is requesting the correct Atlassian app scopes (for example, Jira scopes). If issues persist, check Manage your organization's Marketplace and third-party apps or contact Atlassian Support. Also verify the user’s Jira, Confluence, or Compass permissions in Atlassian Administration.
Support and feedback
Your feedback plays a crucial role in shaping the Atlassian Rovo MCP Server. If you encounter bugs, limitations, or have suggestions:
Visit the Atlassian Support Portal to report issues. When reporting technical issues and bugs, make sure to specify Rovo app.
Share your experiences and feature requests on the Atlassian Community.
Enterprise customers can contact their Atlassian Customer Success Manager for advanced support and roadmap discussions.
Disclaimer
MCP clients can perform actions in Jira, Confluence, and Compass with your existing permissions. Use least privilege, review high‑impact changes before confirming, and monitor audit logs for unusual activity.
Learn more: MCP Clients - Understanding the potential security risks
Was this helpful?