Checking URLs against the Jira allowlist

Platform Notice: Data Center Only - This article only applies to Atlassian products on the Data Center platform.

Note that this KB was created for the Data Center version of the product. Data Center KBs for non-Data-Center-specific features may also work for Server versions of the product, however they have not been tested. Support for Server* products ended on February 15th 2024. If you are running a Server product, you can visit the Atlassian Server end of support announcement to review your migration options.

*Except Fisheye and Crucible


You can configure Automation for Jira to check all URLs included in actions, webhooks, and other items against the Jira allowlist. Thanks to that, you'll make sure that any URLs is accepted and considered secure.


Before you begin

  • Make sure to enable and configure the Jira allowlist before enabling this option. If a URL isn't on the allowlist, some of your existing actions or webhooks might stop working. For more info, see Configuring Jira allowlist.

Enabling the URL allowlist

To enable the URL allowlist:

  1. Go to Global Configuration.

  2. Enable the URL allowlist.

Enable URL allowlist in global configuration

Updated on May 31, 2024

Still need help?

The Atlassian Community is here for you.