Inquiry about MCP setting (w/ Claude)

[김지호_정보보호사무국_]

Hi Atlassian Community,

We're currently using Atlassian with Claude Enterprise, and we'd like to restrict Rovo MCP server access so that only connections from our company's Claude organization are allowed — not personal Claude accounts.

The concern is straightforward: if an employee connects their personal Claude account (claude.ai) to our company's Atlassian via MCP, they could access all Confluence and Jira data from outside the organization, which is a significant security risk.

Since both personal and enterprise Claude accounts share the same domain (claude.ai), domain-based filtering doesn't help here.

Our question:
Is there currently any way to restrict MCP connections based on the Claude organization (e.g., Enterprise org), rather than just the domain?

If this isn't currently supported, we'd like to request this as a feature — specifically, the ability to allowlist specific Claude organizations or tenants at the Rovo MCP Server level.

This would be especially valuable for organizations that want to enable MCP for productivity while preventing unauthorized data access through personal AI accounts.

Thanks in advance for any guidance or feedback.

[Arkadiusz Wroblewski · Accepted solution]

Hello @김지호_정보보호사무국_ 

Your concern is very very Very Very.....valid, but Atlassian’s Rovo MCP Server currently lacks tenant-level controls. Because personal and enterprise Claude share the same domains, domain allowlisting cannot distinguish between them.

For now, you must rely on broader security layers: disabling API-token auth, minimizing write permissions, using IP allowlisting, and checking if Claude Enterprise can restrict integrations on its side. To achieve true tenant-specific filtering, I recommend raising a feature request with Atlassian or look if there's already one.

Best,

Arkadiusz 🤠☀️

[김지호_정보보호사무국_]

@Arkadiusz Wroblewski 

Thanks for the answer.

If I pay for Atlassian Guard, would that resolve the issue? I'd like to know whether it's still not possible even then.
Please let me know if you have any information on this.

[Arkadiusz Wroblewski]

Guard can "Tighten" your Security but The underlying limitation Stays, MCP controls filter by domain, which cannot differentiate between a personal Claude account and your corporate Claude Enterprise organization. For an official production security decision, I recommend confirming this with your Atlassian account contact, but you will ultimately still need that tenant-level feature request.

Best,

Arkadiusz🤠

[Mahima_miniOrange]

Hi, This is a very relevant concern for organizations looking to enable AI assistants while maintaining strong governance over their Jira data.

If you're looking for more granular control over how Claude interacts with Jira, you may want to explore AI Governance Gateway for Jira, available on the Atlassian Marketplace.

The app allows organizations to define group-based policies to control AI access to specific Jira projects and restrict or allow specific Jira operations. It also provides audit logs and a governance dashboard to monitor AI-driven activity.

If you'd like to see how it works, feel free to reach out to mahima@xecurify.com for a demo.

Hope this helps!

Thanks,
Mahima

[김지호_정보보호사무국_]

Hello,

Thank you for your response.

I have a few questions about the product.

• How it works: Does it create an MCP server exclusively for our Atlassian tenant, and then we connect it in Claude?
• When setting up on Claude's side: Is this something the administrator handles? If we need to share the MCP server URL with regular users, I'm concerned about the possibility of it being leaked. Could you clarify?
• After setup is complete: Will it be impossible for anonymous personal accounts (other than the company's official Claude account) to connect to the company's Atlassian account via MCP?

Please confirm the above, and if you have any guide documents, please share them as well.

Thank you.