Concerned about Claude and Atlassian MCP

[Christian Holton]

Our CEO has given us an all-AI directive, telling everyone that they need to start using AI and connected tools. 

As the primary system administrator, I haven't enabled the MCP server or official connectors for Jira and Confluence because I can't answer definitively whether we can:

1.  Restore a destroyed Jira project, for example, if someone doesn't know what they're doing with Claude running the Atlassian MCP server. Is it just like restoring a deleted project from the Trash?
2. Restrict the MCP or related tools to read-only permissions so #1 doesn't happen.

Any insight is valuable. Thanks.

[Arkadiusz Wroblewski]

Hello @Christian Holton 

These are exactly the right questions to ask before enabling this.

On recovery: deleted Jira spaces go to Trash and can be restored by admins, same as any accidental deletion. That said, some API actions like bulk work item deletion aren't as easily reversible, so scope matters more than relying on recovery.

On read-only: the MCP server inherits the permissions of whatever credentials you connect it with , there's no separate read-only toggle. The practical approach is to connect it via a dedicated account with only the permissions you're comfortable with, no admin rights, no delete access. That way the blast radius is contained regardless of what gets requested.