Concerned about Claude and Atlassian MCP

[Christian Holton]

Our CEO has given us an all-AI directive, telling everyone that they need to start using AI and connected tools. 

As the primary system administrator, I haven't enabled the MCP server or official connectors for Jira and Confluence because I can't answer definitively whether we can:

1.  Restore a destroyed Jira project, for example, if someone doesn't know what they're doing with Claude running the Atlassian MCP server. Is it just like restoring a deleted project from the Trash?
2. Restrict the MCP or related tools to read-only permissions so #1 doesn't happen.

Any insight is valuable. Thanks.

[Tomislav Tobijas]

Hi @Christian Holton ,

To add on what Arkadiusz said, you can go through official docs such as this one: Getting started with the Atlassian Rovo MCP Server 

As stated in the docs:

• Data access respects Jira, Compass, and Confluence user permissions.
• ...
• Actual capabilities vary, depending on your permission level and client platform.

Also, I've got Claude and ChatGPT connected via MCP and I've played around with this, and I don't think deleting action is supported at the moment (incl. deleting a space). Here's a list of supported tools/actions: Supported tools 

Cheers,
Tobi

[Arkadiusz Wroblewski]

Hello @Christian Holton 

These are exactly the right questions to ask before enabling this.

On recovery: deleted Jira spaces go to Trash and can be restored by admins, same as any accidental deletion. That said, some API actions like bulk work item deletion aren't as easily reversible, so scope matters more than relying on recovery.

On read-only: the MCP server inherits the permissions of whatever credentials you connect it with , there's no separate read-only toggle. The practical approach is to connect it via a dedicated account with only the permissions you're comfortable with, no admin rights, no delete access. That way the blast radius is contained regardless of what gets requested.