Connecting service accounts over MCP

Question

Hi there,

I'm trying to connect multiple solutions to our Confluence instance over MCP for read-only purposes and want to make use of some service accounts to determine access levels. However when I try to perform the OAuth flow, I am simply redirected to a login page, no option to enter the ID/secret combo I generated for the service account. I tried to do it with an incognito screen to see if I could log in to the service account, but that just seems to send an OTP to the service account inbox, which I'm not sure how to even reach, let alone know if that would be the way to continue. What is the normal flow for connecting apps over MCP? Alternatively, can we use the API tokens from service accounts to connect? If so, are the API endpoints the same?

For the record: they are not officially supported applications, we are looking to integrate Wordsmith.ai and Introw.io

Rebekka Heilmann (viadee) · Answer

I am saying, I don't know for sure.

Service Accounts use scoped tokens. Not all APIs support that yet, but then again, MCP is not a regular API.

Also, you can use some Rovo features via MCP and that might be an issue with Service Accounts as well. Again: I don't know for sure.

Have you added your AI tool/Application in the Org Administration?

Leandros Talman · Answer

So you're saying there is no way to authenticate service accounts at all using MCP, either over OAuth or API bearer token? As I said, once I am in the Atlassian interface to allow the connection, I am already assumed to be using my own account.

Rebekka Heilmann (viadee) · Answer

Hi @Leandros Talman - welcome to the Community,

Atlassian has a list of entrusted AI tools that you can enable/disable. You can also add custom domains so they can access Rovo MCP.

Both settings are available in the Org Administration under the AI settings > Rovo MCP. Check out Control Atlassian Rovo MCP server settings | Atlassian Support for further details

If your Application is listed there, it should skip the regular UI OAuth Flow. I don't think it will work with Service Accounts but would be glad it did. You cannot log in with them via the UI, that I know for sure.