nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Concerned about Claude and Atlassian MCP

Christian Holton_1x5l5s

Our CEO has given us an all-AI directive, telling everyone that they need to start using AI and connected tools.

As the primary system administrator, I haven't enabled the MCP server or official connectors for Jira and Confluence because I can't answer definitively whether we can:

1. Restore a destroyed Jira project, for example, if someone doesn't know what they're doing with Claude running the Atlassian MCP server. Is it just like restoring a deleted project from the Trash?
2. Restrict the MCP or related tools to read-only permissions so #1 doesn't happen.

Any insight is valuable. Thanks.

Accepted answers

Arkadiusz Wroblewski

Hello @Christian Holton

These are exactly the right questions to ask before enabling this.

On recovery: deleted Jira spaces go to Trash and can be restored by admins, same as any accidental deletion. That said, some API actions like bulk work item deletion aren't as easily reversible, so scope matters more than relying on recovery.

On read-only: the MCP server inherits the permissions of whatever credentials you connect it with , there's no separate read-only toggle. The practical approach is to connect it via a dedicated account with only the permissions you're comfortable with, no admin rights, no delete access. That way the blast radius is contained regardless of what gets requested.

All comments

Arkadiusz Wroblewski

Hello @Christian Holton

These are exactly the right questions to ask before enabling this.

Tomislav Tobijas

Hi @Christian Holton ,

To add on what Arkadiusz said, you can go through official docs such as this one: Getting started with the Atlassian Rovo MCP Server

As stated in the docs:

Data access respects Jira, Compass, and Confluence user permissions.

...

Actual capabilities vary, depending on your permission level and client platform.

Also, I've got Claude and ChatGPT connected via MCP and I've played around with this, and I don't think deleting action is supported at the moment (incl. deleting a space). Here's a list of supported tools/actions: Supported tools

Cheers,
Tobi

Dr Valeri Colon (Connect Centric)

@Christian Holton I’d add one nuance to @Arkadiusz Wroblewski’s answer—while MCP respects permissions, it can still perform write actions within that scope, and capabilities can evolve. So it’s best not to assume certain actions (like delete) will always be unavailable.

Also, recovery isn’t uniform—projects, issues, and bulk actions have different restore paths. So your safest setup is still a least-privilege service account + testing in a sandbox first.

Kelvin Chua_mpxjuh

I'm thinking: does Atlassian support something like JIT (Just-in-Time) access for MCP?

For use cases that do not require constant or frequent access to Atlassian via MCP, I'm considering a least privilege approach where I only have JIT access to the MCP. I'd like to chime into the discussion on this.

Mahima_miniOrange

Hi @Christian Holton

Adding to the discussion here - if you're looking for more granular, admin-level governance over how AI assistants such as Claude interact with Jira, you may want to explore Claude Governance & Access Control for Jira.

It allows Jira admins to define centralized, group-based policies to control:

Which Jira projects an AI assistant can access
Which Jira operations are allowed or restricted, such as fetch, create, update, delete, and comment
Which user groups the policies apply to
Monitoring and auditing of AI-driven activities

This can be useful for organizations following a least-privilege approach and wanting more granular control over AI interactions with Jira.

If you'd like to see how it works, feel free to reach out to me at mahima@xecurify.com. I'd be happy to walk you through a demo.

Hope it helps!

Thanks,
Mahima

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Unanswered
Groups
Help

Find more posts tagged with

confluence

jira

cloud

jira-cloud

confluence-cloud

rovo-atlassian-intelligence

mcp