Govern external AI access with the Rovo MCP server
By the end of this lesson, you'll be able to:
- Explain what the Rovo MCP server is
- Describe how external AI tools connect to the Rovo MCP server
- Explore how you authorize an AI tool to access your app data
What is the Rovo MCP server?
External AI tools use your current permissions to take actions in Jira, Confluence, and Compass. You should only give users the access they need to do their work.
How data flows through the Rovo MCP server
- An external AI tool sends a request to the Rovo MCP server.
- The server checks if the tool is allowed and confirms the user’s permissions.
- The server fetches the data from Jira, Confluence or Compass and sends it back to the AI tool.
The server only lets you see data that you already have permission to view in Atlassian Cloud. It follows the same security rules and roles you already have in your spaces.
Authorize external AI tools to access your apps through the Rovo MCP server
Control how tools connect to your site
Authorize a domain
You can find a list of Atlassian-supported domains that are already optimized to work with the Rovo MCP server in the Add domain menu. Explore authentication options at Available Atlassian Rovo MCP Server domains.
- Go to Atlassian Administration and select your organization.
- Expand Rovo.
- Select Rovo MCP server.
- Select Add domain and enter the address (for example: claude.ai).
- Select Add.
Once you add the domain, users can connect their external AI tool to the Rovo MCP server. To do this, they enter the Rovo MCP server URL into the tool's settings then sign in to their Atlassian account when prompted.
Manage authentication
By default, users connect their AI tools using OAuth 2.1. However, you can allow them to use API tokens.
If you allow users to connect using API tokens, they can connect from any domain, even if you have not added it to your domains list in the Rovo MCP server settings. However, their connection must still come from a trusted IP address on your organization's allowlist.
- Go to Atlassian Administration and select your organization.
- Expand Rovo.
- Select Rovo MCP server.
- Toggle API token.
How IP allowlists affect the Rovo MCP server
How was this lesson?
next lesson
Understand Rovo data handling and residency
- How Rovo’s AI models handle your data
- What is data residency?
- Pin Rovo data