embabel-confluence-mcp-server
Verified Safeby BootcampToProd
Overview
A demo Model Context Protocol (MCP) server built with Embabel Framework to connect AI agents (like Claude Desktop) with the Atlassian Confluence REST API for documentation management.
Installation
mvn spring-boot:runEnvironment Variables
- OPENAI_API_KEY
- CONFLUENCE_BASE_URL
- CONFLUENCE_AUTH_TOKEN
Security Notes
The `createDocument` method in `ConfluenceService.java` constructs JSON payloads using naive string formatting (`String.formatted`). This approach is vulnerable to JSON injection attacks if the `spaceKey`, `title`, or `content` parameters contain special characters (e.g., double quotes, backslashes) that are not properly escaped. A malicious or malformed input could lead to invalid JSON being sent to the Confluence API, potentially causing errors or unintended data manipulation. Best practice would be to use a robust JSON serialization library (e.g., Jackson ObjectMapper) to safely construct payloads.
Similar Servers
mcp-atlassian
Provides an MCP (Model Context Protocol) server for interacting with Atlassian Jira and Confluence APIs, offering tools for content management, search, and workflow automation.
mcpo
Exposes Model Context Protocol (MCP) tools as OpenAPI-compatible HTTP servers.
mcp-server-atlassian-confluence
Connects AI assistants to Atlassian Confluence knowledge bases, enabling natural language interaction to query, search, and manage Confluence content.
MCP-Agent
An autonomous AI agent designed to discover, connect to, and utilize tools and resources from various Model Context Protocol (MCP) servers to accomplish tasks.