Back to Home
ankitranjan5 icon

jira-mcp-server

Verified Safe

by ankitranjan5

Overview

A Spring Boot service providing OAuth2 authenticated tools for LLM agents to manage Jira issues and Confluence pages.

Installation

Run Command
java -jar target/*.jar

Environment Variables

  • ATLASSIAN_CLIENT_ID
  • ATLASSIAN_CLIENT_SECRET
  • ATLASSIAN_CALLBACK_URL
  • JASYPT_ENCRYPTOR_PASSWORD
  • SPRING_DATASOURCE_URL
  • SPRING_DATASOURCE_USERNAME
  • SPRING_DATASOURCE_PASSWORD

Security Notes

The application securely stores encrypted access and refresh tokens in a PostgreSQL database and uses Jasypt for encryption. It leverages Spring Security for OAuth2 flows. The 'principalName' (UUID) acts as a bearer token for LLM agent authentication; its secrecy is critical. Weak default values for 'jasypt.encryptor.password', 'spring.datasource.username', and 'spring.datasource.password' are present in 'application.yaml' and must be overridden with strong, secret values via environment variables in production. Failure to do so would significantly lower the security posture. No 'eval' or similar dynamic code execution risks were found.

Similar Servers

Stats

Interest Score9
Security Score7
Cost ClassMedium
Avg Tokens2000
Stars1
Forks0
Last Update2025-12-16

Tags

Spring BootAtlassianJiraConfluenceOAuth2