atlassian-mcp-server

The server leverages secure OAuth 2.1 authorization and HTTPS (TLS 1.2+) to ensure data encryption and respect existing user permissions, including IP allowlisting. It highlights critical security warnings about prompt injection, indirect prompt injection, and tool poisoning attacks inherent when connecting AI agents to tools, emphasizing the need for trusted clients, least privilege, and human confirmation for high-impact actions. The JQL query builder script includes explicit input sanitization to prevent JQL injection. Admin controls for managing and monitoring app access, along with audit logging, are also noted. The core service is hosted by Atlassian, indicating enterprise-level security practices, though the full server-side code is not provided for complete analysis.