Back to Home
premkalyan icon

confluence-mcp

Verified Safe

by premkalyan

Overview

A multi-tenant API Gateway for Confluence, providing a JSON-RPC 2.0 interface to automate page management, document operations, templates, macros, and Jira integration by fetching credentials dynamically from a project registry.

Installation

Run Command
npm run start

Environment Variables

  • PROJECT_REGISTRY_URL
  • REGISTRY_AUTH_TOKEN

Security Notes

The server securely fetches Confluence credentials from an external Project Registry based on a provided Bearer token, avoiding hardcoded secrets in the main application logic. However, the provided test scripts (`test-all-confluence-tools.js`, `test-image-embedding.js`) contain a hardcoded `BEARER_TOKEN`, which is a minor risk if these files are publicly accessible. The `upload_and_embed_document` tool, which can fetch files from an arbitrary `fileUrl`, could potentially be exploited for DoS if malicious actors upload extremely large files, as the server reads the entire file into memory without explicit size limits.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassHigh
Avg Tokens2000
Stars0
Forks0
Last Update2025-12-14

Tags

ConfluenceAPI GatewayJSON-RPCDocumentationAutomation