Model Context Protocol moderate risk

Jira

This MCP server provides tools to interact with Jira, enabling ticket management, JQL queries, and project listing, secured by API key authentication.

Connections & Capabilities

Connects To

GitHubJira

Capabilities

readwrite

Quickstart

Install

npm install
```

Config

{
  "mcpServers": {
    "Jira communication server": {
      "command": "node",
      "args": ["/PATH_TO_THE_PROJECT/build/index.js"],
      "env": {
        "JIRA_URL": "https://XXXXXXXX.atlassian.net",
        "JIRA_API_MAIL": "Your email",
        "JIRA_API_KEY": "KEY_FROM : https://id.atlassian.com/manage-profile/security/api-tokens"
      }
    }
  }
}

Exposed MCP Tools (11)

safe

execute_jql

Executes a JQL query and returns the results.

Read-only operation that retrieves data based on the query.

safe

get_only_ticket_name_and_description

Fetches the name and description of a Jira ticket.

Read-only operation that retrieves specific ticket information.

moderate

create_ticket

Creates a new Jira ticket with specified parameters.

Creates a new ticket, which is a non-destructive write operation.

safe

list_projects

Lists available Jira projects.

Read-only operation that retrieves project information.

critical

delete_ticket

Deletes a Jira ticket based on its ID or key.

Deletes a ticket, which is a destructive operation.

high

edit_ticket

Modifies an existing Jira ticket.

Modifies ticket details, potentially altering important data.

safe

get_all_statuses

Retrieves all available statuses in Jira.

Read-only operation that retrieves status information.

moderate

assign_ticket

Assigns a Jira ticket to a specified user.

Assigns a ticket, which is a non-destructive write operation.

safe

query_assignable

Finds users assignable to a project.

Read-only operation that retrieves user information.

moderate

add_attachment_from_public_url

Adds an attachment to a ticket from a public URL.

Adds an attachment, which is a non-destructive write operation.

moderate

add_attachment_from_confluence

Adds an attachment from a Confluence page to a ticket.

Adds an attachment, which is a non-destructive write operation.

Safety Assessment

This server offers useful Jira interaction tools but requires careful API key management. It's safe for read operations and controlled ticket creation, but risky for deletion or modification without proper authorization and monitoring.

API key authentication required
No direct shell access
Clearly defined tool parameters
Limited scope of operations to Jira functions

API key stored in environment variables
Potential for unauthorized ticket modification or deletion
No explicit rate limiting mentioned
Exposure to Jira vulnerabilities