The Atlassian Rovo MCP Server supports a catalog of tools across Atlassian apps. Each tool belongs to a permission group, and each group bundles one or more tools by intent - for example, read, write, search, delete, or manage.

How the server exposes tools

Rather than sending every tool definition at connection time, the server advertises a small set of primary tools directly to agents and lets clients discover the rest of the catalog on demand. This preserves context window and lets Atlassian add tools without requiring you to reconnect.

Primary tools are marked (Primary) below. They're returned directly in the MCP tools/list response and are always visible to clients.
Deferred tools are found at runtime through the discover tool, which takes a natural-language description of what you want to do, and are then invoked with executeRead, executeWrite, or executeDestructive depending on the operation's risk tier.

If you're connecting through an MCP gateway that requires a complete tool list rather than dynamic discovery, a paginated flat list is available at https://mcp.atlassian.com/v2/mcp?tools=all.

Tool availability is dynamic

The exact set of tools available in a given session depends on your authentication method, scopes, the permission groups your organization admin has enabled, and your app access.

Permission groups and access

Organization admins grant or revoke access at the permission-group level, and each tool inherits the access of its parent group. Some tools, such as discover and the execute tools, don't belong to a permission group and are required for the overall operation of the MCP server.

Availability also depends on the authentication method in use. Groups marked API token only require authentication via API token to be enabled by your organization admin; groups marked OAuth 2.1 only can't be used with an API token.

Common tools

Tool	Description
`atlassianUserInfo` (Primary)	Retrieve the current authenticated user's account information.
`getAccessibleAtlassianResources` (Primary)	List the Atlassian sites and apps you can access, with their `cloudId` values.
`discover` (Primary)	Search the deferred tool catalog using natural language.
`executeRead`, `executeWrite`, `executeDestructive` (Primary)	Execution pathways for deferred tools, with agent-level confirmation.
`getContentFormatGuide`	Get rich-content authoring format guidance for documents and whiteboards.

Jira

read_jira

Authentication: OAuth 2.1 and API token
Required scope: read:jira:agent-interface

Tool	Description
`getJiraIssue` (Primary)	Get a work item by ID or key.
`listJiraProjects`	Get visible Jira spaces.
`listJiraProjectIssueTypesMetadata`	Get the available work item types in a space.
`getJiraIssueTypeMetaWithFields`	Get the schema and field metadata for a specific work item type.
`listJiraIssueTransitions`	Get the available workflow transitions for a work item.
`listJiraIssueLinkTypes`	Get the available work item link types.
`listJiraIssueRemoteIssueLinks`	Get the remote links associated with a work item.
`listJiraIssueWorklogs`	Get paginated worklogs (logged time) for a work item.
`lookupJiraAccountId`	Look up a user account ID by display name or email.
`findJiraIssueAssignableUsers`	Find users assignable to a space or work item.
`listJiraIssueComments`	Get paginated comments for a work item.
`listJiraIssueChangelogs`	Get field-change history, paginated oldest-first.
`getJiraCurrentUser`	Get details for the current Jira user.
`getJiraUser`	Retrieve a user profile by account ID.
`listJiraStatuses`	List the possible work item statuses.
`listJiraProjectComponents`	List components with IDs, names, counts, and ownership.
`getJiraProjectVersions`	Get a space's releases/versions, or a single version.
`getJiraProjectVersionRelatedWork`	Get related work links on a space version.
`listJiraBoards`	List the boards visible to the current user.
`getJiraBoardConfig`	Get a board's configuration: filter, columns, and status mappings.
`getJiraBoardIssueData`	Get the work items on a board, with optional filtering.
`getJiraBoardSprintData`	Get board plus sprint data, defaulting to the active sprint.
`listJiraBoardSprints`	List sprints from a board, filtered to active, future, or closed.
`listJiraFilters`	Search saved filters, with their IDs and JQL.
`listJiraDashboards`	List the dashboards visible to the current user.
`getJiraEntityProperty`	Read a key/value store property on a work item, comment, worklog, dashboard item, or user.
`downloadJiraIssueAttachment`	Get a short-lived download URL for an attachment, plus a local save command.

write_jira

Authentication: OAuth 2.1 and API token
Required scope: write:jira:agent-interface

Tool	Description
`createJiraIssue` (Primary)	Create a new work item.
`editJiraIssue` (Primary)	Edit an existing work item's editable fields.
`transitionJiraIssue` (Primary)	Transition a work item to a new status, or assign it to a sprint or the backlog.
`addOrEditJiraIssueComment` (Primary)	Add a comment, or edit an existing one.
`addOrEditJiraIssueWorklog`	Log time, or edit an existing worklog.
`createJiraIssueLink`	Create a link between two work items.
`manageJiraProjectVersion`	Create, update, release, or archive a space version.
`manageJiraProjectVersionRelatedWork`	Create or update related work links on a space version.
`manageJiraSprint`	Create, populate, start, update, or close a sprint.
`createJiraBoard`	Create a company-managed scrum or kanban board from a filter.
`watchJiraIssue`	Watch or unwatch a work item.
`uploadAttachmentToJiraIssue`	Attach a local file to a work item.
`editJiraEntityProperty`	Set a key/value store property on a work item, comment, worklog, dashboard item, or user.

search_jira

Authentication: OAuth 2.1 and API token
Required scope: search:jira:agent-interface

Tool	Description
`searchJiraIssuesUsingJql` (Primary)	Search work items using JQL.

delete_jira

Availability: Disabled by default; requires admin enablement
Authentication: OAuth 2.1 and API token
Required scope: delete:jira:agent-interface

Tool	Description
`deleteJiraIssue`	Permanently delete a work item. This can't be undone.
`deleteJiraComment`	Permanently delete a comment from a work item. This can't be undone.
`deleteJiraIssueAttachment`	Permanently delete an attachment from a work item. This can't be undone.

manage_jira

Availability: Disabled by default; requires admin enablement
Authentication: OAuth 2.1 and API token
Required scope: manage:jira:agent-interface

Tool	Description
`createJiraProject`	Create a new Jira space from a template.
`updateJiraProject`	Update the settings on an existing space.

Confluence

read_confluence

Authentication: OAuth 2.1 and API token
Required scope: read:confluence:agent-interface

Tool	Description
`getConfluenceContent` (Primary)	Read any Confluence content: page, blog, live doc, comment, whiteboard, embed, database, or folder.
`listConfluenceContent`	List content of one type within a single space.
`listConfluenceSpaces`	List accessible spaces.
`getConfluenceSpace`	Retrieve a space by ID or key, with its enabled types and instructions.
`getConfluenceSpaceInstructions`	Get the instructions for a space.
`getConfluencePersonalSpace`	Get the current user's personal space.
`listConfluenceComments`	List the comments on a page or blog post.
`getConfluenceComment`	Get a single comment by ID.
`listConfluenceContentVersions`	Get version history, newest first.
`getConfluenceContentVersion`	Get one historical version.
`diffConfluenceContentVersions`	Get a unified diff between two versions.
`listConfluenceAttachments`	List attachment metadata for a content item.
`getConfluenceAttachment`	Get attachment metadata by ID.
`downloadConfluenceAttachment`	Get an attachment download URL, plus a curl command.
`exportConfluenceContent`	Export content as PDF or Word and return a download link.
`getConfluenceContentPermissions`	Get explicit content-level permission grants as operation and principal pairs.
`getConfluenceContentRestrictionState`	Get the general access level: `OPEN`, `EDIT_RESTRICTED`, or fully restricted.
`getConfluencePublicLinkStatus`	Get the external public-link (anonymous share) status.
`getConfluenceReactions`	Get the emoji reactions on content.
`getConfluenceTask`	Get a single inline task by ID.
`listConfluenceTasks`	List inline tasks, optionally scoped and filtered by status.
`listConfluenceTemplates`	List templates and blueprints.
`getConfluenceTemplate`	Get a template body.
`resolveConfluenceContentMacros`	Resolve macro wrappers into per-macro HTML.

write_confluence

Authentication: OAuth 2.1 and API token
Required scope: write:confluence:agent-interface

Whiteboard and database model quality

For whiteboards, Sonnet 4.6 is recommended. GPT 5.5 is compatible, but other models have not been tested for quality.

For databases, Sonnet 4.6 and Opus 4.6 are recommended.

Tool	Description
`createConfluenceContent` (Primary)	Create a page, blog post, live doc, whiteboard, database, embed, smart link, or folder.
`updateConfluenceContent` (Primary)	Update docs, whiteboards, or databases via replacement or granular edits.
`createConfluenceSpace`	Create a space. The response includes its ID, key, and homepage ID.
`setConfluenceSpaceInstructions`	Set the instructions for a space.
`copyConfluenceContent`	Copy a page, whiteboard, database, folder, or embed to a new parent.
`moveConfluenceContent`	Move a page, whiteboard, database, folder, or embed to a new parent or position.
`archiveConfluenceContent`	Archive a single content entity.
`unarchiveConfluenceContent`	Unarchive (restore) a single content entity.
`restoreConfluenceContentVersion`	Restore an earlier version as the new latest version.
`convertConfluenceContentMode`	Convert a page or live doc between classic and live-doc mode.
`setConfluenceContentStatus`	Set the content state (status) of a page or blog post.
`createConfluenceComment`	Create or reply to a footer or inline comment.
`updateConfluenceComment`	Update an existing footer or inline comment.
`updateConfluenceCommentResolution`	Resolve or reopen a footer or inline comment.
`createConfluenceAttachment`	Prepare an attachment upload and return a curl command.
`addLabelsToConfluenceContent`	Add labels to any content.
`addConfluenceReaction`	Add an emoji reaction to content.
`addConfluenceContentPermissions`	Add content-level grants, preserving existing grants.
`removeConfluenceContentPermissions`	Remove content-level grants, optionally narrowed by operation or principal.
`replaceConfluenceContentPermissions`	Replace all content-level grants with the supplied set.
`setConfluenceContentRestrictionState`	Set the high-level restriction state.
`enableConfluencePublicLink`	Enable the external public link for a page.
`disableConfluencePublicLink`	Disable the external public link.
`completeConfluenceTask`	Mark an action item as done.
`reopenConfluenceTask`	Mark a completed action item as not done.
`starConfluenceContent` / `unstarConfluenceContent`	Star or unstar a page.
`starConfluenceSpace` / `unstarConfluenceSpace`	Star or unstar a space.
`watchConfluenceContent` / `unwatchConfluenceContent`	Subscribe to or unsubscribe from updates on a page.
`watchConfluenceSpace` / `unwatchConfluenceSpace`	Subscribe to or unsubscribe from updates in a space.
`watchConfluenceLabel` / `unwatchConfluenceLabel`	Subscribe to or unsubscribe from updates on content with a label.

search_confluence

Authentication: OAuth 2.1 and API token
Required scope: search:confluence:agent-interface

Tool	Description
`searchConfluence` (Primary)	Search Confluence content with CQL.

Jira Service Management

API token authentication only

Jira Service Management tools are available only via API token authentication, which your organization admin must enable.

read_jsm

Authentication: API token only

Tool	Required scopes	Description
`getJsmOpsAlerts`	`read:ops-alert:jira-service-management`, `read:ops-config:jira-service-management`, `read:jira-user`	Get an operations alert by ID, alias, or search query.
`getJsmOpsScheduleInfo`	`read:ops-config:jira-service-management`, `read:jira-user`	List on-call schedules, or get the current or next responders.
`getJsmOpsTeamInfo`	`read:ops-config:jira-service-management`, `read:jira-user`	List operations teams and team details.

write_jsm

Authentication: API token only

Tool	Required scopes	Description
`updateJsmOpsAlert`	`read:ops-alert:jira-service-management`, `write:ops-alert:jira-service-management`	Perform alert actions: acknowledge, unacknowledge, close, or escalate.

Bitbucket Cloud

Workspace linking required

Bitbucket tools require the Bitbucket workspace to be linked to an Atlassian organization.

read_bitbucket

Authentication: OAuth 2.1 and API token
Required scope: read:bitbucket:agent-interface

Tool	Description
`listBitbucketWorkspaces`	List the workspaces the user is a member of.
`getBitbucketWorkspace`	Get a workspace.
`listBitbucketRepositories`	List the repositories in a workspace.
`getBitbucketRepository`	Get a repository.
`getBitbucketRepoDefaultReviewers`	Get the effective default reviewers for a repository.
`getBitbucketRepoFileContent`	Get file or directory content.
`getBitbucketRepoBranch`	Get a branch.
`getBitbucketRepoCommit`	Get a commit.
`listBitbucketRepoCommitReports`	List the code-insights reports on a commit.
`getBitbucketRepoCommitReport`	Get a code-insights report on a commit.
`getBitbucketRepoCommitReportAnnotations`	Get the annotations of a commit report.
`listBitbucketRepoPullRequests`	List the pull requests in a repository.
`getBitbucketRepoPullRequest`	Get a pull request.
`getBitbucketRepoPullRequestDiff`	Get the diff of a pull request.
`listBitbucketRepoPullRequestComments`	List the comments on a pull request.
`listBitbucketRepoPullRequestTasks`	List the tasks on a pull request.
`listBitbucketRepoPipelines`	List the pipelines for a repository.
`getBitbucketRepoPipeline`	Get a pipeline.
`listBitbucketRepoPipelineSteps`	List the steps of a pipeline.
`getBitbucketRepoPipelineStep`	Get a pipeline step.
`getBitbucketRepoPipelineStepLog`	Get the log of a pipeline step.
`listBitbucketRepoDeployments`	List the deployments for a repository.
`getBitbucketRepoDeployment`	Get a deployment.
`listBitbucketRepoEnvironments`	List the deployment environments for a repository.
`getBitbucketRepoEnvironment`	Get a deployment environment.

write_bitbucket

Authentication: OAuth 2.1 and API token
Required scope: write:bitbucket:agent-interface

Tool	Description
`createBitbucketRepoPullRequest`	Create a pull request.
`updateBitbucketRepoPullRequest`	Update a pull request.
`mergeBitbucketRepoPullRequest`	Merge a pull request.
`approveBitbucketRepoPullRequest`	Approve a pull request.
`requestChangesOnBitbucketRepoPullRequest`	Request changes on a pull request.
`addBitbucketRepoPullRequestComment`	Add a comment to a pull request.
`resolveBitbucketRepoPullRequestComment`	Resolve a comment thread on a pull request.
`reopenBitbucketRepoPullRequestComment`	Reopen a resolved comment thread.
`createBitbucketRepoPullRequestTask`	Create a task on a pull request.
`setBitbucketRepoPullRequestTaskState`	Resolve or reopen a pull request task.
`createBitbucketRepoBranch`	Create a branch.
`createBitbucketRepoCommit`	Create a commit.
`runBitbucketRepoPipeline`	Run a pipeline.

Atlassian platform

read_teamwork_graph

Authentication: OAuth 2.1 and API token
Required scope: read:all:twg
Credits: May consume up to 10 Rovo credits per call

Tool Description

getTeamworkGraphContext (Primary) Retrieve connected context from Teamwork Graph for any Atlassian entity, returning its relationships and linked objects. Supported entry points include Jira work items, spaces, sprints, versions, and comments; Confluence pages, blogposts, whiteboards, databases, and spaces; goals, projects, focus areas, tags, and updates; people, teams, and organizations; DevOps pull requests, repositories, deployments, services, builds, and designs; Loom videos and meetings; Compass components; incidents; conversations; calendar events; and external documents.

getTeamworkGraphObject (Primary) Fetch all available data for one or more objects using their ARIs or URLs.

Tool	Description
`getTeamworkGraphContext` (Primary)	Retrieve connected context from Teamwork Graph for any Atlassian entity, returning its relationships and linked objects. Supported entry points include Jira work items, spaces, sprints, versions, and comments; Confluence pages, blogposts, whiteboards, databases, and spaces; goals, projects, focus areas, tags, and updates; people, teams, and organizations; DevOps pull requests, repositories, deployments, services, builds, and designs; Loom videos and meetings; Compass components; incidents; conversations; calendar events; and external documents.
`getTeamworkGraphObject` (Primary)	Fetch all available data for one or more objects using their ARIs or URLs.

write_teamwork_graph

Authentication: OAuth 2.1 and API token
Required scope: write:all:twg

Tool	Description
`addTeamworkGraphContext` (Primary)	Add a relationship between two objects in Teamwork Graph.

search_atlassian

Authentication: OAuth 2.1 and API token
Required scope: search:rovo:agent-interface
Credits: May consume up to 10 Rovo credits per call

Tool	Description
`search` (beta) (Primary)	Semantic search across Jira, Confluence, and connected apps using natural language.

search_code

Authentication: OAuth 2.1 only
Required scope: search:code:agent-interface

Tool	Description
`searchCode`	Search source code across connected providers, returning matching files and specific lines.
`getCodeFile`	Read the full contents of one file at a specific commit.
`listCodeDirectory`	List the files and subfolders under a path, paginated.
`scanCodeRepo`	List a repository's file paths at a specific commit, without reading contents.
`getCodeSymbol`	Find where a function, class, or variable is defined, and everywhere it's used.
`diffCodeSymbols`	Report which code parts a change touches, and where else those parts are referenced.

Loom

Workspace linking required

Only Loom workspaces linked to Atlassian sites are available.

read_loom

Authentication: OAuth 2.1 and API token
Required scope: read:loom:agent-interface

Tool	Description
`getLoomVideo` (Primary)	Get a video's core metadata, and optionally its transcript, comments, AI briefs, extracted meeting action items, or attached links.
`listLoomVideos`	List the videos owned by the user, most recent first.
`listLoomVideosSharedWithMe`	List the videos others have shared with the user, most recent first.
`getLoomVideoComments`	Get the comments on a video, with author and in-video timestamp.
`getLoomMeetingActionItems`	Get the AI-generated meeting action items extracted by Loom.
`getLoomVideoDownloadUrl`	Get a time-limited signed URL to download the MP4 file.
`listLoomFolders`	List the folders in the current workspace, for moving videos.

write_loom

Authentication: OAuth 2.1 and API token
Required scope: write:loom:agent-interface

Tool	Description
`createLoomVideoUpload`	Start uploading a new video (step 1 of 2).
`publishLoomVideo`	Finalize video publishing (step 2 of 2).
`updateLoomVideoTitle`	Rename a video. The change is immediate and visible to all viewers.
`updateLoomVideoPermissions`	Set visibility to `OWNER`, `WORKSPACE`, or `PUBLIC`.
`shareLoomVideo`	Share a video with specific Atlassian users by notification.
`createLoomVideoComment`	Post a comment on a video, anchored to a point in seconds.
`createLoomVideoReaction`	Add an emoji reaction to a video, anchored to a point in the video.
`createLoomFolder`	Create a folder in the current workspace, optionally nested or in a space.
`moveLoomVideoToFolder`	Move a video into a folder in the current workspace.
`recoverLoomVideo`	Re-process a video that failed or is stuck.

Goals

read_goals

Authentication: OAuth 2.1 and API token
Required scope: read:goals:agent-interface

Tool	Description
`searchGoals`	Find goals by text and structured filters.
`getGoal`	Get one goal by exact ARI or key, with optional related details.
`getGoalUpdate`	Get one goal update by exact ARI, with optional related details.
`getGoalTypes`	Get the goal types available for creating goals and success measures.

write_goals

Authentication: OAuth 2.1 and API token
Required scope: write:goals:agent-interface

Tool	Description
`createGoal`	Create a goal or success measure using an enabled goal type.
`createGoalUpdate`	Create a progress update for an existing goal.
`addConnectionsToGoals`	Add one connection type to one or more goals.

Projects

read_projects

Authentication: OAuth 2.1 and API token
Required scope: read:projects:agent-interface

Tool	Description
`searchProjects`	Find projects by text and structured filters.
`getProject`	Get one project by exact ARI or key, with optional related details.
`getProjectUpdate`	Get one project update by exact ARI, with optional related details.

write_projects

Authentication: OAuth 2.1 and API token
Required scope: write:projects:agent-interface

Tool	Description
`createProject`	Create an Atlassian project.
`createProjectUpdate`	Create a progress update for an existing project.
`addConnectionsToProjects`	Add one connection type to one or more projects.

Teams

read_teams

Authentication: OAuth 2.1 only
Required scope: read:teams:agent-interface

Tool	Description
`searchTeams`	Search teams by name with cursor pagination, with optional member list expansion.
`getTeam`	Get the core metadata for one team, with optional expansions for members, projects, goals, and hierarchy.

write_teams

Authentication: OAuth 2.1 only
Required scope: write:teams:agent-interface

Tool	Description
`createTeam`	Create a team with `MEMBER_INVITE` or `OPEN` membership and up to 50 initial account IDs.
`updateTeam`	Update a team.

Focus areas

read_focus

Authentication: OAuth 2.1 and API token
Required scope: read:focus:agent-interface

Tool	Description
`searchFocusAreas`	Search focus areas by text and structured filters.
`getFocusArea`	Get a focus area by UUID, ARI, or page URL, with optional expansions.
`getFocusAreaTypes`	Get the configured focus-area type hierarchy for a workspace.

write_focus

Authentication: OAuth 2.1 and API token
Required scope: write:focus:agent-interface

Tool	Description
`createFocusArea`	Create a focus area in a workspace.
`updateFocusArea`	Update a focus area's name, owner, start date, or description.
`createFocusAreaStatusUpdate`	Post a status update recording a change to status and/or target date.
`linkToFocusArea`	Link sub-focus areas to a focus area, one connection type per call.

Talent

read_talent

Authentication: OAuth 2.1 and API token
Required scope: read:talent:agent-interface

Tool	Description
`getTalentUser`	Resolve the calling user's position entity ID, their manager's, and their role.
`getTalentFields`	Discover queryable fields, or resolve valid filter values.
`searchTalentPositions`	Search positions by attributes using an RQL filter, paginated.
`getTalentPosition`	Read a single position by ARI, with its field values and optionally the worker.
`getTalentPositionsByEntity`	Get the positions attached to an entity - for example, direct reports.
`getTalentGroupMetrics`	Aggregate positions into counts grouped by up to four field IDs.

write_talent

Authentication: OAuth 2.1 and API token
Required scope: write:talent:agent-interface

Tool	Description
`createTalentSkill`	Create a skill in the skills hierarchy, optionally nested under a parent.
`updateTalentWorkerSkillMappings`	Assign skills to a worker, or decline previously assigned skills.
`updateTalentPositionFocusAreaMappings`	Allocate a position to a focus area, one at a time. A new allocation replaces the current one.

Teamwork Graph and third-party data

Teamwork Graph MCP tools can retrieve data from third-party services connected to Jira, such as linked pull requests, builds, and deployments. For the GitHub for Atlassian connector, the data retrievable via MCP depends on the permission level granted to the connector:

Full access - MCP tools can retrieve GitHub data based on the user's GitHub permissions.
Limited access - MCP tools can retrieve GitHub data based on the user's Jira permissions, which may differ from their GitHub permissions. If a user can see a GitHub link in a Jira work item, they can retrieve only what is shown on that work item.

Security guidance

MCP clients can perform actions across Atlassian apps with your existing permissions. Use least privilege, review high-impact changes before confirming, and monitor audit logs for unusual activity.