// SCAN REPORT

Jira MCP Server

57 tools. 30 can modify or destroy data without limits.

7 destructive tools with no built-in limits. Policy required.

Last updated:

30 can modify or destroy data
27 read-only
57 tools total

Community server · catalogue entry verified 29/06/2026

How to control Jira MCP Server ↓

TOOL MAP

What Jira MCP Server exposes to your agents

Read (27) Write / Execute (23) Destructive / Financial (7)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS
Critical Risk

The most dangerous Jira MCP Server tools

Destructive · High confluence_delete_page Page deletion is permanent and cannot be undone. Destructive · High confluence_delete_space Deleting a Confluence space is a destructive operation that removes data permanently. Destructive · High jira_delete_comment This tool permanently removes data (a comment from a Jira ticket) with no rollback capability. Destructive · High jira_delete_ticket This tool permanently deletes Jira tickets and cannot be undone.

30 of Jira MCP Server's 57 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Jira MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Jira MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations
{
  "confluence_delete_page": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations
{
  "confluence_add_comment": {
    "limits": [
      {
        "counter": "confluence_add_comment_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "confluence_download_attachment": {
    "limits": [
      {
        "counter": "confluence_download_attachment_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Jira MCP Server — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON JIRA →

Instant setup, no code required.

FULL CATALOGUE

All 57 Jira MCP Server tools

DESTRUCTIVE 7 tools
Destructive confluence_delete_page Delete a Confluence page by ID. Destructive confluence_delete_space Delete a Confluence space by key. This is asynchronous on Confluence Cloud — the call returns a long-running t Destructive jira_delete_comment Delete a comment from a Jira ticket. This action is irreversible. Destructive jira_delete_ticket Delete a Jira ticket. This action is IRREVERSIBLE. If the ticket has subtasks, set deleteSubtasks to true or t Destructive jira_remove_attachment Remove an attachment from a Jira ticket by attachment ID or filename. If using filename, fetches the ticket to Destructive jira_remove_instance Remove a Jira instance configuration by name. Cannot remove the last remaining instance. Destructive jira_unlink_tickets Remove a link between two Jira tickets. Fetches the issue to find the link ID automatically.
WRITE 23 tools
Write confluence_add_comment Add a footer comment to a Confluence page. Default format is Write confluence_add_label Add a label to a Confluence page. Write confluence_create_page Create a new Confluence page. Body must be storage XHTML. Optional parentId nests under an existing page. Write confluence_create_space Create a new Confluence global space. Provide key, name, and optional description (plain text). Write confluence_remove_label Remove a label from a Confluence page. Write confluence_update_page Update an existing Confluence page. Title and/or body (storage XHTML). Version auto-bumps if omitted (fetches Write confluence_update_space Update a Confluence space Write confluence_upload_attachment Upload a file as an attachment to a Confluence page. Provide either filePath or fileContent (base64) + fileNam Write jira_add_attachment Upload a file attachment to a Jira ticket. Provide either a local file path or base64-encoded file content. Write jira_add_comment Add a comment to a Jira ticket. RULES: (1) Default to a HIGH LEVEL update for stakeholders, product owners, an Write jira_add_instance Add or update a Jira instance configuration. Saves to config and makes it available immediately without restar Write jira_add_watcher Add a watcher to a Jira ticket. The watcher will receive notifications for changes on the ticket. Write jira_add_worklog Log time/work on a Jira ticket. Use Jira time format for timeSpent (e.g., Write jira_clone_ticket Clone/duplicate a Jira ticket. Creates a new ticket with the same summary, description, priority, labels, and Write jira_create_subtask Create a subtask under a parent Jira ticket. The subtask is created in the same project as the parent. NEVER u Write jira_create_ticket Create a new Jira issue (story, task, bug, epic, etc.). Returns the new issue key and URL. Use jira_search_use Write jira_edit_comment Edit an existing comment on a Jira ticket. Replaces the comment text. Keep it high level for non-developers, a Write jira_link_tickets Link two Jira tickets together with a relationship type. Use jira_get_link_types to discover available link ty Write jira_move_to_sprint Move one or more tickets into a sprint. Use jira_get_sprints to find sprint IDs. Write jira_remove_watcher Remove a watcher from a Jira ticket. Write jira_reply_comment Reply to a specific comment on a Jira ticket. Quotes the original comment and mentions the author. Write jira_transition Change the status of a Jira ticket. Use targetStatus to transition by name (auto-handles intermediate steps li Write jira_update_ticket Update fields on a Jira ticket. IMPORTANT: Only pass the fields you want to change. Omitted fields are left un
READ 27 tools
Read confluence_download_attachment Download an attachment from a Confluence page by filename. Saves under ~/.config/jira-mcp/confluence-attachmen Read confluence_get_comments List comments on a Confluence page, expanded with body.view, version, created/updated history. Read confluence_get_labels List labels on a Confluence page. Read confluence_get_page Fetch a full Confluence page. Returns v1 content (body.view, body.storage, space, ancestors, labels) merged wi Read confluence_get_page_children List direct child pages of a Confluence page, expanded with version, history and childTypes.page. Read confluence_get_recent_pages List recently modified pages within a time window. Params: spaceKey (optional), sinceDays (default 30), limit Read confluence_get_space Get a single Confluence space by key. Returns space metadata including description and homepage. Read confluence_get_space_root_pages List top-level (root) pages in a Confluence space, expanded with childTypes.page so consumers can tell which p Read confluence_get_spaces List Confluence global spaces. Returns [{ key, name, id }]. On Cloud reuses the Jira instance credentials (Con Read confluence_list_attachments List attachments on a Confluence page. Read confluence_search Confluence CQL search for content. Builds CQL: text ~ \ Read jira_get_boards List agile boards (Scrum or Kanban). Optionally filter by project key or board name. Read jira_get_changelog Get status change history for a Jira ticket or multiple tickets via JQL. Returns all status transitions with t Read jira_get_components List all components for a project. Useful before creating tickets to know valid component names. Read jira_get_issue_types List available issue types for a project. Useful before creating tickets to know valid issue type names. Read jira_get_link_types List all available issue link types in the Jira instance. Use this to discover valid link type names before us Read jira_get_myself Get the current authenticated user Read jira_get_priorities List all available priority levels in the Jira instance. Read jira_get_sprints List sprints for an agile board. Returns sprint IDs, names, states, and dates. Read jira_get_teams Search for available Jira teams by name. Returns matching teams with their IDs. Use this to find a team before Read jira_get_ticket Fetch a Jira ticket by its key (e.g., MODS-12115). Returns full details including description, comments, attac Read jira_get_transitions List available status transitions for a Jira ticket. Use this to discover valid transition names/IDs before us Read jira_get_versions List all versions/releases for a project. Useful for setting fixVersions on tickets. Read jira_get_worklogs Get work logs (time tracking entries) for a Jira ticket. Read jira_list_instances List all configured Jira instances with their names, URLs, project prefixes, and which is the default. Read jira_search Search Jira tickets using JQL. Returns detailed fields including dates, story points, labels, components, fix Read jira_search_users Search for Jira users by name or email. Returns account IDs and display names. Use this to find users for ment
EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Yaver 1060 tools
admin
Nodebench 824 tools
admin
UnClick 813 tools
admin
Binance MCP Server 734 tools
admin
Pfsense 680 tools
admin
AdButler 622 tools
admin
Fortimanager 584 tools
admin
Crow 573 tools
admin
FAQ

Questions about Jira MCP Server

Can an AI agent delete data through the Jira MCP Server MCP server? +

Yes. The Jira MCP Server server exposes 7 destructive tools including confluence_delete_page, confluence_delete_space, jira_delete_comment. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Jira MCP Server? +

The Jira MCP Server server has 23 write tools including confluence_add_comment, confluence_add_label, confluence_create_page. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Jira MCP Server.

How many tools does the Jira MCP Server MCP server expose? +

57 tools across 3 categories: Destructive, Read, Write. 27 are read-only. 30 can modify, create, or delete data.

How do I enforce a policy on Jira MCP Server? +

Register the Jira MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Jira MCP Server tool call.

Deterministic rules across all 57 Jira MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON JIRA →

Instant setup, no code required.

57 Jira MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.