This release adds JSM customer-request and internal-comment support, epic hierarchy and dependency tools, PAC/WPAD and mTLS connectivity, external auth passthrough, and Live Docs page creation, plus a broad batch of Jira/Confluence content fixes and security updates to Starlette and FastMCP.

✨ Features

Jira

• New JSM customer request tools — jira_get_request_types, jira_get_request_type_fields, and jira_create_customer_request — let clients list request types, inspect their visible fields, and raise customer requests with participants, base64 attachments, and on-behalf-of support (#1241)
• New jira_get_project_epic_hierarchy groups a project's epics under their cross-project parent issues with direction-aware link classification, and jira_get_cross_project_dependencies maps issue links by target project and link type (#1286)
• jira_get_issue and jira_search accept use_display_names to return human-readable custom field keys such as Story Points instead of opaque IDs like customfield_10243; conflicting names safely fall back to the raw ID (#1156)
• Jira issue and search results now include a browse_url pointing at the issue's /browse/ page, for quick open-ticket-in-browser workflows (#1471)
• jira_update_issue accepts return_fields to trim the post-update re-fetch and cut response tokens; the full-issue default is unchanged (#1466)
• Markdown {expand:Title} blocks in issue descriptions convert to native collapsible sections on Cloud, including nested headings, lists, and code blocks (#1309)
• Development information queries discover case-sensitive application types from the dev-status summary endpoint when application_type is omitted, so custom connectors are found without guessing exact casing (#1329)

Confluence

• GFM task lists (- [ ] / - [x]) convert to native Confluence task macros instead of literal checkbox text, and new page template tools let you list Cloud templates, fetch them, and create pages from them (#1180)
• Page creation accepts a subtype — including live for Live Docs — on Cloud, and page responses expose the subtype (#1479)

Server/Transport

• Opt-in external authentication passthrough: forward an operator-allowlisted set of incoming MCP headers to Jira and Confluence per request, supporting external proxy-managed auth without local Atlassian credentials. Dynamic per-request destinations require MCP_ALLOWED_URL_DOMAINS to prevent credential exfiltration (#1457)
• Opt-in PAC/WPAD proxy auto-configuration for environments where the outbound route is selected by a PAC file. WPAD stays disabled by default, explicit proxy settings take precedence, and the SSRF/DNS-pinning defenses are preserved when PAC routing is enabled (#1367, #1461)
• New cert auth type for Server/DC deployments that use mutual TLS: a client certificate/key pair alone now authenticates — previously setting JIRA_CLIENT_CERT / CONFLUENCE_CLIENT_CERT without a username or token left the service silently disabled (#1196)

🐛 Fixed

Jira

• jira_get_issue_comments no longer crashes with a TypeError on Cloud, where REST v3 returns comment bodies as ADF — bodies are converted to text the same way the add/edit comment paths already do (#1489)
• Transition comments are routed through the correct API version: Cloud uses REST v3 with ADF in one atomic request (so workflows whose transition screen requires a comment now work), while Server/DC keep wiki-markup via v2 (#1355)
• jira_download_attachments returns non-image attachments as TextContent with a JSON envelope (base64 payload, filename, MIME type) instead of an EmbeddedResource blob that some MCP clients reject; images keep the embedded form (#1469)
• Bare Jira issue keys in Cloud markdown are autolinked to the configured /browse/ URL when converted to ADF (#1468)
• jira_add_comment accepts comment as a compatibility alias for the body parameter, so clients sending the older shape no longer fail argument validation (#1467)
• Segmented hyphenated issue keys such as B7-214-68901 (Server/DC) pass validation and are preserved by smart-link extraction (#1476)
• Blocking fetcher calls for jira_get_issue and jira_search are offloaded from the MCP event loop and bounded by JIRA_FETCHER_MAX_WORKERS (default 8), keeping the server responsive under concurrent issue reads (#1459)
• Issue creation prefers an exact Epic issue type match, so custom types like Program Epic are no longer selected by accident (#1370)
• Legacy 24-character hexadecimal Cloud account IDs are recognized regardless of their first character; malformed IDs, emails, and display names still go through normal user lookup (#1164)
• Issue created / updated timestamps are routed through format_timestamp, returning localized timestamps instead of raw ISO strings (#1236)

Confluence

• CQL searches like type=space return results instead of an empty list — space-type result items are now mapped and matched for excerpts (#1119, closes #907)
• CQL search results include created / updated / author metadata again by expanding nested content history and version fields (#1480)
• Comment replies preserve their bodies across API paths: v1 replies use the owning page as container with the parent in ancestors, and Cloud OAuth/PAT route through v2 with a storage-body fallback (#1485)
• Legacy Server/DC timestamps that overflow the platform datetime range no longer crash page and comment formatting — the raw timestamp is returned instead of failing the whole tool response (#1483)
• Updated to markdown-to-confluence 0.6 while preserving attachment handling, code-language normalization, table-layout conversion, and task-list behavior (#1486)
• confluence_set_page_restrictions list parameters now declare an items schema, unblocking VS Code Agent mode, which rejected the generated tool schema entirely (#1487, closes #1455)
• Date lozenges stored as <time datetime="..."> elements survive storage-to-Markdown conversion (#1107)

Server/Transport

• Header-based PAT requests honour *_SSL_VERIFY and proxy settings instead of hardcoding SSL verification on and disabling proxies (#1211)
• Hosts listed in NO_PROXY bypass the proxy even when proxies are explicitly configured on the session (#1191)
• Unexpected tool failures surface detailed ToolErrors instead of generic masked errors, and Confluence search helpers no longer return empty success results for API/network failures (#1316, closes #1315)
• Multi-user token validation results are cached across requests for a configurable TTL (MCP_ATLASSIAN_VALIDATION_CACHE_TTL, default 300s; 0 disables), cutting a validation round-trip from every request. Cache keys are SHA-256 material scoped by service and credential, so raw tokens are never stored (#1481, closes #1405)
• MCP tool annotations align with actual behavior: additive write tools are marked non-destructive, while watcher removal and sprint reassignment keep their destructive annotations (#1458)

🔒 Security

Server/Transport

• Upgraded the Starlette dependency to a patched release (>=1.0.1) for GHSA-86qp-5c8j-p5mr, with a malformed Host header regression test covering the path-based middleware gates (#1470)
• Upgraded the bundled FastMCP framework from 2.x to 3.x, clearing known vulnerabilities in the 2.x line (#1234, #1348). The migration preserves the tool-visibility security boundary end to end: tools hidden by read-only mode, ENABLED_TOOLS, or toolset filtering remain both unlisted and uncallable, and denials are indistinguishable from unknown tools (#1442, supersedes #1388)
• Follow-up hardening of the filter and SSRF defenses: caller-supplied projects_filter values are quoted as JQL literals and grouped so they cannot escape the configured allowlist, caller-controlled destinations stay on the direct DNS-pinned connection path when deployment proxies are configured, and relative redirect locations are resolved before SSRF validation (#1450)

Jira

• New server-side internal-only comment guard for JSM projects: with JIRA_INTERNAL_ONLY_PROJECTS configured, comments created through the add, edit, transition, and issue-link paths in those projects are enforced as internal, so AI-authored comments cannot leak to service-desk customers. The guard fails closed unless Jira explicitly reports the comment as non-public (#1478)
• Hardened JIRA_INTERNAL_ONLY_PROJECTS handling against invisible characters — zero-width characters or a BOM in configured project keys or incoming issue keys could previously make the guard fail open. Keys are now normalized, and entries that cannot match a valid project-key shape produce a warning (#1491)

🧰 Also in this release

Expanded regression coverage for Jira REST API v3 (#1110, closes #338), web and Confluence remote links (#1108), dynamic Epic Link fields (#1113), JSM queue request contracts (#1115), custom field option values (#1464, closes #673), and jira issues/epics (#1497); a deterministic rate-limit throttle test (#1449); a TruffleHog secret-scanning CI workflow (#1265); and setup docs for Autohand Code (#1472).

Contributors

Thanks to @trentzeigler (#1442, #1388), @sanjibani (#1489, #1487), @saidelike (#1367, #1459), @keithxm23 (#1196), @WZHBEDZ (#1316), @Troubladore (#1119, #1107), and @cblacknygc (#1497)!

Additional thanks to the contributors whose original work was carried into this release: @faizbawa, @kbichave, @deniszagitov, @slinkardbrandon, @cedrickcom, @trevorh, @jcbportela, @NickLoeza, @abhinavgaba, @tony-davis, @Niicolaa, @timwinders, and @balcsida.

Full Changelog: v0.22.1...v0.23.0

🔒 Security

Jira

• Prevented caller-supplied projects_filter values from injecting JQL operators that could escape the configured project allowlist. Filter values with JQL syntax are now quoted as literals, and generated project clauses are explicitly grouped. (#1450)

Transport

• Kept caller-controlled destinations on the direct DNS-pinned connection path when deployment proxies are configured, so proxy-side DNS resolution cannot bypass the SSRF rebinding defense. Operator-configured Jira, Confluence, OAuth gateway, and allowlisted hosts continue to support proxies. (#1450)
• Resolved relative and scheme-relative redirect locations against the response URL before SSRF validation, restoring safe same-host redirects while continuing to block unsafe destinations. (#1450)

Full Changelog: v0.22.0...v0.22.1

v0.22.0

This release bundles three months of community contributions with a coordinated security hardening pass across the attachment, transport, SSRF-validation, filtering, and OAuth layers.

🔒 Security

A security audit (37 advisories, consolidated into root-cause families) was resolved in this release. Advisories are being published with "fixed in 0.22.0" — highlights:

• Attachment & content-file path confinement — upload_attachment / download_attachment (Jira & Confluence) and the new content_file page input now validate every caller-supplied path against the workspace via validate_safe_path, closing arbitrary file read/exfiltration and an intra-CWD overwrite RCE variant. Note: paths passed to these tools must now resolve inside the server's working directory. (GHSA-wm45-qh3g-v83f, GHSA-vc25-24vv-fxxm, GHSA-93xw-j965-9mx3, GHSA-6cr4-ccf3-x7h4, GHSA-f4p7-qx46-wc5j, GHSA-f6pj-qv47-g96w, GHSA-2xj6-xx86-cwwc, GHSA-mrq8-fv7v-hhjg, GHSA-wv8v-v4c5-v75j, GHSA-p6hp-93wp-fh6p, GHSA-h7wj-5v37-59r2, GHSA-mfv2-4wvm-9pgp, GHSA-f26r-j276-ggg4, GHSA-g5r6-gv6m-f5jv, GHSA-6vmq-24h2-pj7j)
• HTTP transport authentication (critical) — unauthenticated streamable-http requests no longer fall back to the operator's global credentials; the fallback is now opt-in via ALLOW_GLOBAL_CRED_FALLBACK (default off), and unauthenticated requests are rejected with 401 at the transport boundary. (GHSA-wrhw-j3f9-8vc6, GHSA-vc8m-84rp-53hx, GHSA-cc5h-2pwp-pvcc)
• SSRF hardening — redirect validation now covers every client session and auth branch, backslash authority-confusion URLs are rejected, and a DNS-pinning transport adapter resolves each host exactly once (validate → connect on the same address), eliminating the DNS-rebinding TOCTOU against the CVE-2026-27826 fix. Hosts from your configured JIRA_URL / CONFLUENCE_URL and MCP_ALLOWED_URL_DOMAINS are exempt from the non-global-address rejection, so on-prem DC instances on private networks keep working; caller-supplied URLs (multi-user HTTP headers) remain fully guarded. (GHSA-6529-c226-h328, GHSA-hgcf-4mq8-5266, GHSA-v9m3-wfh8-5646, GHSA-5wf4-jqxh-8gm3, GHSA-49xv-9743-pw8w, GHSA-72fm-whvq-jghf, GHSA-489g-7rxv-6c8q, GHSA-6rrj-86cw-gg9j)
• Tool authorization enforcement — tools hidden by ENABLED_TOOLS / toolset / read-only mode can no longer be invoked by name; authorization is enforced at dispatch, not just listing. (GHSA-3r68-hf9h-887v)
• Project/space filter boundary — JIRA_PROJECTS_FILTER / CONFLUENCE_SPACES_FILTER are now a hard boundary: always ANDed into queries (callers can narrow but never widen), covering search and board issues. Sprint IDs are validated numeric to prevent JQL injection. (GHSA-w66g-j6c4-hcfc, GHSA-rqwg-9346-fjjv)
• OAuth token file permissions — fallback token files are written owner-only (0600, dir 0700). (GHSA-g5xv-mhgm-v5f6, GHSA-76pr-5669-3xf5, GHSA-4596-2p6p-28cv)
• Reflected XSS — the OAuth callback page HTML-escapes its output. (GHSA-g2r2-3j32-j27x)

Each fix ships with permanent regression tests. Thanks to everyone who reported — including @rainfantry for GHSA-g5r6-gv6m-f5jv, and overlapping public reports from @failsafesecurity and @rober15.

✨ Features

Jira

• Dedicated assign_issue tool (#1152) and search_assignable_users for free-form user lookup (#1358)
• jira_move_issue for cross-project moves (#1273) and move_issues_to_backlog (#1333)
• jira_search_projects using the projects picker API (#1247)
• update_version tool (#1349)
• get_issue gains an include param for inline enrichments (#1125)
• Issue type and field discovery tools (#1123)
• ADF/markdown: panel nodes (#1219), task lists - [ ] → taskList (#1280), [~accountid:UUID] mentions (#1307), display-name mentions (#1228)
• account_id exposed in simplified user profiles (#1347)

Confluence

• Inline comment tools with Server/DC v1 payload fix (#1264)
• confluence_update_page_section for lossless partial page updates (#1141)
• content_file input for create/update page (#1275)
• content_base64 input for upload_attachment — upload from in-memory content when the server can't read host file paths (#1366)
• Content and space permission checking tools (#1320)
• get_page resolves Confluence tiny links and page URLs (#1222)
• Table layout, page width, page restrictions, and copy-page support (#1178)

Server/Transport

• Opt-in HTTP hardening: urllib3 retries with Retry-After respect, outbound rate limit, process-wide concurrency cap, circuit breaker, and pagination clamp — all disabled by default, tunable via env (#1310)

🐛 Fixed

Jira

• update_issue: null values clear fields (#1140); loud failure when assignee can't be resolved (#1380); tolerate default comment fields (#1334)
• Pagination: get_worklogs returns all entries (#1223); newest comments first when limiting (#1218)
• 'me' identifier in get_user_profile (#1120); sub-task name match preference (#1331); version field allowed in issue field selection (#1227)
• Version creation uses correct API per deployment (#1339; #1350)
• Markdown: full table block parsing (#1379); no intraword-underscore italics (#1361)
• Embedded media preserved on Cloud description updates (#1224); case-sensitive dev-status applicationType (#1153); simplified get_all_projects output (#1291)

Confluence

• DC/Server attachment upload completed — XSRF header, POST method, versioning fallback (#1253); upload API errors surfaced (#1441)
• Cloud attachment URLs: /wiki prefix on upload/delete (#1386); v1 REST endpoint for downloads (#1369)
• Page tree position sort normalization (#1352); v2 API for page children (#1304); history in get_page_content expand (#1117)
• User mentions: ri:userkey / ri:username handling (#1298); bare-filename img tags become attachment macros (#1176)

Server/Transport & Auth

• Require a FastMCP version with event-store support (#1351)
• Per-user OAuthConfig guarded against BYO global config (#1364)
• Explicit User-Agent on Jira/Confluence sessions (#1326)
• Auth token redacted in unsupported-Authorization logs (#1160)
• Jira Server/DC string response handling + xhtml content format (#1231)

Full Changelog: v0.21.1...v0.22.0

This release fixes a critical startup crash caused by an upstream dependency break and ships a few community-contributed features that landed on main since v0.21.0.

🐛 Fixed

Server / Transport

• Startup crash on fresh uvx installs: fakeredis 2.35.0 renamed FakeConnection without a backward-compatible alias, breaking pydocket's runtime import and making FastMCP's lifespan fail with ImportError: cannot import name 'FakeConnection' from 'fakeredis.aioredis'. Pinned fakeredis>=2.32.1,<2.35.0 as a downstream constraint until upstream ships a fix. Users no longer need the --with fakeredis==2.34.1 workaround (#1250, fixes #1248).

Confluence

• include_content test coverage and descriptions: Follow-up hardening for the new include_content option (#1099).

✨ Features

Confluence

• include_content on create/update: confluence_create_page and confluence_update_page now accept an include_content flag so callers can skip echoing full page bodies back in responses (#1098).
• confluence_get_space_page_tree: New tool for discovering a space's page hierarchy in a single call (#1090).

Deployment

• Helm: OAuth proxy + client storage configuration: Helm chart now exposes FastMCP auth's OAuth proxy and client storage settings so operators can configure them declaratively (#1084).

Contributors

Thanks to @kimoto, @Poggen, and @Troubladore!

Full Changelog: v0.21.0...v0.21.1

This release adds 4 new tools (sprint management, page moves, page diffs, comment replies), OAuth proxy support, markdown table rendering, and multiple content processing fixes.

✨ Features

Jira

• Sprint Management: Move issues between sprints with the new jira_add_issues_to_sprint tool (#1078)
• Cloud Search Pagination: jira_search now returns next_page_token for cursor-based pagination on Cloud (#1079)
• Field Options Filtering: jira_get_field_options supports contains, return_limit, and values_only params for targeted lookups (#1074)
• Markdown Tables: Markdown tables in descriptions and comments are now converted to native ADF table nodes on Cloud (#1089)

Confluence

• Move Pages: Relocate pages between parents or spaces with the new confluence_move_page tool (#1080)
• Page Version Diff: Compare two page versions with the new confluence_get_page_diff tool (#1083)
• Comment Replies: Reply to existing comments with the new confluence_reply_to_comment tool (#1070)
• Page Width Layout: Library-level support for controlling page width (default / full-width) on Cloud. Available via the Confluence fetcher API; MCP tool integration planned for a future release (#1091)
• Server/DC User Search: confluence_search_user now supports Server/DC via group member fallback (#1081)

Authentication

• OAuth Proxy: Opt-in OAuth 2.0 proxy with Dynamic Client Registration (DCR), PKCE, consent flow, and grant type hardening (#1054)
• Header Auth Bypass: New IGNORE_HEADER_AUTH env var to ignore proxy-injected Authorization headers and use server-configured credentials (#1073)

🐛 Fixed

Jira

• Code Block Corruption: {code} and {noformat} blocks in Server/DC wiki markup are now protected from markup conversion corruption (#1059)
• Custom Field Preservation: Complex custom field values (nested objects, arrays) are no longer silently converted to strings (#1058)
• Panel Block Handling: {panel} blocks and bare URLs in wiki markup are now correctly converted to markdown (#1055)
• Field Name Matching: fixVersions, issuetype, and other API field names are now correctly recognized in should_include_field checks, fixing field exclusion when users request specific fields (#1076)

Preprocessing

• Code Span Truncation: Inline code spans (<code>) are no longer broken by HTML content truncation (#1094)

🔒 Security

• URL Validation Bypass: Prevented SSRF allowlist bypass where evil-atlassian.net could match the atlassian.net domain check — now uses strict .{domain} suffix matching (#1087)

Contributors

Thanks to @Poggen, @Troubladore, @djb2c, @Lama9, @iiiokojiadbi, @Arbuzov, @solganik, @johnny, @pibylick, @nulvox, @yliu, and @reneleonhardt!

Full Changelog: v0.20.1...v0.21.0

This release fixes error handling for the ServiceDesk comment API on non-JSM projects.

🐛 Fixed

Jira

• ServiceDesk 403 handling: Non-JSM projects return 403 Forbidden (not 404) from the ServiceDesk API when using the public parameter for internal/external comments. The error message now clearly indicates the issue is not a JSM service desk project or the user lacks permission (#1051)

Full Changelog: v0.20.0...v0.20.1

This release adds JSM internal comment support, a Kubernetes Helm chart, and fixes for worklog ADF handling and tool parameter naming.

✨ Features

Jira

• JSM Internal Comments: New public parameter on add_comment tool for Jira Service Management issues. Set public=true for customer-visible comments or public=false for internal agent-only comments. Routes through the ServiceDesk API with plain text body (#1049, fixes #867)

Deployment

• Kubernetes Helm Chart: Deploy mcp-atlassian on Kubernetes with a full-featured Helm chart supporting all auth modes, transport types (stdio/SSE/streamable-HTTP), HPA, ingress, PVC for OAuth tokens, and RBAC (#737, #1048)

🐛 Fixed

Jira

• Worklog ADF Comments on Cloud: Worklog comments were silently dropped on Cloud because ADF dicts from _markdown_to_jira() were posted to the v2 API which ignores them. Now routes through v3 API when the comment is ADF, matching the existing pattern in comments (#1047, fixes #1045)

Server

• Tool Parameter Naming: Aligned MCP tool parameter names with their response field names for consistency — comment_body → body, issue_description → description, etc. (#1044)
• Descriptive Error Messages: Tool handlers now return specific error descriptions instead of generic messages (#1010)

📚 Documentation

• Updated parameter names in documentation to match the tool renames (#1046)

Contributors

Thanks to @antweiss, @baumgold, and @hteichmann-strato!

Full Changelog: v0.19.0...v0.20.0

This release adds toolset-based tool filtering for granular control over which tools are exposed, OS native trust store support for enterprise SSL environments, and Jira issue watcher tools.

✨ Features

Server

• Toolset-Based Tool Filtering: New TOOLSETS env var groups 68 tools into 21 named toolsets (15 Jira, 6 Confluence) for granular control. Supports all, default, and comma-separated names. All toolsets enabled by default — in v0.22.0 the default will change to 6 core toolsets only (#1041, #1043)

Jira

• Issue Watcher Tools: New jira_get_issue_watchers, jira_add_watcher, and jira_remove_watcher tools for managing issue watchers. Write operations respect READ_ONLY_MODE (#1039, fixes #1032)

Authentication

• OS Native Trust Store: SSL connections now verify certificates against the OS trust store (Windows Certificate Store, macOS Keychain, Linux system CAs) via truststore, enabling enterprise environments with internal CAs to connect without disabling SSL verification. Opt out with MCP_ATLASSIAN_USE_SYSTEM_TRUSTSTORE=false (#976)

🐛 Fixed

Jira

• JiraUser Username/Key Fields: JiraUser.from_api_response() was mapping displayName to both display_name and name, discarding the login username needed for Server/DC [~username] mentions. Now preserves username and user_key fields separately (#1038, fixes #1031)
• Underscore in Project Keys: Issue key patterns like D_DEV-123 were not recognized in both server tools and preprocessing due to missing _ in regex character classes (#1030, #1035)
• Windows Timestamp Overflow: Jira DC sentinel dates (year 9999) caused OverflowError/OSError on Windows. parse_date now catches these and returns None gracefully (#1037, fixes #1033)

Authentication

• Truststore Env Var Parsing: Fixed AttributeError when .env contains a bare key (no = sign) — dotenv_values() returns None which broke .lower() at import time (#1036)

Server / Transport

• Allowlisted Domains Bypass DNS: Domains in ALLOWED_DOMAINS now bypass DNS resolution checks, fixing false rejections for internal hostnames (#1005)

🧪 Testing

• Test Reclassification: Mock-based integration tests moved to unit tests, model tests split to match source structure, Cloud/Server pairs parametrized (#1015, #1016, #1021)

📚 Documentation

• Auto-Generated Tool Reference: Full reference pages for all 68 MCP tools with parameters, examples, and toolset tags (#1017)
• New Guides: JQL/CQL query guides, workflow recipes, SLA metrics, Docker deployment, and expanded troubleshooting (#1018, #1019)

Contributors

Thanks to @tsondergaard, @fatherlinux, @alvaroEset, and @bbkmike!

Full Changelog: v0.18.0...v0.19.0

This release fixes allowlisted domains being incorrectly blocked by the SSRF DNS resolution check.

🐛 Fixed

Server / Transport

• Allowlisted domains bypass DNS resolution check: When MCP_ALLOWED_URL_DOMAINS was set, internal hosts resolving to private IPs (e.g. 10.x.x.x) were still blocked by the DNS check. Allowlisted domains now return early before DNS resolution, while hard-blocked hostnames (localhost, metadata.google.internal) and IP literal checks remain enforced (#1005, fixes #1002)

Contributors

Thanks to @autumnjava for reporting!

Full Changelog: v0.18.0...v0.18.1

This release adds inline image rendering for both Jira and Confluence, ADF write support for Jira Cloud, and fixes several bugs including stateless HTTP mode and Server/DC user lookup.

✨ Features

Jira

• Inline Image Rendering: New jira_get_issue_images tool returns issue image attachments as base64 ImageContent for direct LLM vision processing. Shared MIME detection extracted to utils/media.py (#1001)
• ADF Write Support: Markdown descriptions and comments are now converted to Atlassian Document Format on Jira Cloud, enabling rich text formatting (bold, italic, lists, code blocks, headings, links, blockquotes) via the v3 REST API (#994)

Confluence

• Inline Image Rendering: New confluence_get_page_images tool returns page image attachments as base64 ImageContent with two-tier MIME detection and 50MB size limit (#992)
• ac:image Markdown Conversion: Confluence <ac:image> XML tags are now converted to standard markdown image syntax during page preprocessing, with support for both attachment references and external URLs (#991)

🐛 Fixed

Jira

• ADF Payloads Routed Through v3 API: atlassian-python-api sends to /rest/api/2/ by default, which rejects ADF dict payloads. Added _post_api3()/_put_api3() helpers to route create/update/comment operations through /rest/api/3/ when the payload contains ADF (#1003, fixes #994)
• Server/DC User Lookup by Email: Replaced fragile key/username heuristic that misclassified usernames like j-smith2 as Jira keys. Email identifiers now resolve via /rest/api/2/user/search before profile fetch (#999, #998)
• Checklist Array Passthrough: Server/DC checklist fields with schema.type: "array" are now passed through unchanged instead of being incorrectly formatted as strings (#993)
• Attachment Size Limit: Added 50MB size guard to Jira attachment downloads to prevent OOM, matching existing Confluence behavior (#990)

Confluence

• In-Memory Attachment Downloads: Added fetch_attachment_content() to Confluence, eliminating duplicated inline download logic in server tools (#989)

Server / Transport

• Stateless HTTP Mode: stateless_http was broken since v0.13.1 because the global settings mutation happened after FastMCP.__init__() had already snapshotted them. Now passed explicitly via run_kwargs (#1000, fixes #997)

🧪 Testing

• 24 New E2E Tests: Image tools (DC+Cloud), ADF write round-trip (Cloud), user email resolution (DC), and ac:image conversion (#1004)

Contributors

Thanks to @kalabj, @TerminalGravity, @sigismund, @miwamoto, and @gudim!

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.17.0...v0.18.0

This release fixes two security vulnerabilities, adds new Jira features, and includes multiple bug fixes and hardening improvements.

🔒 Security

• Path Traversal Guard: Confluence attachment downloads now validate paths against directory traversal attacks via validate_safe_path() with symlink resolution. Jira guards refactored to use the same shared utility. Fixes GHSA-xjgw-4wvw-rgm4 (#987)
• SSRF Protection: Header-based URLs (X-Atlassian-*-Url) are now validated against SSRF — blocks private IPs, DNS rebinding, and redirect-based attacks. Optional domain allowlist via MCP_ALLOWED_URL_DOMAINS. Fixes GHSA-7r34-79r5-rcc9 (#986)
• Credential Logging Removal: Removed OAuth token/secret logging from token exchange and response flows (#949)

✨ Features

Jira

• Service Desk Queue Support: New jira_get_service_desk_queues, jira_get_queue_issues, and jira_get_queue_details tools for Server/DC (#979)
• Project Components Tool: New jira_get_project_components tool to retrieve project components (#873)

🐛 Fixed

Jira

• Epic Link Aliases: epicKey, epic_link, epicLink, and "Epic Link" now resolve correctly in create/update operations (#970)
• JQL Reserved Words: Project keys matching JQL reserved words (e.g., IF, AND) are now auto-quoted (#967)
• update_issue Fields Parameter: Accepts JSON string input (not just dict), consistent with other tools after schema compatibility changes (#973)

Confluence

• Double /wiki Prefix: Fixed URL construction in analytics and v2 adapter that prepended /wiki twice on Cloud (#964)

Dependencies

• Python & Dependency Upgrades: Upgraded Python version in Docker and ran uv lock --upgrade to resolve Trivy scan vulnerabilities (#977)
• markdown-to-confluence Minimum: Bumped to >=0.3.4 to prevent ModuleNotFoundError on md2conf.metadata (#980)

🧪 Testing

• E2E Test Suites: Added DC (61 tests) and Cloud (48 tests) end-to-end test suites with auth matrix coverage (#963)
• Security Regression Tests: Path traversal and JQL sanitization regression tests (#983)

Contributors

Thanks to @elisa-tfager, @hteichmann-strato, @JakubAnderwald, @legard, @ilgaur, and @yotampe-pluto!

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.16.1...v0.17.0

This release fixes Confluence Cloud URL construction, adds AI platform schema compatibility, and patches a ReDoS vulnerability.

🐛 Fixed

Confluence

• Double /wiki Prefix in Cloud URLs: base_url already includes /wiki for Cloud instances (auto-appended by atlassian-python-api), but five URL constructions in v2_adapter.py and analytics.py were prepending it again — producing 404s for analytics views, page attachments, and attachment CRUD operations (#964, fixes #962)

Jira

• ReDoS in Citation Regex: Citation regex in jira_get_issue used overlapping alternation that caused catastrophic backtracking on unmatched ?? markers — replaced with non-overlapping linear-time pattern (#948)

Server

• AI Platform Schema Compatibility: Add server-level anyOf flattening to fix JSON Schema incompatibilities with Vertex AI / Google ADK, Gemini, LiteLLM, and other AI platforms — 314 compatibility tests validate all tool schemas (d57b7fd, fixes #640, #733, #541, #484)

🧪 Testing

• E2E Test Suites: DC E2E (61 tests) and Cloud E2E (48 tests) covering auth matrix, service-specific operations, and MCP tool-level tests via FastMCPTransport (#963)

📚 Documentation

• AI Platform Compatibility Page: Platform matrix with schema compatibility details and setup notes for GitHub Copilot, Vertex AI / Google ADK, and ChatGPT (e0beb97, a00fa4e)

Contributors

Thanks to @johnny, @wallacekabum, @XinyueZ, @CatsMiaow, and @stephen-galea-weavr!

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.16.0...v0.16.1

This release adds OAuth 2.0 for Atlassian Data Center, Basic Auth multi-user support for MCP gateways, and several auth reliability fixes.

✨ Features

Authentication

• OAuth 2.0 for Data Center: Extend OAuth support to Atlassian Server/Data Center instances with service-specific env vars (JIRA_OAUTH_CLIENT_ID, CONFLUENCE_OAUTH_CLIENT_ID), DC-specific token/authorize URLs, and keyring key namespacing (#952, fixes #527)
• Basic Auth Multi-User: Parse Authorization: Basic <base64(email:api_token)> headers in middleware for multi-user MCP gateway scenarios, creating per-request fetchers with individual Atlassian Cloud credentials (#955, fixes #380)
• BYOT OAuth Without URLs: ATLASSIAN_OAUTH_ENABLE=true now works as a fallback when no service URL is configured, enabling Bring Your Own Token mode where users provide OAuth tokens via per-request headers (#956, fixes #698)
• Configurable HTTP Timeout: New JIRA_TIMEOUT and CONFLUENCE_TIMEOUT env vars (default 75s) propagated to atlassian-python-api client constructors (#950, fixes #891)

🐛 Fixed

Authentication

• Bearer Token Disambiguation: Server/DC users sending Bearer-prefixed PATs no longer trigger OAuth flow errors — the dependency layer now resolves Bearer tokens as OAuth or PAT based on global config context (#953, fixes #892)
• .netrc Credential Override: Explicit PAT/OAuth credentials are no longer silently overridden by ~/.netrc entries — trust_env=False is set when explicit auth is provided (#951, fixes #860)

Jira

• Server/DC Createmeta Endpoint: Switch to new paginated createmeta endpoints (/issue/createmeta/{project}/issuetypes) for Jira 9.x+, fixing jira_get_field_options, get_required_fields, and get_project_issue_types returning empty results on modern Server/DC (#958)

🧪 Testing

• OAuth Refresh Failure: Regression tests for the OAuth refresh token failure when PAT/Bearer tokens are sent to a server with ATLASSIAN_OAUTH_ENABLE=true (#954, fixes #858)

📚 Documentation

• Auth Documentation: Updated AGENTS.md, CLI help text, and .env.example for DC OAuth, Basic Auth multi-user, BYOT mode, service-specific OAuth env vars, and HTTP timeouts (#957)

Contributors

Thanks to @blackalegator, @kangis89, @nealedj, @ckaytev, @hteichmann-strato, and @sergiobank!

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.15.0...v0.16.0

This release adds custom field options discovery, consolidates field formatting, and fixes several field-related bugs across create/update workflows.

✨ Features

Jira

• Custom Field Options Discovery: New jira_get_field_options tool to discover allowed values for select, multi-select, radio, checkbox, and cascading select custom fields. Cloud uses the Field Context API with auto-resolution and pagination; Server/DC falls back to createmeta allowedValues (#944, fixes #686)
• Field Formatting Consolidation: Unified two overlapping field formatting engines into a single _format_field_value_for_write method on FieldsMixin, adding schema-type handlers for cascading selects, multi-select options, custom user fields (Cloud/Server), custom dates, and generic options (#941, fixes #355)

🐛 Fixed

Jira

• Field ID Matching: System field matching now uses field_id.lower() instead of display names, fixing issues where fields with localized or duplicate display names were incorrectly matched (#941, fixes #770)
• update_issue JSON String Parsing: additional_fields parameter in jira_update_issue now accepts JSON strings in addition to dicts, matching jira_create_issue behavior (#941)
• Components Parameter for update_issue: Add explicit components CSV parameter to jira_update_issue, matching jira_create_issue UX — previously required passing components through additional_fields JSON (#942, fixes #863)
• DateTime Timezone Format: Convert Python's extended ISO 8601 offset (±HH:MM) to Jira's required basic format (±HHMM) — datetime custom fields could not be set at all before this fix (#942)
• Comment ID Exposure: Include id field in comment objects returned by jira_get_issue, enabling downstream use with jira_edit_comment and jira_delete_comment (#943, fixes #923)
• Checklist Field Support: Detect and format Okapya/Smart Checklist plugin fields, converting list data to readable markdown strings instead of raw JSON (#943, fixes #722)

Contributors

Thanks to @pibylick for the field options feature request, @dbalabka for reporting the missing comment ID, @mohsengachkoob for reporting the checklist field issue, @USAFSpawn for reporting the datetime timezone bug, and @rkochar11 for reporting the components update issue!

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.14.3...v0.15.0

This release fixes US Government Cloud (FedRAMP) compatibility, Homebrew packaging support, and Server/DC project key validation.

🐛 Fixed

Jira

• US Government Cloud Support: Add FedRAMP URL detection for *.atlassian-us-gov-mod.net and *.atlassian-us-gov.net domains. Without this fix, US Gov Cloud instances were misidentified as Server/DC, causing HTTP 410 errors after the Jira v2 search API deprecation (#890)
• Project Key Validation: Relax project key regex to support longer keys used on Server/Data Center deployments — previously rejected keys longer than 10 characters (142d5d9, fixes #937)

Server / Transport

• Homebrew Packaging Probe: Fix stdio hang when Homebrew formula testing sends initialize → tools/list probe and closes stdin. The parent-process monitor now detects EOF promptly instead of blocking (74b32ec, fixes #939)

🔒 Security

• Private Vulnerability Reporting: Enable GitHub private vulnerability disclosure and update SECURITY.md with responsible disclosure instructions (e0b0f30, fixes #908)

🧪 Testing

• Python 3.14 Timestamp Boundaries: Add regression tests for timestamps outside the valid Python datetime range (year 1–9999) to prevent OSError/OverflowError crashes (d437876, fixes #916)

Contributors

Thanks to @maucher for the US Government Cloud fix!

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.14.2...v0.14.3

🐛 Bug Fixes

• stdio transport broken (#935): Replace stdin-reading EOF guard with parent-process monitor. The previous implementation called sys.stdin.read() in an executor thread, which held io.BufferedReader's internal lock until EOF — causing FastMCP's stdio reader to block indefinitely and produce silent stdout with no response to initialize. Now uses os.getppid() polling to detect orphan processes without touching stdin.

• Python 3.14 support: Remove <3.14 upper bound from requires-python and relax pydantic to <3.0. This resolves pydantic 2.12.x → pydantic-core 2.41.5, which ships 28 pre-built cp314 wheels. The previous pydantic-core 2.33.2 had no Python 3.14 wheels and source builds failed because PyO3 0.24.1 does not support Python 3.14.

Upgrade

uvx mcp-atlassian@latest

🐛 Fixed

• SLA Tool Name: Rename jira_jira_get_issue_sla → jira_get_issue_sla (double-prefix bug from FastMCP tool registration) (#934)
• Sprint Date Validation: Fix crash when start_date is a date-only string (e.g., \"2026-03-01\") — was raising TypeError: can't compare offset-naive and offset-aware datetimes (#934)

This release is a focused stability patch addressing community-reported bugs accumulated since v0.13.1.

🐛 Fixed

Jira

• Critical: Issue Updates Broken: Reverted incorrect fields= kwarg in update_issue that broke all Jira issue updates after v0.13.0 (#926)
• Silent Assignee Drop: Fix assignee silently dropped on Server/DC — now assigned post-creation when assignee field is set (#925)
• Dev Info API 404/403: Gracefully handle 404/403 from development info API instead of raising an exception (#928)
• Sprint Issues Fields: jira_get_sprint_issues now respects the fields parameter correctly (#685)
• Transitions Endpoint: transition_issue now hits the correct /transitions REST endpoint (#659)
• Epic/Subtask Creation: Use issue type ID (not name) for epic and subtask creation to fix type lookup failures (#633)
• Actionable Error Messages: Auth failures, connection errors, 404s, and rate limits now surface clear, actionable guidance (#932)

Confluence

• Vertex AI Schema: Resolve Vertex AI schema validation error in confluence_get_page (#886)
• Attachment EmbeddedResource: Attachment download tools now return EmbeddedResource for proper MCP client handling (#929)
• Trailing Slash URL: Strip trailing slash from Confluence URL to prevent double-slash API paths (#694)

Server / Transport

• stdio Orphaned Processes: Terminate the stdio server cleanly when the MCP client disconnects (stdin EOF), preventing orphaned background processes (#931)
• Streamable-HTTP 307 Redirect: Fix 307 redirect loop in streamable-HTTP transport caused by trailing-slash path mismatch in Starlette routing (#933)

This release brings significant new capabilities including Jira SLA metrics, ProForma forms support, development info integration, Confluence attachment CRUD and page versioning, plus multi-tenant authentication and numerous stability fixes.

✨ Features

Jira

• SLA Metrics: Added jira_get_issue_sla tool for querying SLA metrics on issues (#839)
• Issue Date Tracking: Added jira_get_issue_dates tool for retrieving issue date fields (#838)
• ProForma Forms: Added ProForma forms support for Jira Cloud, enabling form data retrieval and submission (#849)
• Development Info: Added development info API for viewing linked PRs, branches, and commits on issues (#910)
• Attachment Resources: Return attachments as embedded MCP resources for direct access by clients (#919)
• Components Update: Allow components field updates via jira_update_issue (#901)
• Code Block Languages: Map unsupported code block languages to Jira equivalents for proper rendering (#914)
• Unicode User Lookup: Added ASCII transliteration for Unicode user lookup to improve search accuracy (#902)

Confluence

• Attachment CRUD: Added full attachment create, read, update, and delete operations (#898)
• Page Views: Added confluence_get_page_views tool for page view analytics (#840)
• Historical Versions: Added historical page version retrieval for viewing past content (#905)
• Emoji Support: Added page title emoji support for richer content display (#859)

Authentication

• Multi-Tenant Headers: Added header-based authentication for multi-tenant deployments (#683)

🐛 Fixed

• Tool Naming: Fix double-prefixed tool names for jira_get_issue_dates and confluence_get_page_views handlers (#927)
• FastMCP Settings: Use global FastMCP settings for proper server configuration initialization (#927)
• Issue Update Structure: Correct field update structure in jira_update_issue (#887)
• Remote Links API: Correct API version for remote issue links endpoint (#874)
• Comment Auto-Include: Auto-include comment field when comment_limit is positive (#876)
• Hash in Code Blocks: Preserve hash characters in code blocks during markup conversion (#894)
• Wiki Markup Conversion: Restore wiki markup to markdown conversion for descriptions/comments (#915)
• Key Validation: Add explicit pattern validation for issue and project keys (#900)
• Timestamp Overflow: Handle timestamp overflow for Jira Server out-of-range dates (#837)
• Transition Data: Use get_issue_transitions_full for complete transition data (#843)
• ORDER BY Filter: Extract ORDER BY clause before adding project filter in JQL (#903)

🔒 Security

• Dependency Updates: Update starlette and urllib3 to fix CVEs (#845)

⚡ Performance

• SLA Caching: Cache status categories in SLA calculations to reduce redundant API calls (#862)

🧪 Testing

• Add v0.13.0 feature tests and fix fixture scope (#834)

📚 Documentation

• Improve AGENTS.md with architecture overview, gotchas, and accurate metadata

Contributors

Thanks to all the contributors who made this release possible: @AmirhosseinHanifehzadeh, @brettfire, @ckreager, @HadjievK, @hiroishda, @hteichmann-strato, @IMKnysh, @jimweller, @jstoneburner, @major, @meliezer124, @mindmelting, @nigel-upstart, @saakshigupta2002, @saneroen, @WZHBEDZ

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.13.0...v0.13.1

This release adds mTLS support, stateless mode for streamable-http, and critical stability fixes for Windows and SSL connections.

✨ Features

• Stateless Mode: Added stateless mode for streamable-http transport, enabling horizontal scaling (#831)
• mTLS Support: Added client certificate authentication (mTLS) support for secure connections (#830)
• Jira additional_fields: Support additional_fields as dict or JSON string for flexible field handling (#829)
• Edit Comments: Added jira:edit_comment tool for editing existing comments (#813)

🐛 Fixed

• Windows CPU: Use SelectorEventLoop to prevent high CPU idle on Windows (#821)
• SSL CPU: Force blocking pool to prevent CPU busy-wait on SSL connections (#825)
• Auth Priority: Prioritize PAT over OAuth for Server/DC instances (#826)
• Wiki Markup: Preserve Jira wiki markup in markdown_to_jira conversion (#827)
• Docker stdio: Add PYTHONUNBUFFERED for proper stdio communication (#818)
• Confluence Import: Use fallback import for md2conf elements_from_string (#817)
• Type Hints: Add proper optional type hints to comment visibility params (#816)

📚 Documentation

• Added JIRA_PERSONAL_TOKEN note to README (#819)

Contributors

Thanks to all the contributors who made this release possible: @nhouck, @cary-hu, @4erdenko, @shoxst, @stewartthomson

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.12.0...v0.13.0

This release includes critical stability fixes for ASGI middleware and Docker, along with new configuration options and Jira 9+ compatibility.

✨ Features

• DISABLE_JIRA_MARKUP_TRANSLATION: New config option to disable Jira-to-Markdown conversion when not needed (#712)
• Comment Visibility: Added visibility parameter to jira:add_comment for controlling comment visibility (#689)

🐛 Fixed

• ASGI Middleware: Fixed protocol violations in UserTokenMiddleware that caused server crashes on client disconnect (#805, fixes #695)
• Docker HEALTHCHECK: Removed HEALTHCHECK directive that broke stdio transport (#803)
• Jira 9+ Sub-tasks: Fixed sub-task creation API for Jira 9+ compatibility (#604)
• Confluence page_id: Fixed type conversion for page_id in get_page (#595)
• JQL Project Filter: Made project filter case-insensitive (#636)
• Confluence Error Messages: Improved error message when API returns unexpected string type (#780)
• OAuth Input Sanitization: Sanitized user input in interactive OAuth prompts (#728)

🔒 Security

• HTTP Timeouts: Added connection (10s) and read (30s) timeouts to prevent resource exhaustion (#755)
• Docker Hardening: Added security best practices to Docker image (#755)

📚 Documentation

• Restructured documentation with uvx quick start (#802)
• Added Mintlify hosted documentation
• Added llms.txt auto-generation docs (#806)

Contributors

Thanks to all the contributors who made this release possible: @CodingDoneRaitt, @danielfrey63, @njoshi-conga, @jtumidanski, @howell, @Erick, @GuilleGarcia, @jruus, @davyraitt

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.11.12...v0.12.0

This release adds MCP tool safety annotations, Confluence folder support, and Claude Code GitHub Action for AI-assisted reviews.

✨ Features

• MCP Tool Annotations: Added readOnlyHint and destructiveHint annotations to all 42 tools for safer LLM decision-making (#789)
• Confluence Child Folders: Added support for including child folders in get_page_children() results with graceful degradation (#787, fixes #165)
• Claude Code GitHub Action: Added AI-assisted code review workflow using Claude Sonnet 4.5 (#799, #801)

🐛 Fixed

• Multi-level Bullet Lists: Fixed indentation for nested lists to use proper 2-space formatting (#798, fixes #717)
• Confluence Attachment URLs: Fixed attachment URLs in search results to use parent page ID (#796, fixes #790)
• Python Version Constraint: Added Python <3.14 constraint for pydantic-core compatibility (#797, fixes #776)

New Contributors

• @triepod-ai made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/789
• @leonardogavaudan made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/787

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.11.11...v0.11.12

This release fixes critical ADF parsing issues, adds FastMCP 2.14.x support with security fixes, and improves read-only mode filtering.

✨ Features

• ADF Node Handlers: Added support for mention, emoji, date, status, inlineCard, and codeBlock nodes in Atlassian Document Format parsing (#793)

🐛 Fixed

• FastMCP 2.14.x Compatibility: Fixed server compatibility with FastMCP 2.14.x including http_app() override and _list_tools_mcp method rename (#795)
• Read-Only Mode Filtering: Fixed tool filtering to correctly exclude write operations in read-only mode (#795)
• ADF Description Parsing: Fixed parsing of Jira Cloud issue descriptions using Atlassian Document Format (#782)
• OAuth Security: Upgraded fastmcp to >=2.13.0,<2.15.0 to address OAuth security vulnerability (#794)

⚙️ Internal

• Added 38 comprehensive unit tests for ADF parser covering all node types (#792)

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.11.10...v0.11.11

This release fixes critical Jira Cloud search compatibility issues, improves Confluence page retrieval reliability, and enhances Multi-Cloud OAuth support.

✨ Features

• Simplified Search Results: Added JiraSearchResult.to_simplified_dict() method for easier integration and data processing (#585)

🐛 Fixed

• Jira Cloud Search API: Migrated Cloud search from deprecated v2 to v3 API endpoint, fixing search failures on Jira Cloud instances (#769)
• Changelog JSON Serialization: Fixed datetime serialization in issue changelog to ensure JSON compatibility (#768)
• Confluence Page Retrieval: Handle missing body.storage.value gracefully when retrieving pages with empty or special content (#767)
• Confluence Cloud OAuth Detection: Fixed detection of Confluence Cloud instances in Multi-Cloud OAuth mode (#586)
• Pydantic Compatibility: Pinned pydantic below 2.12.0 to prevent compatibility issues (#732)

📚 Documentation

• Added missing OAuth scopes to .env.example for complete OAuth setup reference (#766)

⚙️ Internal

• Updated .gitignore to include environment variable files with wildcard pattern (#583)
• Fixed ATLASSIAN_OAUTH_ENABLE in test mock environment (#587)

New Contributors

• @kawa-onushi made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/585
• @osechet made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/732

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.11.9...v0.11.10

This release enhances corporate environment support, improves OAuth authentication reliability, and fixes critical issues with Jira Epic creation and Confluence API operations.

✨ Features

• Custom HTTP Headers Support: Configure additional HTTP headers for Jira and Confluence API requests via environment variables, enabling usage in corporate environments requiring authentication, routing, or security headers (#570)

🐛 Fixed

• Multi-Cloud OAuth User Lookups: Fixed user account lookups in Jira Cloud OAuth mode by correctly identifying OAuth instances as Cloud and using accountId parameter instead of username (#581)
• Confluence OAuth v2 API: Added v2 API support for confluence_get_page to fix deprecated endpoint errors when using OAuth authentication (#579)
• JQL Project Filter Syntax: Fixed invalid JQL syntax when using JIRA_PROJECTS_FILTER with empty queries or ORDER BY clauses (#578)
• Confluence Preprocessor Memory: Eliminated circular reference between ConfluenceClient and ConfluencePreprocessor preventing proper garbage collection (#574)
• Jira Epic Creation: Handle required Epic Name fields during initial creation instead of post-creation update, with caching for improved performance (#568)

⚙️ Internal

• Added performance optimization through field requirement caching for bulk Epic operations (#568)
• Improved test coverage for OAuth flows and protocol compliance (#579, #581)

New Contributors

• @fgreinacher made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/570

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.11.8...v0.11.9

This release introduces OAuth multi-cloud support, enhances Jira functionality, and fixes critical authentication and query issues.

✨ Features

• OAuth Multi-Cloud Support: Connect to different Atlassian Cloud instances through a single server using X-Atlassian-Cloud-Id header and per-request authentication (#471)
• Bring Your Own Token OAuth: Support externally managed OAuth tokens via ATLASSIAN_OAUTH_ACCESS_TOKEN environment variable (#482)
• Jira Remote Issue Links: New jira_create_remote_issue_link tool for creating web and Confluence links (#542)
• Markdown-to-Jira Conversion: Automatic formatting conversion for issue descriptions in create/update operations (#538)

🐛 Fixed

• Multi-Cloud OAuth URLs: Fixed api.atlassian.com recognition for email-based user lookups (#561)
• JQL Reserved Keywords: Quote project names to handle reserved keywords like "AND", "OR" (#553)
• Confluence PAT Auth: Changed auth type from "token" to "pat" for consistency. BREAKING: Update existing configs (#549)
• Localized Issue Types: Handle non-English Jira instances for Epic/Subtask validation (#545)
• Issue Unassignment: Allow setting assignee to None to unassign issues (#540)
• Dependency Stability: Pin markdown-to-confluence <0.4.0 and add version bounds (#558)

⚙️ Internal

• Standardized parameter types to use str | None instead of empty string workarounds (#515)
• Removed deprecated decorator usage (#546)

New Contributors

• @volkov made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/540
• @minznerjosh made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/482
• @anant-rustagi made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/542
• @pavel1tel made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/471
• @sergiobank made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/549
• @amichai-gloat made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/553

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.11.7...v0.11.8

This release addresses critical compatibility issues affecting Windows environments, Jira Server status transitions, and Confluence page operations with numeric IDs. These fixes enhance cross-platform stability and improve LLM client integration.

🐛 Fixed

Windows Server Shutdown Stability: Resolved "ValueError: I/O operation on closed file" errors that occurred during server shutdown, particularly affecting Windows environments and Claude Desktop integration. The fix gracefully handles cases where parent processes close stdio pipes before the cleanup phase completes, ensuring clean exits without crashes (#532)

Jira Status Transitions: Fixed Method Resolution Order (MRO) conflict that prevented status updates on Jira Server/Data Center instances. The issue manifested as empty transition lists in error messages despite available transitions. The fix properly integrates TransitionsMixin methods and provides clear feedback about available status transitions (#455)

Confluence Numeric Parent IDs: Enhanced Confluence page operations to automatically handle numeric parent IDs sent by LLM clients (particularly Gemini). The API now seamlessly accepts both integer and string formats for parent_id parameters in create and update operations, preventing type validation failures (#452)

⚙️ Internal

Enhanced Error Handling: Improved robustness in the shutdown sequence with comprehensive exception handling for various stream states, including closed streams, missing attributes, and flush failures (#533)

Test Coverage: Added extensive test cases for edge conditions in stream handling during shutdown, ensuring reliability across different operating systems and process termination scenarios

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.11.6...v0.11.7

This release adds native wiki markup support for Confluence page operations and simplifies the transport lifecycle testing infrastructure following the previous stdin monitoring fixes.

✨ Features

Wiki Markup Support for Confluence: Added comprehensive support for creating and updating Confluence pages using native wiki markup syntax and storage format. This enhancement enables users to leverage Confluence-specific features like {toc}, {panel}, and {change-history} macros that were previously unavailable with Markdown-only support. The implementation includes:

• New content_format parameter for confluence_create_page and confluence_update_page tools
• Support for three formats: 'markdown' (default), 'wiki', and 'storage'
• Proper handling of representation parameter for both v1 and v2 Confluence APIs
• Full backward compatibility with existing Markdown-based workflows (#526)

⚙️ Internal

Transport Lifecycle Test Simplification: Refactored the transport lifecycle test suite to align with the simplified architecture introduced in v0.11.5. After removing the problematic stdin monitoring functionality, all transports now behave identically, allowing for a cleaner and more maintainable test structure. The refactoring consolidates redundant tests while maintaining full regression coverage for issues #519 and #524 (#529)

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.11.5...v0.11.6

This release fixes a critical issue affecting streamable-http transport where sessions were terminated immediately after initialization, preventing subsequent API calls in containerized environments.

🐛 Fixed

Streamable-HTTP Session Management: Resolved session termination issue where HTTP transports (SSE and streamable-http) incorrectly used stdin monitoring, causing premature shutdown when clients closed their stdin. This prevented the initialize → tools/list flow from working correctly, with sessions being terminated and returning "Received request before initialization was complete" errors. The fix ensures HTTP transports rely solely on OS signals for shutdown while stdio transport continues to work correctly (#524)

🧪 Testing

Transport Lifecycle Test Suite: Added comprehensive test coverage for transport lifecycle behavior to prevent regression of stdin monitoring issues. The new tests verify that stdio transport correctly bypasses lifecycle monitoring while HTTP transports (SSE, streamable-http) use proper signal-based shutdown. These tests would have caught both issue #519 and #524 before shipping by detecting the race condition between MCP's stdio handler and lifecycle monitoring (#523)

⚙️ Internal

Removed Flawed Lifecycle Function: Completely removed the run_with_stdio_monitoring function that was the root cause of both this issue and the previous stdio transport issue (#519). This function was fundamentally incompatible with MCP's architecture as it conflicted with the protocol's own use of stdin for communication. After the fixes in v0.11.4 and this release, the function was dead code and has been removed to prevent future issues.

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.11.4...v0.11.5

This release fixes a critical regression introduced in v0.11.3 that prevented the MCP Atlassian server from starting when using stdio transport in Docker containers.

🐛 Fixed

Docker stdio transport compatibility: Resolved a race condition where the lifecycle monitoring introduced in v0.11.3 conflicted with the MCP server's internal stdio handling. This caused immediate startup failures with "I/O operation on closed file" errors when running in Docker containers. The fix disables stdin monitoring for stdio transport while preserving the enhanced lifecycle management for SSE and HTTP transports (#522)

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.11.3...v0.11.4

This release enhances Docker container integration with critical lifecycle management fixes, expands Jira project management capabilities with new version and project discovery tools, and strengthens the testing infrastructure with comprehensive integration tests.

✨ Features

Docker Lifecycle Management: Implemented comprehensive signal handling and stdin monitoring to ensure graceful shutdown in containerized environments. This critical enhancement resolves hanging container issues when using AI agent SDKs like OpenAI Agents SDK and Google ADK, which close stdin without sending proper shutdown signals (#514, #501)

Jira Project Discovery: Introduced the jira_get_all_projects tool to list all accessible Jira projects with optional archived project inclusion. The tool respects the JIRA_PROJECTS_FILTER configuration and returns comprehensive project metadata including keys, names, and project details (#493)

Jira Version Management: Added two new tools for managing project versions:

• jira_create_version - Create individual project versions with optional metadata (#472)
• jira_batch_create_versions - Efficiently create multiple versions in a single operation with partial failure handling (#473)

Confluence User Search: Introduced confluence_search_user tool with CQL query support for discovering Confluence users. Features automatic query conversion and comprehensive user data retrieval including account IDs, display names, and email addresses (#509)

Cloud Logging Compatibility: Added MCP_LOGGING_STDOUT environment variable to direct logs to stdout instead of stderr, resolving cloud platform logging categorization issues where DEBUG/INFO messages were incorrectly flagged as errors (#494)

Integration Testing Suite: Implemented comprehensive integration testing infrastructure with 127+ tests covering authentication flows, cross-service operations, SSL/proxy configurations, and real API validation. Includes --use-real-data flag for testing against live APIs (#517)

🐞 Fixed

Confluence OAuth v2 API Support: Resolved "This deprecated endpoint has been removed" errors by implementing ConfluenceV2Adapter for OAuth authentication. The fix automatically routes OAuth requests to v2 API endpoints while maintaining backward compatibility for API token and basic auth users (#496)

VertexAI Schema Compatibility: Fixed function calling incompatibility by removing unsupported anyOf schema constructs in the confluence_search tool's spaces_filter parameter. VertexAI users can now successfully use Confluence search functionality (#497)

Environment Variable Backward Compatibility: Preserved existing behavior while adding new functionality by splitting environment variable validation into specialized functions:

• is_env_truthy() for standard MCP variables
• is_env_extended_truthy() for READ_ONLY_MODE with extended values
• is_env_ssl_verify() for SSL-specific logic (#516)

Confluence Content Preservation: Fixed styling corruption during page updates by disabling automatic heading anchor generation. Styled content including colored highlights and code blocks are now preserved during create/update operations (#498)

Consistent Project Security: Made jira_get_issue honor the JIRA_PROJECTS_FILTER configuration, ensuring direct issue access respects the same project restrictions as search operations (#485)

Enhanced Error Handling: Improved error handling and performance in the jira_get_all_projects tool with:

• Structured error responses for authentication, network, and configuration failures
• Optimized O(1) set-based project filtering instead of O(M) iteration
• Comprehensive test coverage for edge cases (#512)

📚 Documentation

LLM Development Guidelines: Added comprehensive AGENTS.md (now CLAUDE.md) with detailed architecture overview, repository map, development workflow, and quick reference commands for LLM-driven development (#491)

Simplified Authentication: Reorganized authentication documentation to position API Token as the recommended default method, with OAuth 2.0 marked as advanced. Updated .env.example with clearer precedence order and improved new user guidance (#468)

⚙️ Internal

• Test Infrastructure Refactoring: Complete overhaul achieving 75% test coverage with 49% reduction in test code complexity. Added reusable test utilities, factories, and comprehensive fixtures (#513)
• Environment Variable Consolidation: Consolidated truthy checking logic into reusable utility functions following DRY principles (#505)
• CI/CD Improvements: Updated publish workflow to use astral-sh/setup-uv@v3 action with caching enabled (#470)
• Development Tooling: Updated .gitignore to exclude .claude/ directory and added stale bot workflow for automated issue/PR management (#492, #428)
• Security Enhancements: Added secure credential masking in debug logs with get_masked_session_headers() utility (#497)

This release significantly improves container deployment reliability, expands project management capabilities, and establishes a robust foundation for future development with comprehensive testing and documentation enhancements.

New Contributors

• @dnnspaul made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/494
• @schaveyt made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/485
• @MacanPN made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/493

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.11.2...v0.11.3

This release enhances Jira functionality with issue link support and project version management, while streamlining the development workflow with automated versioning and improved authentication documentation.

✨ Features

Jira Issue Links Support: Added comprehensive support for the issuelinks field in Jira issues, enabling retrieval and representation of linked issues and their relationship types. This enhancement includes:

• New Pydantic models: JiraIssueLinkType, JiraLinkedIssueFields, JiraLinkedIssue, and JiraIssueLink
• Updated JiraIssue model to parse and include issue links from API responses
• Issue links are now included in to_simplified_dict output for better integration (#466)

Jira Project Versions Tool: Introduced the new jira_get_project_versions tool to retrieve and list project versions (Fix Versions/Releases) from Jira projects. This foundational feature enables more advanced release-related automations and workflows (#463)

Automated Release Workflow: Implemented automated versioning and release management using:

• uv-dynamic-versioning for Git tag-based version management
• GitHub Actions workflow for automated PyPI publishing
• Eliminated manual version bumping for smoother CI/CD (#469)

🐞 Fixed

PAT Authentication for Jira Data Center: Corrected authentication logic to consistently use "pat" as the auth_type for Personal Access Token authentication with Jira Data Center instances. Previously, there was a mismatch between configuration and client behavior that led to authentication failures (#461)

📚 Documentation

Improved Authentication Guidance: Reorganized authentication methods documentation to prioritize API Token (Method 1) as the recommended default for Cloud users, with OAuth 2.0 positioned as an advanced option. Updated .env.example and improved new user onboarding experience (#468)

⚙️ Internal

• CI/CD Improvements: Updated publish workflow to use astral-sh/setup-uv@v3 action for improved reliability and added caching (#470)
• Enhanced Testing: Added comprehensive unit tests for the new issue link functionality and Jira project versions (#467)
• Build Optimization: Simplified build and publish commands in the release workflow

This release strengthens mcp-atlassian's Jira integration capabilities while modernizing the development and release processes for better maintainability and user experience.

Full Changelog: v0.11.1...v0.11.2

This is a hotfix release that addresses a critical bug affecting Jira write operations and improves the consistency of read-only mode handling across all tools.

🐞 Fixed

• Jira Write Operations in Read-Only Mode: Fixed an AttributeError: 'JiraConfig' object has no attribute 'read_only' that occurred when attempting to use Jira write tools. This issue (reported in #434) was caused by recent authentication refactoring. The read_only check now correctly uses the global application context.
• Standardized Read-Only Checks: All Jira and Confluence write-enabled tools now use a common @check_write_access decorator to manage read-only mode restrictions. This ensures consistent behavior and makes the codebase cleaner. (PR #438)

⚙️ Internal

• Introduced a @check_write_access decorator in src/mcp_atlassian/utils/decorators.py for centralized read-only mode logic.
• Refactored Jira and Confluence server tool definitions to utilize the new decorator, removing repetitive manual checks.
• Added unit tests for the new decorator.

This fix ensures that the READ_ONLY_MODE environment variable correctly restricts write operations for both Jira and Confluence tools as intended.

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.11.0...v0.11.1

This release marks a significant step forward in flexibility and user-specific interactions with mcp-atlassian. Version 0.11.0 introduces robust multi-user authentication for HTTP transports, expands Confluence capabilities with a new commenting tool and improved page lookup, and addresses important macro processing issues.

✨ Highlights

• Multi-User Authentication for HTTP Transports (OAuth & PAT): You can now run mcp-atlassian as a shared service where individual users authenticate their requests using their own OAuth 2.0 Bearer tokens (for Atlassian Cloud) or Personal Access Tokens (PATs for Server/Data Center). This means AI assistants can now operate with the specific permissions and context of the end-user, enhancing security and personalization. The server intelligently creates user-specific Jira and Confluence clients on-the-fly.

  • Supports Bearer <OAuth_Token> and Token <PAT> in the Authorization header.
  • Check out the updated README.md for detailed setup instructions. (#416, #341)

• New confluence_add_comment Tool: Programmatically add comments to Confluence pages! This new tool allows AI agents and users to engage more dynamically with Confluence content. (#424, Fixes #276)

• Enhanced confluence_get_page Tool: Finding Confluence pages is now more flexible. In addition to fetching by page_id, you can now retrieve pages using a combination of their title and space_key. This is particularly useful when the page ID isn't readily available. (#430)

🐞 Fixed

• Confluence User Profile Macro Processing: Resolved an issue where Confluence User Profile Macros were not being interpreted correctly, leading to garbled text (like "falsefalsefullName") or raw macro tags in output. The preprocessor now correctly fetches user display names and replaces these macros, ensuring cleaner and more accurate content rendering. (#419, cf0897ed)

⚙️ Internal & Dependencies

• Refactored server context and dependency injection for dynamic, user-specific client creation.
• Updated core dependencies including fastmcp and mcp.
• Added cachetools for potential future token validation caching.

📚 Documentation

• Significantly updated README.md with comprehensive guides for setting up and utilizing the new multi-user authentication features (OAuth and PAT).
• Added the new confluence_add_comment tool to the tools table in the README. (#431)

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.10.6...v0.11.0

This release enhances the OAuth 2.0 authentication experience with improved detection logic and comprehensive documentation.

🔐 OAuth Improvements

• Better OAuth Detection: Fixed configuration detection to properly recognize and prioritize OAuth 2.0 when all required environment variables (including ATLASSIAN_OAUTH_CLOUD_ID) are present. This ensures OAuth takes precedence over other authentication methods when fully configured. (#410, #412)

📚 Documentation

• Comprehensive OAuth 2.0 Guide: Restored and significantly enhanced the OAuth setup documentation with:

  • Step-by-step instructions for creating an Atlassian OAuth app
  • Clear guidance for using the --oauth-setup wizard
  • Emphasis on the importance of the offline_access scope for refresh tokens
  • Updated IDE integration examples (Cursor, Claude Desktop) (#411, #414)

• Docker OAuth Support: Added Docker-specific instructions for OAuth configuration, including token persistence via volume mounting:

  docker run --rm -i \
    -p 8080:8080 \
    -v "${HOME}/.mcp-atlassian:/home/app/.mcp-atlassian" \
    ghcr.io/sooperset/mcp-atlassian:latest --oauth-setup -v
  

  This ensures OAuth tokens stored in ~/.mcp-atlassian persist across container runs. (#413)

• Configuration Clarity: Reorganized authentication methods in .env.example for better readability and understanding. (#414, #415)

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.10.5...v0.10.6

This release improves client compatibility and updates core dependencies for better stability with the latest FastMCP framework.

🐞 Fixed

• Better Client Compatibility: Fixed how optional parameters are handled in Jira and Confluence tools to work smoothly with different MCP clients like Cursor IDE. Empty default values are now properly managed, addressing issues reported in #389. (#407)
• FastMCP 2.3.1 Support: Updated type hints to prevent "Context is not subscriptable" errors with the latest FastMCP version. (#408)

⚙️ Dependencies

• Updated fastmcp dependency to 2.3.x series for latest improvements and stability

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.10.4...v0.10.5

v0.10.4

This release enhances OAuth 2.0 stability, adds a Jira user profile tool, and improves Confluence tool compatibility.

🎉 Features

• Jira User Profile Tool (jira_get_user_profile): New tool to retrieve Jira user details (name, email, avatar) using various identifiers (accountId, username, email). Enables better user-related automations. (#396)
• Enhanced OAuth 2.0 Stability (offline_access Scope): Added offline_access scope to OAuth configurations to enable refresh tokens and prevent authentication failures. Includes improved validation and UI in setup scripts. (#381)

🐞 Fixed

• Confluence Tool Client Compatibility: Fixed optional string parameters handling in Confluence tools when None is passed. Parameters now properly default to empty strings for better compatibility. (#389)
• OAuth Authorization Flow: Fixed "501 Unsupported method" errors during OAuth callbacks, improved logging for easier troubleshooting, and added better handling of extraneous requests. (#402)

📄 Documentation & Security

• OAuth Documentation: Temporarily hidden OAuth 2.0 setup guide pending validation in Docker environments. (#404)
• Jira Tool Descriptions: Updated README with the new jira_get_user_profile tool and clarified input format for assignee parameter in Jira issue tools. (#391, #395)
• Security Guidance: Added advice on client secret handling during OAuth setup.

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.10.3...v0.10.4

This release introduces proxy support and addresses a critical compatibility issue encountered when running the server via uvx.

🎉 Added

• Proxy Support: Added support for routing Jira and Confluence API requests through HTTP/S and SOCKS proxies. Configure proxies using standard environment variables (HTTP_PROXY, HTTPS_PROXY, SOCKS_PROXY, NO_PROXY) or service-specific overrides (e.g., JIRA_HTTPS_PROXY, CONFLUENCE_NO_PROXY). Refer to the README and .env.example for detailed configuration instructions. (#260, #361)

🐞 Fixed

• uvx Compatibility Fix: Resolved the "Context is not available outside of a request" error that occurred when running uvx mcp-atlassian@latest due to incompatibility with fastmcp>=2.2.8. Pinned the fastmcp dependency to <2.2.8 to ensure compatibility with the latest mcp-atlassian release when installed via uvx. (#383, #384)

Note: This release pins the fastmcp version to address the immediate compatibility issue. Future releases will aim to update the code for compatibility with the latest fastmcp versions.

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.10.2...v0.10.3

🐞 Fixes

• SSE Docker Network Fix: Modified the SSE server to bind to "0.0.0.0" instead of the default localhost, allowing connections from any network interface when running in Docker containers. (#378)

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.10.1...v0.10.2

🐞 Fixes

• Restore Health Check Endpoint: This release fixes a regression introduced in v0.10.0 where the /healthz endpoint (added to fix #359) was accidentally removed during the FastMCP v2 migration (#371). The /healthz endpoint is now correctly available again for Kubernetes health probes when using the SSE transport. (#375)

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.10.0...v0.10.1

This release introduces OAuth 2.0 support for Atlassian Cloud, migrates the server backend to FastMCP v2, and significantly improves Jira Cloud search functionality.

✨ Highlights

• OAuth 2.0 for Cloud: Added secure OAuth 2.0 authentication for Jira/Confluence Cloud, including an interactive setup wizard (uvx mcp-atlassian --oauth-setup). (#365, Fixes #238)
• FastMCP v2 Migration: Updated the core server to use the modern FastMCP framework for improved structure and performance. (#371)
• Jira Cloud Search Fixes:
  • Correctly reports the total issue count in search results. (#360, Refs #333)
  • Allows retrieving more than 50 issues per search request. (#369)
• SSE Health Check: Added a /healthz endpoint for Kubernetes probes when using SSE transport. (#366, Fixes #359)
• Tool Removals: Removed jira_get_epic_issues and confluence_get_page_ancestors tools (use search tools instead). (#372)
• Docker Optimizations: Reduced image size. (#367)
• Internal: Consolidated linting/typing configurations into pyproject.toml. (#368)

New Contributors

• @swapnilsurdi made their first contribution in #369
• @zparnold made their first contribution in #365

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.9.0...v0.10.0

What's Changed

• Support on-prem servers by @msabramo in https://github.com/sooperset/mcp-atlassian/pull/350
• feat: add support for getting and adding labels for Confluence pages by @mroeckl in https://github.com/sooperset/mcp-atlassian/pull/328
• Refactor: improve code quality and clean up technical debt by @cutekibry in https://github.com/sooperset/mcp-atlassian/pull/345
• Feat: add batch get changelogs by @cutekibry in https://github.com/sooperset/mcp-atlassian/pull/346
• fix(jira): Use enhanced_jql for Cloud searches and fix startAt TypeError by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/356
• feat: Add enabled tools flag and environment variable to filter avail… by @rlcurrall in https://github.com/sooperset/mcp-atlassian/pull/354
• fix(jira): Fix labels not added during issue creation by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/357

New Contributors

• @msabramo made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/350
• @mroeckl made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/328
• @rlcurrall made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/354

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.8.4...v0.9.0

What's Changed

• fix: Added create_sprint by @qorpus in https://github.com/sooperset/mcp-atlassian/pull/235
• Feature/add get link types by @nigel-upstart in https://github.com/sooperset/mcp-atlassian/pull/325
• Correct jira_update_issue example for assignee format by @eran-rom in https://github.com/sooperset/mcp-atlassian/pull/339
• Fix SSL verification environment variables in Docker containers by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/340
• chore: bump version to 0.8.4 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/343

New Contributors

• @nigel-upstart made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/325
• @eran-rom made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/339

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.8.3...v0.8.4

What's Changed

• Remove Resources Functionality to Fix Excessive Startup Requests by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/322
• chore: bump version to 0.8.3 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/323

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.8.2...v0.8.3

What's Changed

• Revert: Rollback FastMCP v2 refactoring to resolve v0.8.1 issues by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/320
• chore: bump version to 0.8.2 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/321

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.8.1...v0.8.2

What's Changed

• Fix: Jira search pagination parameter mismatch (#308) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/309
• chore: bump version to 0.8.1 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/310

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.8.0...v0.8.1

What's Changed

• Add Docker Installation Support and Homebrew Option for macOS by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/283
• fix: add update_sprint by @qorpus in https://github.com/sooperset/mcp-atlassian/pull/245
• Feature/update parentid by @jo-s-eph in https://github.com/sooperset/mcp-atlassian/pull/284
• implement enhanced startup connection feedback with sensitive data masking by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/292
• Add version-specific tags for container images on ghcr.io by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/293
• Honor TRANSPORT and PORT environment variables with proper precedence (#291) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/297
• Fix Jira Server/DC assignee issue by prioritizing user name over key by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/298
• Refactor and fix jira_get_issue bugs #294, #295 by @cutekibry in https://github.com/sooperset/mcp-atlassian/pull/299
• feat: add jira_search_fields by @cutekibry in https://github.com/sooperset/mcp-atlassian/pull/302
• Refactor: Migrate Server Architecture to FastMCP v2 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/304
• Refactor: Align Confluence/Jira Tool Descriptions and Parameters with Metadata by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/305
• Docs: Refactor README for Docker-Focused Installation by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/306
• chore: bump version to 0.8.0 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/307

New Contributors

• @qorpus made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/245
• @jo-s-eph made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/284

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.7.1...v0.8.0

What's Changed

• Fix: Unwrap request to create issues by @lhays5 in https://github.com/sooperset/mcp-atlassian/pull/273
• Fix AttributeError in jira_get_epic_issues tool when processing list results by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/280
• Fix jira_get_issue tool to include comments when requested with comment_limit by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/281
• chore: bump version to 0.7.1 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/282

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.7.0...v0.7.1

What's Changed

• Feature: Add jira_batch_create_issues tool by @lhays5 in https://github.com/sooperset/mcp-atlassian/pull/244
• Docs: Improve README Clarity, Structure, and Examples by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/256
• Docs: fix typo by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/258
• Feat: Add GitHub Issue Templates by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/263
• Feat: Add GitHub PR Templates by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/265
• feat(jira): add issue link operations by @madbonez in https://github.com/sooperset/mcp-atlassian/pull/266
• Remove confluence_attach_content tool due to usability and technical limitations (#242) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/255
• feat(search): use siteSearch as default with text search fallback by @LorisFriedel in https://github.com/sooperset/mcp-atlassian/pull/270
• Fix: Add start parameter for pagination in get_epic_issues (#268) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/271
• chore: bump version to 0.7.0 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/272

New Contributors

• @lhays5 made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/244
• @madbonez made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/266
• @LorisFriedel made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/270

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.6.5...v0.7.0

What's Changed

• Fix handling of fixVersions when provided in additional_fields (#241) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/247
• Fix assignee functionality in Jira Data Center/Server during issue creation (#223) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/248
• Refactor: modularize jira pydantic models into dedicated package by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/249
• Fix: Add missing standard Jira fields (#230) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/250
• Refactor Confluence models to match Jira models structure by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/251
• Fix: Add content type inference for Confluence image attachments (#242) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/252
• chore: bump version to 0.6.5 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/253

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.6.4...v0.6.5

What's Changed

• fix: windsurf parse error by @BEMELON in https://github.com/sooperset/mcp-atlassian/pull/228
• Fix #226 by @cutekibry in https://github.com/sooperset/mcp-atlassian/pull/227
• chore: bump version to 0.6.4 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/233

New Contributors

• @BEMELON made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/228
• @cutekibry made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/227

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.6.3...v0.6.4

What's Changed

• Fix Windsurf unable to parse input schema for jira_create_issue by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/215
• Quick fix: Document fixVersions workaround for required fields by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/216
• Fix: Add proper support for Jira timetracking field (#213) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/217
• chore: bump version to 0.6.3 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/218

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.6.2...v0.6.3

What's Changed

• Support Jira "Component/s" field when creating the tickets by @klacol in https://github.com/sooperset/mcp-atlassian/pull/207
• Enhance Jira component support to allow multiple components by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/208
• Fix "cannot access local variable 'pages'" error in confluence_get_page_children tool by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/209
• chore: bump version to 0.6.2 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/210

New Contributors

• @klacol made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/207

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.6.1...v0.6.2

What's Changed

• Add count metadata to Jira search results (#164) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/203
• chore: bump version to 0.6.1 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/204

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.6.0...v0.6.1

What's Changed

• Feat: Configure mcp-atlassian for Smithery Deployment and Installation by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/194
• Fix: Correct command invocation in README (#179) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/197
• Fix read_resource by @dhallas in https://github.com/sooperset/mcp-atlassian/pull/195
• Add pagination support to Jira list tools by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/198
• Fix JiraIssue model property access and update server tests by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/199
• CI: Add pytest workflow (#87) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/200
• Unify pagination parameter names to 'startAt' across Jira tools by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/201
• chore: bump version to 0.6.0 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/202

New Contributors

• @dhallas made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/195

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.5.0...v0.6.0

What's Changed

• Parse fixVersions field properly under "fields" by @bstasz-graebert in https://github.com/sooperset/mcp-atlassian/pull/162
• Add get tool for Jira agile sprint and board by @lanbaoshen in https://github.com/sooperset/mcp-atlassian/pull/166
• Implement possibility to upload attachments to JIRA by @bstasz-graebert in https://github.com/sooperset/mcp-atlassian/pull/168
• On prem confluence with basic auth is also made available by @jeteve in https://github.com/sooperset/mcp-atlassian/pull/173
• Fix #172: Quote user identifier in list_resources JQL query by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/180
• Fix: Add conditional quoting for CQL identifiers by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/185
• Update Jira issues handling by @piotrleszczynski-soter in https://github.com/sooperset/mcp-atlassian/pull/187
• New tool : Attach content to confluence page by @felixbouazza in https://github.com/sooperset/mcp-atlassian/pull/178
• Add unit tests for server module (#86) by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/188
• Fix timestamp conversion error by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/189
• Fix: Add explicit authentication error reporting for expired tokens by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/190
• Improve custom_fields handling to include all unprocessed fields by @WingCH in https://github.com/sooperset/mcp-atlassian/pull/182
• Fix SSE transport documentation regarding environment variables by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/191
• Docs: improve documentation readability by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/192
• chore: bump version to 0.5.0 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/193

New Contributors

• @piotrleszczynski-soter made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/187
• @felixbouazza made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/178
• @WingCH made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/182

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.4.0...v0.5.0

What's Changed

• Add JiraBoards and get_all_agile_boards tool by @lanbaoshen in https://github.com/sooperset/mcp-atlassian/pull/158
• Added devcontainer by @jeteve in https://github.com/sooperset/mcp-atlassian/pull/159
• Implement possibility to download attachments from JIRA by @bstasz-graebert in https://github.com/sooperset/mcp-atlassian/pull/160
• Add support for retrieving Jira custom fields via MCP API by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/157
• chore: bump version to 0.4.0 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/161

New Contributors

• @lanbaoshen made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/158
• @jeteve made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/159
• @bstasz-graebert made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/160

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.3.1...v0.4.0

What's Changed

• Fix SSLError when using no SSL verify option by @younho9 in https://github.com/sooperset/mcp-atlassian/pull/150
• Add support for jira/confluence search filter by @lonelymoon87 in https://github.com/sooperset/mcp-atlassian/pull/133
• Docs/update readme with cursor 0.47 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/153
• Refactor utils module into specialized sub-modules by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/154
• Fix: reduce default logging level to ensure Cline VS Code compatibility by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/155
• chore: bump version to 0.3.1 by @sooperset in https://github.com/sooperset/mcp-atlassian/pull/156

New Contributors

• @younho9 made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/150
• @lonelymoon87 made their first contribution in https://github.com/sooperset/mcp-atlassian/pull/133

Full Changelog: https://github.com/sooperset/mcp-atlassian/compare/v0.3.0...v0.3.1