Jira Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Jira Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Fork of [OrenGrinker/jira-mcp-server](https://github.com/OrenGrinker/jira-mcp-server)
A production-ready Model Context Protocol (MCP) server for Jira integration. Supports both Jira Cloud and Jira Data Center/Server with comprehensive issue management, board operations, time tracking, and project management capabilities.
git clone https://github.com/JSM-CN/jira-mcp-server.git
cd jira-mcp-server
npm install
npm run buildnpx @jsm-cn/jira-mcp-serverCreate a .env file or set these environment variables:
#### Jira Cloud
JIRA_BASE_URL=https://your-company.atlassian.net
[email protected]
JIRA_API_TOKEN=your-jira-api-token
JIRA_AUTH_TYPE=cloud
LOG_LEVEL=INFO # Optional: ERROR, WARN, INFO, DEBUG#### Jira Data Center/Server
JIRA_BASE_URL=https://jira.your-company.com
JIRA_API_TOKEN=your-personal-access-token
JIRA_AUTH_TYPE=server
LOG_LEVEL=INFO| Variable | Required | Description |
|---|---|---|
JIRA_BASE_URL | Yes | Your Jira instance URL (must use HTTPS) |
JIRA_API_TOKEN | Yes | API token (Cloud) or Personal Access Token (Server) |
JIRA_EMAIL | Cloud only | Your Jira account email |
JIRA_AUTH_TYPE | No | cloud (default) or server |
LOG_LEVEL | No | Logging level: ERROR, WARN, INFO, DEBUG |
Add to your ~/.claude/settings.json:
{
"env": {
"JIRA_BASE_URL": "https://your-company.atlassian.net",
"JIRA_EMAIL": "[email protected]",
"JIRA_API_TOKEN": "your-api-token",
"JIRA_AUTH_TYPE": "cloud"
}
}And create ~/.mcp.json:
{
"mcpServers": {
"jira": {
"command": "node",
"args": ["/path/to/jira-mcp-server/dist/index.js"],
"env": {
"JIRA_BASE_URL": "${JIRA_BASE_URL}",
"JIRA_EMAIL": "${JIRA_EMAIL}",
"JIRA_API_TOKEN": "${JIRA_API_TOKEN}",
"JIRA_AUTH_TYPE": "${JIRA_AUTH_TYPE}",
"LOG_LEVEL": "INFO"
}
}
}
}| Tool | Description |
|---|---|
get_boards | List all boards with optional filtering |
get_board_details | Get detailed board information |
get_board_issues | Get issues from a board with filters |
search_issues | Search issues using JQL |
get_issue_details | Get comprehensive issue information |
create_issue | Create a new issue |
update_issue | Update an existing issue |
transition_issue | Move issue to a different status |
add_comment | Add a comment to an issue |
get_current_user | Get authenticated user info |
search_users | Find users by name or email |
get_user_details | Get detailed user information |
get_projects | List all accessible projects |
get_project_details | Get project information |
add_worklog | Log work time on an issue |
get_worklogs | View work logs for an issue |
get_server_info | Get Jira server information |
"Show me all my open issues"
"Create a new bug in PROJECT-X about login issues"
"Move ticket PROJ-123 to In Progress"
"Log 2 hours of work on PROJ-456 for code review"
"Add a comment to PROJ-789 saying the fix is deployed"
"Show me all Scrum boards for the mobile project"
"Get details for issue PROJ-100 including comments"# Your open issues
assignee = currentUser() AND status != Done
# Recent issues in a project
project = "MYPROJ" AND created >= -7d
# High priority bugs
priority = High AND issuetype = Bug
# Issues due this week
duedate >= startOfWeek() AND duedate <= endOfWeek()This server implements multiple security measures:
git clone https://github.com/JSM-CN/jira-mcp-server.git
cd jira-mcp-server
npm installnpm run dev # Start development server with hot reload
npm run build # Build for production
npm run clean # Clean build directory
npm run start # Start production serversrc/
├── index.ts # Main server entry point
├── jiraApiClient.ts # Jira API client with auth support
├── toolRegistry.ts # Tool registration and routing
├── types/
│ └── index.ts # TypeScript type definitions
├── services/
│ ├── boardService.ts # Board operations
│ ├── issueService.ts # Issue operations
│ ├── userService.ts # User operations
│ ├── projectService.ts # Project operations
│ ├── worklogService.ts # Worklog operations
│ └── serverService.ts # Server operations
└── utils/
├── logger.ts # Logging utility
├── rateLimiter.ts # Rate limiting
├── validation.ts # Input validation
└── formatters.ts # Response formatting| Issue | Solution |
|---|---|
| Authentication Failed | Verify API token and email (Cloud) or PAT (Server) |
| Permission Denied | Check Jira permissions for your user |
| Connection Timeout | Check network connectivity and firewall settings |
| 401 Error on Jira Server | Use Personal Access Token, not Cloud API Token |
export LOG_LEVEL=DEBUGThis project is licensed under the MIT License - see the LICENSE file for details.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.