Atlassian Confluence MCP Server by Aashari: Setup for Claude, Cursor and Other Apps

• Reads spaces, pages, comments and search results from Confluence

  Reads anything the Confluence Cloud API exposes at a path you give it, such as spaces, pages, page bodies, comments and CQL search. It can trim the reply with a JMESPath filter to keep it small. This is the only tool that never changes anything.

  Try: “Find the pages in our Engineering space that mention API authentication.”

  Network · conf_get

• Creates pages, blog posts, labels and comments

  Sends a create request to a Confluence API path with a body you describe. The server documents creating pages, blog posts, labels and comments. It will create whatever the API path and your account allow.

  Try: “Create a page called API Guide in the DEV space with a short overview.”

  Write · conf_post

• Replaces a page, blog post or other item with new content

  Overwrites an existing item with a full new version, for example a page's title and body. Confluence needs the version number raised by one for a page update. Old content is replaced by what is sent.

  Try: “Update the release notes page with the new version summary.”

  Write · conf_put

• Changes part of a Confluence item, such as a space or comment

  Updates selected fields of an existing item instead of the whole thing. The tool description lists space and comment updates as examples. It works on any API path your account may change.

  Try: “Rename the Marketing space to Brand and Marketing.”

  Write · conf_patch

• Deletes pages, blog posts, comments, labels and attachments

  Sends a delete request to a Confluence API path. The tool description lists pages, blog posts, labels, comments and attachments. Nothing in the server asks for confirmation first.

  Try: “Delete the outdated onboarding draft page with id 789.”

  Delete · conf_delete

Watch out for

• conf_delete can remove pages and attachments

  It deletes whatever API path it is given, with no confirmation step. Use a token from an account that cannot delete in important spaces. github.com

• Writes reach anything your account can edit

  The create, replace and update tools accept any API path. Limit what the Atlassian account behind the token can change. github.com

• HTTP mode has no sign-in and listens on all interfaces

  If you set TRANSPORT_MODE=http, the server calls listen on port 3000 (PORT) with no host, so it binds every network interface, with open cross-site access (cors with default settings) and no sign-in. Anyone who can reach the port can use your stored Atlassian token's permissions. Our advice: keep the default stdio mode. github.com

• Saves raw Confluence responses to /tmp/mcp

  Every successful JSON API reply is also written to a file under /tmp/mcp/<project-name>/ on your machine. Delete those files if the pages are sensitive. github.com

• conf_get description tells the assistant to always filter

  The conf_get description says: "ALWAYS use `jq` param to filter response fields. Unfiltered responses are very expensive!" It can make the assistant return less than you asked for, so ask for full content when you need it. github.com

Security advisories