Atlassian Bitbucket MCP Server
Bitbucket repositories, pull requests, and code management via AI agents.
Data last scanned today · Reviewed yesterday
Overview
This server integrates Atlassian Bitbucket Cloud with AI assistants like Claude and Cursor. It provides a natural language interface to query repository information, review pull requests, and perform code searches directly within an AI environment. Users can ask about commit history, compare branches, or generate pull request comments. Functionality includes both read and write operations, enabling users to create pull requests or comment on existing ones. It is designed to work with Node.js and requires an Atlassian API token or App Password for connectivity, supporting workflows for individual developers and team leads alike.
Our verdict
This server carries a high-risk profile with a security score of 16/100, largely due to the absence of a defined authentication method within the server itself, meaning anyone with access to the configuration can execute commands. Furthermore, it lacks a read-only mode, granting potential write access to all Bitbucket resources. It is suitable for experimental or personal development environments, but should be avoided in enterprise or sensitive production environments due to the lack of official maintenance and unclear legal status regarding its license.
- Supports modern scoped API tokens for Bitbucket authentication
- Provides direct capabilities for creating and managing pull requests
- Maintains a small footprint with only eight direct dependencies
- High security risk due to no internal authentication implementation
- No license detected, creating legal ambiguity for users
- Community-maintained project with no official Atlassian support
- Lacks a dedicated read-only mode to prevent accidental write actions
Setup
{
"mcpServers": {
"mcp-server-atlassian-bitbucket": {
"args": [
"-y",
"@aashari/mcp-server-atlassian-bitbucket"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| bb_get | GET any Bitbucket API endpoint (read data) | low |
| bb_post | POST to any endpoint (create resources) | medium |
| bb_put | PUT to any endpoint (replace resources) | medium |
| bb_patch | PATCH any endpoint (partial updates) | medium |
| bb_delete | DELETE any endpoint (remove resources) | high |
| bb_clone | Clone a repository locally | medium |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›Does this server support Bitbucket Server or Data Center?
No, this MCP server is specifically designed for Bitbucket Cloud accounts only.
›Which authentication method is recommended?
The Scoped API Token is the recommended authentication method as Bitbucket App Passwords are being deprecated and scheduled for removal by June 2026.
›What permissions are required for full functionality?
For full functionality including PR management and commenting, you need to provide repository, workspace, and pullrequest scopes.
›What are the system requirements to run this server?
You must have Node.js version 18.0.0 or higher installed on your machine.
›Can I filter the data returned by the server?
Yes, you can use JMESPath filtering with the --jq flag to customize and filter the information returned by the API.
Alternatives
Changelog
Badge
Maintain this server? Add the live badge to your README.