Node.js/TypeScript MCP server for Atlassian Bitbucket. Enables AI systems (LLMs) to interact with workspaces, repositories, and pull requests via tools (list, get, comment, search). Connects AI directly to version control workflows through the standard MC
Drift inferred · capture-to-capture
No drift recorded — single capability capture; advisories appear once its surface changes.
transport stdio · streamable-http · http counts 6 tools · 0 res
· 0 prompts
permission surface via code analysis
tools
-
bb_clone
-
bb_delete
-
bb_get
-
bb_patch
-
bb_post
-
bb_put
evidence-backed
findings quoted directly from the published source artifact — not inferred
code files: 33
filesystem 4
- fs package/dist/controllers/atlassian.repositories.content.controller.js :46
const fs = __importStar(require("fs/promises")); - fs package/dist/utils/config.util.js :7
const fs_1 = __importDefault(require("fs")); - fs package/dist/utils/logger.util.js :37
const fs = __importStar(require("fs")); - fs package/dist/utils/response.util.js :37
const fs = __importStar(require("fs"));
shell / exec 3
- shell package/dist/utils/cli.test.util.js :4
const child_process_1 = require("child_process"); - shell package/dist/utils/logger.util.js :133
const regex = new RegExp(`^${regexPattern}$`); - shell package/dist/utils/shell.util.js :5
const child_process_1 = require("child_process");
network 1
- net package/dist/utils/transport.util.js :107
const response = await fetch(url, requestOptions);
tool registrations 6
- bb_get package/dist/tools/atlassian.api.tool.js :202
- bb_post package/dist/tools/atlassian.api.tool.js :213
- bb_put package/dist/tools/atlassian.api.tool.js :224
- bb_patch package/dist/tools/atlassian.api.tool.js :235
- bb_delete package/dist/tools/atlassian.api.tool.js :246
- bb_clone package/dist/tools/atlassian.repositories.tool.js :50
install hooks 2
- prepare package/package.json :18
npm run build && node scripts/ensure-executable.js - postinstall package/package.json :19
node scripts/ensure-executable.js
declared dependencies 34
- @modelcontextprotocol/sdk@^1.26.0
- @toon-format/toon@^2.1.0
- commander@^14.0.3
- cors@^2.8.5
- dotenv@^17.2.3
- express@^5.2.1
- jmespath@^0.16.0
- zod@^4.3.6
- @eslint/js@^9.39.1
- @semantic-release/changelog@^6.0.3
- @semantic-release/exec@^7.1.0
- @semantic-release/git@^10.0.1
- @semantic-release/github@^12.0.2
- @semantic-release/npm@^13.1.2
- @types/cors@^2.8.19
- @types/express@^5.0.5
- @types/jest@^30.0.0
- @types/jmespath@^0.15.2
- @types/node@^24.10.1
- @typescript-eslint/eslint-plugin@^8.48.0
- @typescript-eslint/parser@^8.48.0
- eslint@^9.39.1
- eslint-config-prettier@^10.1.8
- eslint-plugin-filenames@^1.3.2
- eslint-plugin-prettier@^5.5.4
- jest@^30.2.0
- nodemon@^3.1.11
- npm-check-updates@^19.1.2
- prettier@^3.7.3
- semantic-release@^25.0.2
- ts-jest@^29.4.5
- ts-node@^10.9.2
- typescript@^5.9.3
- typescript-eslint@^8.48.0