{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-11T21:09:20.344Z", "record_id": "VXI-EXT-TOOL-TRUST-ATLASSIAN-01-v1", "record_kind": "external_reference", "title": "Atlassian Rovo MCP: Workspace search and change controls", "system": "Atlassian Rovo MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "How should an agent check whether an Atlassian connector can search documents without changing them?", "near_questions": [ "Can a workplace search connector also edit documents?", "How can Jira and Confluence MCP writes be restricted?", "Do new Atlassian MCP permissions inherit approval?", "Which app settings control a Rovo MCP connection?", "What auth scopes apply to Jira MCP tools?", "Can an agent infer missing content from an access error?", "Where does an Atlassian connector send retrieved content?", "Does an Atlassian search task need write access?", "What should be checked before adding Confluence tools?", "Who administers Atlassian MCP permission changes?", "What should a saved workplace connector review preserve?", "Does this Atlassian record audit our organization?" ], "supported_claims": [ { "claim": "Atlassian documents organization controls for reading, writing and searching, alongside tool-specific scopes for Jira and Confluence. Its supported-tools page includes mutations, so a search use case does not make the entire connector read-only. Check the relevant app permissions and whether future permissions inherit an allow decision. This record does not inspect your organization's settings.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent tool execution or security testing", "Vendor certification, guaranteed safety or no-training assurance" ], "public_summary": "Atlassian documents organization controls for reading, writing and searching, alongside tool-specific scopes for Jira and Confluence. Its supported-tools page includes mutations, so a search use case does not make the entire connector read-only. Check the relevant app permissions and whether future permissions inherit an allow decision. This record does not inspect your organization's settings.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-NOTION-01-v1", "VXI-EXT-TOOL-TRUST-LINEAR-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Atlassian MCP permission controls", "source_url": "https://support.atlassian.com/security-and-access-policies/docs/configure-atlassian-mcp-server-permissions/", "checked_on": "2026-10-11", "candidate_record_id": "VXI-EXT-TOOL-TRUST-ATLASSIAN-01-v1", "candidate_record_sha256": "e6a7c74f9276f892583bbaea90d8f4b13ba671a490935bce3e5a5b0814710217", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "Atlassian documents organization controls for reading, writing and searching, alongside tool-specific scopes for Jira and Confluence. Its supported-tools page includes mutations, so a search use case does not make the entire connector read-only. Check the relevant app permissions and whether future permissions inherit an allow decision. This record does not inspect your organization's settings.", "required_buyer_context": "Atlassian's remote MCP documentation, including the supported-tools page now published under Atlassian AI Gateway; selected apps and organization settings must be identified. Effective app settings, inherited additions, exact user permissions and downstream client data handling.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Atlassian Rovo MCP", "variant": "Atlassian's remote MCP documentation, including the supported-tools page now published under Atlassian AI Gateway; selected apps and organization settings must be identified." }, "review_status": "documentation_review_only", "checked_on": "2026-10-11", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, feature entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Atlassian publishes the remote connector and its administration guidance.", "source_ids": [ "atlassian-permissions", "atlassian-tools" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Search and work with Jira and Confluence information.", "source_ids": [ "atlassian-permissions", "atlassian-tools" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Jira work items and Confluence content; search scope depends on enabled app toolsets.", "source_ids": [ "atlassian-permissions", "atlassian-tools" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Documented tool groups create or edit Jira and Confluence content; additional high-impact groups require separate review.", "source_ids": [ "atlassian-permissions", "atlassian-tools" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "The reviewed Jira and Confluence tools document OAuth 2.1 and API token authentication with named scopes.", "source_ids": [ "atlassian-permissions", "atlassian-tools" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "Organization Read, Write and Search controls include app-specific choices and optional automatic allowance of future additions.", "source_ids": [ "atlassian-permissions", "atlassian-tools" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Retrieved work content is delivered to the connected AI client. That client's recipients and retention are a separate review question.", "source_ids": [ "atlassian-permissions", "atlassian-tools" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "Search-only intent with write access still enabled; future permission inheritance; confusing a permission error with absent content.", "source_ids": [ "atlassian-permissions", "atlassian-tools" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Effective app settings, inherited additions, exact user permissions and downstream client data handling.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "For a search-only task, withhold mutations; review inherited permissions before allowing newly added tool groups.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "atlassian-permissions", "url": "https://support.atlassian.com/security-and-access-policies/docs/configure-atlassian-mcp-server-permissions/", "final_url": "https://support.atlassian.com/security-and-access-policies/docs/configure-atlassian-mcp-server-permissions/", "title": "Atlassian MCP permission controls", "checked_on": "2026-10-11", "sha256": "06283c68057d23da6a5ff2976135c0b6962d743dadf132c452da3218f24d66a0", "bytes": 428301 }, { "source_id": "atlassian-tools", "url": "https://support.atlassian.com/atlassian-ai-gateway/docs/supported-tools/", "final_url": "https://support.atlassian.com/atlassian-ai-gateway/docs/supported-tools/", "title": "Atlassian MCP supported tools", "checked_on": "2026-10-11", "sha256": "4d932ffd80fffa01c768edef4382160878ccb0ba408f325c27fcf29d70757386", "bytes": 930048 }, { "source_id": "mcp-hints", "url": "https://blog.modelcontextprotocol.io/posts/2026-03-16-tool-annotations/", "final_url": "https://blog.modelcontextprotocol.io/posts/2026-03-16-tool-annotations/", "title": "MCP tool annotations and enforcement boundaries", "checked_on": "2026-10-11", "sha256": "82888044d831c3bd18f03d87a846ce5d27e028bd67a095edc04ba377fc622163", "bytes": 52715 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Preserve the organization-control and scope questions considered before enabling a workplace connector.", "free": "Complete profile, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Review the effective tool inventory and client data policy before a new integration decision." }, "change_history": [ { "version": 1, "date": "2026-10-11", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#atlassian-mcp-workspace-controls-trust", "machine_readable_record": "/varexis-index/records/atlassian-mcp-workspace-controls-trust.json" }