Merge pull request #139 from speakeasy-api/guide/issue-135-atlassian

guide: Atlassian

Author: svadrutk

guides/atlassian/external.md

@@ -6,7 +6,7 @@ setup_version: 1
 
 You need an Atlassian Cloud site with Jira, Confluence, and/or Compass, and the connecting Atlassian account must have access to the intended site and apps. Use a modern browser. Atlassian documents no paid-plan requirement for the MCP Server.
 
-You need no Atlassian-side configuration unless your organization restricts OAuth client domains, IP addresses, third-party apps, or network egress. For OAuth-domain or IP-allowlist restrictions, sign in to Atlassian Administration with an organization-admin account and complete the applicable checks below. If **User Installed Apps** is blocked, ask a site admin for help. For strict egress filtering, ask your network/security owner to allow the required Atlassian domain.
+You need no Atlassian-side configuration unless your organization restricts OAuth client domains, IP addresses, third-party apps, or network egress. For OAuth-domain or IP-allowlist restrictions, sign in to Atlassian Administration with an organization-admin account and complete the applicable checks below. If app-management policy blocks authorization, ask the site admin who owns Marketplace and third-party app policy for help. For strict egress filtering, ask your network/security owner to allow the required Atlassian domain.
 
 ### Allow the Speakeasy OAuth domain {#allow-speakeasy-domain}
 
@@ -43,4 +43,3 @@ If your organization uses strict egress filtering, ask your network/security own
 
 If Atlassian denies the OAuth redirect during connection, return to **Rovo** > **Rovo MCP server** and verify that the client origin matches an allowed domain or pattern. If the authorization screen appears but a tool call returns an IP permission error, update the relevant organization IP allowlist.
 
-If authorization reports that the app must be installed because **User Installed Apps** is blocked, ask a site admin to install the Atlassian MCP app under the organization's Marketplace and third-party app policy.

guides/atlassian/meta.yaml

@@ -16,7 +16,7 @@ credential_setup:
     - id: product-access
       description: Atlassian account with access to the intended Cloud site and products
     - id: organization-policy-approval
-      description: Administrative action when OAuth domains, IP allowlists, or User Installed Apps policy restrict the connection
+      description: Administrative action when OAuth domains, IP allowlists, app-management policy, or strict network egress restricts the connection
 documentation:
   external: external.md
   speakeasy: speakeasy.md
@@ -31,97 +31,105 @@ remotes:
         locator: https://support.atlassian.com/atlassian-rovo-mcp-server/docs/getting-started-with-the-atlassian-remote-mcp-server/
         name: Getting started with the Atlassian Rovo MCP Server
         classification: official
-        observed_at: "2026-08-07T20:27:40Z"
+        observed_at: "2026-08-07T21:49:51Z"
       - source: endpoint-observation
         locator: https://mcp.atlassian.com/v1/mcp/authv2
         classification: official
-        observed_at: "2026-08-07T20:27:40Z"
+        observed_at: "2026-08-07T21:49:51Z"
       - source: endpoint-observation
         locator: https://mcp.atlassian.com/.well-known/oauth-protected-resource/v1/mcp/authv2
         classification: official
-        observed_at: "2026-08-07T20:27:40Z"
+        observed_at: "2026-08-07T21:49:51Z"
 provenance:
   - source: pulsemcp
     locator: query:atlassian
     name: No exact current Atlassian Rovo title/name match
     classification: mirror
     status: ambiguous; one non-exact hit and no exact title/name match
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: workflow-operator-notes
     locator: assignment:atlassian
     name: Speakeasy callback and catalog-path observations
     classification: official
     status: hosted callback confirmed; hosted outbound IP ranges unknown
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: provider-documentation
     locator: https://support.atlassian.com/atlassian-rovo-mcp-server/docs/getting-started-with-the-atlassian-remote-mcp-server/
     name: Getting started with the Atlassian Rovo MCP Server
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: provider-documentation
     locator: https://support.atlassian.com/atlassian-rovo-mcp-server/docs/setting-up-clients/
     name: Setting up clients
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: provider-documentation
     locator: https://support.atlassian.com/atlassian-rovo-mcp-server/docs/authentication-and-authorization/
     name: Authentication and authorization
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: provider-documentation
     locator: https://support.atlassian.com/atlassian-rovo-mcp-server/docs/configuring-oauth-2-1/
     name: Configuring OAuth 2.1
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: provider-documentation
     locator: https://support.atlassian.com/atlassian-rovo-mcp-server/docs/configuring-authentication-via-api-token/
     name: Configuring authentication via API token
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: provider-documentation
     locator: https://support.atlassian.com/atlassian-rovo-mcp-server/docs/using-with-other-supported-mcp-clients/
     name: Using with other supported MCP clients
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: provider-documentation
     locator: https://support.atlassian.com/security-and-access-policies/docs/control-atlassian-rovo-mcp-server-settings/
     name: Control Atlassian Rovo MCP server settings
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: provider-documentation
     locator: https://support.atlassian.com/security-and-access-policies/docs/specify-ip-addresses-for-product-access/
     name: Specify IP addresses for product access
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: provider-documentation
     locator: https://support.atlassian.com/security-and-access-policies/docs/available-atlassian-rovo-mcp-server-domains/
     name: Available Atlassian Rovo MCP server domains
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: provider-documentation
     locator: https://support.atlassian.com/atlassian-rovo-mcp-server/docs/troubleshooting-and-verifying-your-setup/
     name: Troubleshooting and verifying your setup
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: provider-marketing
     locator: https://www.atlassian.com/platform/remote-mcp-server
     name: Atlassian Rovo MCP server
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: endpoint-observation
     locator: https://mcp.atlassian.com/v1/mcp/authv2
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: endpoint-observation
     locator: https://mcp.atlassian.com/.well-known/oauth-protected-resource/v1/mcp/authv2
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"
   - source: endpoint-observation
-    locator: https://auth.atlassian.com/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3/.well-known/oauth-authorization-server
+    locator: protected-resource-discovered authorization-server metadata
+    name: Atlassian authorization-server metadata with DCR registration endpoint
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    status: authorization, token, and registration endpoints verified from metadata; empty DCR POST returned HTTP 400
+    observed_at: "2026-08-07T21:49:51Z"
+  - source: endpoint-observation
+    locator: https://auth.atlassian.com/.well-known/oauth-authorization-server
+    name: Atlassian base authorization-server metadata
+    classification: official
+    status: stable base issuer plus authorization and token endpoints verified; no registration endpoint advertised here
+    observed_at: "2026-08-07T21:49:51Z"
   - source: repository-doctrine
     locator: doctrine/speakeasy-setup.md
     name: Speakeasy setup canonical section
     classification: official
-    observed_at: "2026-08-07T20:27:40Z"
+    observed_at: "2026-08-07T21:49:51Z"