B

Confluence MCP Server

Confluence MCP server for Cloud/Server/Data Center search, read, create, and update pages

Overall Score72/100

Score Breakdown

Server Info

Package
confluence-mcp-server
Registry
npm
Maintainer
Community
Category
Document Management
Tags
wikidocsatlassian
Last Scanned
7 Apr 2026

Findings

3 issues

Authentication & Identity

HIGHNo per-request auth - requires instance-per-user

Stdio-only transport. Supports multiple auth modes: Basic auth (username + token/password) for Cloud mode, Bearer token or Basic auth for Server/DC mode. Auth mode can be auto-detected or explicitly set via CONF_AUTH_MODE. Credentials are passed via env vars and built into an Authorization header at... For multi-tenant deployment, the platform must spawn a separate server instance per user.

Remediation

Add HTTP/SSE transport to accept per-request Authorization headers, or implement the MCP OAuth spec.

Maintenance & Trust

LOWCommunity-maintained by qihaze123

No official vendor backing.

Remediation

Seek vendor verification.

MEDIUM4 dependency vulnerabilities (4 high)

npm audit found 4 high severity CVEs.

Remediation

Update vulnerable dependencies.

Tools

6 total
NameDescriptionRisk
confluence_get_current_userGet current authenticated Confluence user (whoami).read
confluence_search_pagesSearch Confluence pages by keyword. Returns unified fields: id, type, title, spaceKey, url, version.read
confluence_execute_cql_searchExecute raw Confluence CQL search. Returns unified fields: id, type, title, spaceKey, url, version.read
confluence_get_pageGet a Confluence page by ID. Returns unified fields and bodyStorageValue.read
confluence_create_pageCreate a Confluence page. Supports optional parentId. Returns unified fields.write
confluence_update_pageUpdate a Confluence page content. Auto increments version. Returns unified fields.write

Deploy Confluence MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow