@aashari/mcp-server-atlassian-bitbucket
BMCP server package @aashari/mcp-server-atlassian-bitbucket
Install
agr install @aashari/mcp-server-atlassian-bitbucket --target claudeThis artifact does not publish files for Claude.
Document
{ "name": "@aashari/mcp-server-atlassian-bitbucket", "version": "3.1.0", "description": "Node.js/TypeScript MCP server for Atlassian Bitbucket. Enables AI systems (LLMs) to interact with workspaces, repositories, and pull requests via tools (list, get, comment, search). Connects AI directly to version control workflows through the standard MCP interface.", "main": "dist/index.js", "types": "dist/index.d.ts", "type": "commonjs", "repository": { "type": "git", "url": "https://github.com/aashari/mcp-server-atlassian-bitbucket.git" }, "bin": { "mcp-atlassian-bitbucket": "./dist/index.js" }, "scripts": { "build": "tsc", "clean": "rm -rf dist coverage", "prepare": "npm run build && node scripts/ensure-executable.js", "postinstall": "node scripts/ensure-executable.js", "lint": "eslint src --ext .ts --config eslint.config.mjs", "format": "prettier --write 'src//*.ts' 'scripts//.js'", "test": "jest", "test:coverage": "jest --coverage", "test:cli": "jest src/cli/.\.cli\.test\.ts --runInBand --testTimeout=60000", "update:version": "node scripts/update-version.js", "cli": "npm run build && node dist/index.js", "mcp:stdio": "TRANSPORT_MODE=stdio npm run build && node dist/index.js", "mcp:http": "TRANSPORT_MODE=http npm run build && node dist/index.js", "mcp:inspect": "TRANSPORT_MODE=http npm run build && (node dist/index.js &) && sleep 2 && npx @modelcontextprotocol/inspector http://localhost:3000/mcp" }, "keywords": [ "mcp", "typescript", "claude", "anthropic", "ai", "atlassian", "bitbucket", "repository", "version-control", "pull-request", "server", "model-context-protocol", "tools", "resources", "tooling", "ai-integration", "mcp-server", "llm", "ai-connector", "external-tools", "cli", "mcp-inspector" ], "author": "Andi Ashari", "license": "ISC", "devDependencies": { "@eslint/js": "^9.39.1", "@semantic-release/changelog": "^6.0.3", "@semantic-release/exec": "^7.1.0", "@semantic-release/git": "^10.0.1", "@semantic-release/github": "^12.0.2", "@semantic-release/npm": "^13.1.2", "@types/cors": "^2.8.19", "@types/express": "^5.0.5", "@types/jest": "^30.0.0", "@types/jmespath": "^0.15.2", "@types/node": "^24.10.1", "@typescript-eslint/eslint-plugin": "^8.48.0", "@typescript-eslint/parser": "^8.48.0", "eslint": "^9.39.1", "eslint-config-prettier": "^10.1.8", "eslint-plugin-filenames": "^1.3.2", "eslint-plugin-prettier": "^5.5.4", "jest": "^30.2.0", "nodemon": "^3.1.11", "npm-check-updates": "^19.1.2", "prettier": "^3.7.3", "semantic-release": "^25.0.2", "ts-jest": "^29.4.5", "ts-node": "^10.9.2", "typescript": "^5.9.3", "typescript-eslint": "^8.48.0" }, "publishConfig": { "registry": "https://registry.npmjs.org/", "access": "public" }, "dependencies": { "@modelcontextprotocol/sdk": "^1.26.0", "@toon-format/toon": "^2.1.0", "commander": "^14.0.3", "cors": "^2.8.5", "dotenv": "^17.2.3", "express": "^5.2.1", "jmespath": "^0.16.0", "zod": "^4.3.6" }, "directories": { "example": "examples" }, "jest": { "preset": "ts-jest", "testEnvironment": "node", "setupFilesAfterEnv": [ "/src/utils/jest.setup.ts" ], "testMatch": [ "/src//.test.ts" ], "collectCoverageFrom": [ "src/**/.ts", "!src//*.test.ts", "!src//.spec.ts" ], "coveragePathIgnorePatterns": [ "/node_modules/", "/dist/", "/coverage/" ], "coverageReporters": [ "text", "lcov", "json-summary" ], "transform": { "^.+\.tsx?$": [ "ts-jest", { "useESM": true } ] }, "moduleNameMapper": { "(.)\.(js|jsx)$": "$1" }, "extensionsToTreatAsEsm": [ ".ts" ], "moduleFileExtensions": [ "ts", "tsx", "js", "jsx", "json", "node" ] }, "engines": { "node": ">=18.0.0" } }
Trustgrade B
- passBody integrity
Whether the stored document is plausibly the kind of file the artifact declares, rather than something fetched by mistake.
- warnType matchbest-effort: server code not analyzed
Whether the artifact is really the kind of thing its metadata claims it is.
- passFreshness
How long since the source repository was last pushed to.
- passPrompt injection
Scans the artifact's own text for instructions aimed at your agent rather than at you.
- warnLicenseno SPDX license detected
Whether the source repository declares an SPDX license permissive enough to redistribute.
How the grade is calculated
Each check contributes 0 points when it passes, 1 when it warns, and 2 when it fails. The total maps to a letter:
- Aevery check passed
- Bone warning
- Ctwo warnings
- Dprompt injection or body integrity failed, or three warnings
- Fone of those failed, and something else is wrong
These are automated hygiene checks, not a security audit, and not a dependency or vulnerability scan. A grade of A means nothing was flagged — not that the artifact is safe.
Versions
git-0ad4d4bd066b2026-08-06