Atlassian Rovo MCP Server vs ONES

Atlassian Rovo MCP Server 73

About 247 tools are named on the supported-tools page (updated 2 November 2026), but v2 returns about 20 primary tools in tools/list, marked (Primary), with discover and the execute meta-tools loading the rest on demand, and admins enable permission groups per product. 11 to 30 tools gives 15, plus 10 back for dynamic loading and toolsets (25, was 20). Search and list tools take maxResults or limit, list tools such as listJiraIssueComments and searchTeams are paginated, and JQL, CQL and field selection filter results (20, was 15). Error messages are documented for IP allowlisting and auth, including 403s from IP rules or scopes, not per tool, so partly met (10 of 20). Read, write and destructive execution of deferred tools are separate meta-tools, but primary write tools are called by name, no readOnlyHint or destructiveHint is named in the tool docs and there is no idempotency guidance, so partly met (10 of 20). One URL and an OAuth sign-in, no SDK, required parameters per tool not published, so partly met (8 of 15). The three partly met lines keep their earlier values pending a rule on in-between values. 25 + 20 + 10 + 10 + 8 = 73.

ONES 40

Scored on the MCP server and the Open API together. 67 MCP tools load by default (5), and a client granted fewer scope groups is limited to fewer tools (5 back). Lists take limit and cursor with project and issue type filters, and query_issues_by_onesql runs a filtered query (15 of 20). Error status codes are documented per endpoint with response schemas, but no error code catalogue was found (8 of 20). No idempotency keys or MCP annotations found (0). One official SDK, @ones-open/node-sdk, aimed at ONES Apps, and the MCP setup is one mcp-remote line (7 of 15). 10 + 15 + 8 + 0 + 7 = 40.

Atlassian Rovo MCP Server 50

Statuspage at rovo.status.atlassian.com with an MCP component, read from the page and history.atom (20). In the 90 days from 6 August the feed has two MCP incidents, degraded performance with timeouts on 21 October (15:30 to 18:25 UTC) and intermittent errors for some users on 22 October (14:42 to 18:16 UTC), both degradation rather than an outage, plus the 18 August Rovo chat streaming incident, which doesn't name MCP. Minor only (20). No numeric rate limits for the MCP server in the docs, README or supported-tools page (0). No 429 or retry guidance found (0). No SLA that names the MCP server found (0). v2 has been GA since 8 September 2026 (10). 20 + 20 + 0 + 0 + 0 + 10 = 50.

ONES 25

Graded as a hosted service on ONES.com Cloud's Open API and MCP server. No status page is linked from ones.com, the trust centre or the docs, and status.ones.com did not resolve (0). With no readable history the incident line scores 5. No rate limit with numbers was found in the developer docs index or the terms, which only reserve the right to restrict excessive traffic (0). No 429, backoff or idempotency guidance found (0). The pricing page states 99.9% uptime on Business and 99.95% on Enterprise (10). The MCP server has been in the release notes since 6.42.0 on 26 August 2025 and carries no beta label (10). 0 + 5 + 0 + 0 + 10 + 10 = 25.

Atlassian Rovo MCP Server 85

OAuth 2.1 bounded by the user's existing product permissions, with scopes per permission group, or API tokens in the Authorization header (Basic email and token, or a service-account Bearer key), never in the URL. Personal API tokens carry the user's full reach (26). Admins grant permission groups per product, delete_jira and manage_jira are off by default, destructive calls go through their own meta-tool, and admins can block client domains and enforce IP allowlists (16). The README and SECURITY.md describe prompt injection and tool poisoning and ask for human confirmation on destructive actions, guidance only (10). Every tool call lands in the organisation audit log under Rovo MCP User Actions (15). security.txt valid (Expires 4 February 2027, read on 4 November), a private disclosure route with a bug bounty named in SECURITY.md, and SOC 2 and ISO 27001 on the trust page, though the page doesn't say Rovo or MCP is in scope (18).

ONES 65

OAuth for MCP clients with per-scope consent, Personal API keys created with chosen scopes and shown once, organisation credentials, token introspection and revocation, all sent as Bearer headers (30). Scope groups allow a read-only grant, and the docs advise revoking unused clients, but writes run without a confirmation step and the consent page preselects every group (12 of 20). Tools return issue, comment and wiki text written by other users plus search_external_web results, and no prompt-injection guidance was found (0). The authorised client list shows each client's grant time and last active time, and on-premises installs document an audit log (8 of 15). security.txt valid until June 2027, and the trust centre lists SOC 2 Type II, ISO 27001 and ISO 27018 without report access or a bug bounty (15 of 20). 30 + 12 + 0 + 8 + 15 = 65.

Atlassian Rovo MCP Server 10

No x402, MPP or L402 (0). Usage draws Rovo credits. The usage-limits page says single-product lookups are free and enriched Teamwork Graph calls cost 1 to 10 credits each, and the supported-tools page gives 15 to 30 credits for Confluence infographic and visualisation tools, but no per-credit price sits next to them, so plan-level public pricing (10). Atlassian Cloud has free plans with no card, but no page we read says the MCP server is enabled on them, so 0 (was 10, not a checklist value). A person signs in through a browser OAuth flow or creates an API token (0). 0 + 10 + 0 + 0 = 10.

ONES 30

No x402, MPP or L402 (0). Plan prices are public per seat a year, with nothing per call (10). The free plan covers up to 30 seats and the pricing page says no card is needed (20). A person signs up in a browser and grants OAuth consent (0). 0 + 10 + 20 + 0 = 30.

Atlassian Rovo MCP Server 78

The hosted server is closed under Atlassian's customer agreement. The GitHub repository of docs, manifests and skills is Apache-2.0 (15). Atlassian publishes a privacy policy and DPA, but we didn't find MCP-specific retention statements and didn't fetch the DPA in this run (18). v1 retirement is dated (automatic move to v2 on 1 March 2027, /v1/sse unsupported after 30 June 2026) and tool renames are logged, with no stated notice period (18). Atlassian publishes subprocessors and data residency for Cloud, not checked for MCP in this run (10).

ONES 62

Closed service under terms naming The Beautiful ONES Technology PTE. LTD. and Singapore law (15 of 30). The privacy policy of 7 January 2026 deletes business data 30 days after a service ends with no login for 365 days, and honours deletion requests within 30 days, but no DPA or subprocessor list is public (12 of 30). Endpoint version histories record changes, with no deprecation policy (5 of 20). The privacy policy names AWS, Oracle cloud and OpenAI and says data is transferred mostly to the US, China and Singapore, with no subprocessor list or regions (6 of 20). 15 + 12 + 5 + 6 = 38.

Atlassian Rovo MCP Server 80

Changelog entry on 3 November 2026 (Claude-issued managed auth) (30). Eleven dated entries from 26 September to 3 November, including 13, 16, 20, 23 and 28 October and 2 November (20). Per the 1 October check, not re-read on 4 November, a closed service with a public changelog and a GitHub repository for feedback, where 76 issues were open and the newest ten mostly carried needs-triage with no visible reply (9). server.json names com.atlassian/atlassian-mcp-server 2.0.0, registered in the official MCP registry per the 1 October check (15). The public repository holds manifests and skills with node test scripts and one pinned dev dependency, but no CI workflow (its .github folder holds only issue forms) and no package to install, so the line is partly met and keeps its earlier 6 of 10 pending a rule on in-between values. 30 + 20 + 9 + 15 + 6 = 80.

ONES 68

Latest dated release notes are 7.33.0 on 30 September 2026, 37 days before this check. The registry entry moved to 1.0.3 on 8 October with no release note behind it, so it doesn't set recency (20). Nine dated releases since 8 August, several adding Open API endpoints or MCP capabilities (7.23.0, 7.26.0, 7.27.0, 7.29.0) (20). Closed service with a public changelog and support by email, with no public issue tracker (8 of 15). Verified com.ones/ones namespace in the official MCP registry (15). One official SDK for apps, with package health not checked (5 of 10). 20 + 20 + 8 + 15 + 5 = 68.