
Security News
New Website “Is It Really FOSS?” Tracks Transparency in Open Source Distribution Models
A new site reviews software projects to reveal if they’re truly FOSS, making complex licensing and distribution models easy to understand.
bitbucket-mcp
Advanced tools
Model Context Protocol (MCP) server for Bitbucket Cloud and Server API integration
Model Context Protocol (MCP) server for Bitbucket Cloud and Server API integration. This package enables AI assistants to interact with Bitbucket repositories, pull requests, and other features through the MCP protocol.
# Install globally
npm install -g bitbucket-mcp
# Or run directly with npx
npx bitbucket-mcp
# Required for all operations
export BITBUCKET_URL="https://your-bitbucket-server-url" # For Server API
export BITBUCKET_CLOUD_URL="https://api.bitbucket.org/2.0" # For Cloud API
# Authentication (choose one method)
export BITBUCKET_TOKEN="your_access_token"
# OR
export BITBUCKET_USERNAME="your_username"
export BITBUCKET_APP_PASSWORD="your_app_password"
# Optional
export BITBUCKET_DEFAULT_PROJECT="your_default_project" # For Server API
npx bitbucket-mcp
list_public_repositories
- List all public repositorieslist_workspace_repositories
- List repositories in a workspaceget_repository
- Get a specific repositorylist_repository_forks
- List forks of a repositorylist_repository_webhooks
- List webhooks for a repositoryget_repository_webhook
- Get a specific webhookget_repository_settings_inheritance
- Get repository settings inheritancelist_repository_group_permissions
- List group permissionsget_repository_group_permission
- Get specific group permissionlist_repository_user_permissions
- List user permissionsget_repository_user_permission
- Get specific user permissionlist_repository_watchers
- List repository watcherslist_user_repository_permissions
- List permissions for the current usercreate_pull_request
- Create a new pull requestget_pull_request
- Get pull request detailsmerge_pull_request
- Merge a pull requestdecline_pull_request
- Decline a pull requestadd_comment
- Add a comment to a pull requestget_diff
- Get pull request diffget_reviews
- Get pull request reviewsThis MCP server is designed to be used with AI assistants that support the Model Context Protocol:
{
"mcpServers": {
"bitbucket": {
"command": "npx",
"args": ["-y", "bitbucket-mcp"],
"env": {
"BITBUCKET_URL": "https://your-bitbucket-server.com",
"BITBUCKET_CLOUD_URL": "https://api.bitbucket.org/2.0",
"BITBUCKET_TOKEN": "your-access-token"
}
}
}
}
Any client that supports the MCP protocol can communicate with this server over standard input/output.
// Request
{
"jsonrpc": "2.0",
"id": 1,
"method": "mcp.call_tool",
"params": {
"name": "list_workspace_repositories",
"arguments": {
"workspace": "your_workspace"
}
}
}
// Response
{
"jsonrpc": "2.0",
"id": 1,
"result": {
"content": [
{
"type": "text",
"text": "{ \"values\": [...], \"pagelen\": 10, ... }"
}
]
}
}
// Request
{
"jsonrpc": "2.0",
"id": 2,
"method": "mcp.call_tool",
"params": {
"name": "create_pull_request",
"arguments": {
"project": "PROJECT",
"repository": "repo-name",
"title": "Feature: Add new functionality",
"description": "This PR adds the new feature X",
"sourceBranch": "feature/new-feature",
"targetBranch": "main"
}
}
}
# Clone the repository
git clone https://github.com/yourusername/bitbucket-mcp.git
cd bitbucket-mcp
# Install dependencies
npm install
# Build
npm run build
# Run locally
npm start
The server logs all operations to bitbucket.log
using Winston for debugging and monitoring purposes.
MIT
FAQs
Model Context Protocol (MCP) server for Bitbucket Cloud and Server API integration
The npm package bitbucket-mcp receives a total of 184 weekly downloads. As such, bitbucket-mcp popularity was classified as not popular.
We found that bitbucket-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
A new site reviews software projects to reveal if they’re truly FOSS, making complex licensing and distribution models easy to understand.
Security News
Astral unveils pyx, a Python-native package registry in beta, designed to speed installs, enhance security, and integrate deeply with uv.
Security News
The Latio podcast explores how static and runtime reachability help teams prioritize exploitable vulnerabilities and streamline AppSec workflows.