← Back to search

@pavel-kalmykov/bitbucket-server-mcp

GitHub Actions Scanned 23d ago

MCP server for Bitbucket Server / Data Center with code review, cross-repo PRs, and CI insights

B
84.2 / 100

Versions

0.13.1latest
May 18, 2026
0.13.0
May 14, 2026
0.12.0
May 7, 2026
0.11.1
May 6, 2026
0.11.0
May 6, 2026
+ show 34 moreshow less
0.10.1
May 6, 2026
0.10.0
May 5, 2026
0.9.0
May 4, 2026
0.8.4
Apr 30, 2026
0.8.3
Apr 28, 2026
0.8.2
Apr 28, 2026
0.8.1
Apr 28, 2026
0.8.0
Apr 22, 2026
0.7.0
Apr 21, 2026
0.6.9
Apr 20, 2026
0.6.8
Apr 19, 2026
0.6.7
Apr 17, 2026
0.6.6
Apr 17, 2026
0.6.5
Apr 17, 2026
0.6.4
Apr 17, 2026
0.6.3
Apr 17, 2026
0.6.2
Apr 17, 2026
0.6.1
Apr 16, 2026
0.6.0
Apr 15, 2026
0.5.0
Apr 15, 2026
0.4.1
Apr 15, 2026
0.4.0
Apr 14, 2026
0.3.0
Apr 14, 2026
0.2.1
Apr 14, 2026
0.2.0
Apr 13, 2026
0.1.6
Apr 10, 2026
0.1.5
Apr 10, 2026
0.1.4
Apr 8, 2026
0.0.0-pr.11.f89982b
Apr 8, 2026
0.0.0-pr.10.25f057d
Apr 8, 2026
0.1.3
Apr 8, 2026
0.1.1
Apr 7, 2026
0.1.0
Apr 7, 2026
0.0.1-alpha.2
Apr 7, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 59

list_repository_hooks
annotations: verified low

List repository hooks and their enabled/disabled state.

readOnlyHint false idempotentHint false
manage_repository_hooks
annotations: verified low

Manage repository hook settings. Actions: "enable" (enable a hook), "disable" (disable a hook), "configure" (set hook settings).

readOnlyHint false idempotentHint false
list_commit_comments
annotations: verified low

Get comments for a specific commit. Returns all comments on the commit with pagination support.

commitId string
readOnlyHint false idempotentHint false
list_merge_checks
annotations: verified low

List merge check configurations for a repository. Merge checks control conditions that must be met before a pull request can be merged.

readOnlyHint false idempotentHint false
manage_merge_checks
annotations: verified low

Configure merge check settings for a repository.

hookKey string
readOnlyHint false idempotentHint false
manage_commit_comments
annotations: verified low

Manage comments on a commit. Actions: "create" (add a new comment), "edit" (update an existing comment), "delete" (remove a comment).

commitId string
readOnlyHint false idempotentHint false
list_projects
annotations: none low

List all Bitbucket projects you have access to. Use this first to discover project keys. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'key,name'` for a custom subset).

list_repositories
annotations: none low

List repositories in a project. Use this to find repository slugs for other operations. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'slug,name'` for a custom subset).

browse_repository
annotations: verified low

Browse files and directories in a repository to understand project structure.

readOnlyHint false idempotentHint false
get_file_content
annotations: verified low

Read file contents from a repository with pagination support for large files.

filePath string
readOnlyHint false idempotentHint false
upload_attachment
annotations: verified low

Upload a file attachment to a repository. Returns a markdown reference to embed in PR comments or descriptions.

readOnlyHint false idempotentHint false
edit_file
annotations: verified low

Edit a file in a repository by committing a new version via the Bitbucket REST API. Returns the commit metadata.

branch string content string message string filePath string
readOnlyHint false idempotentHint false
get_file_blame
annotations: mismatch low

Get blame/history information for a file. Returns line-by-line commit authorship data.

filePath string
readOnlyHint false idempotentHint false destructiveHint true
create_repository
annotations: verified low

Create a new repository in a project.

name string description string
readOnlyHint false idempotentHint false destructiveHint true
delete_repository
annotations: verified low

Delete a repository. This action is irreversible.

readOnlyHint false idempotentHint false destructiveHint true
list_branch_restrictions
annotations: none low

List branch restrictions for a repository. These control which users/groups can push to or delete specific branches or branch patterns.

list_branches
annotations: none low

List branches in a repository. Also returns the default branch when available. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'displayId,latestCommit'` for a custom subset).

list_commits
annotations: mismatch low

List commits in a repository, optionally filtered by branch and author. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'id,message,author.name'` for a custom subset).

readOnlyHint false idempotentHint false destructiveHint true
manage_branches
annotations: verified low

Manage branches in a repository. Actions: "create" (create a new branch), "delete" (delete a branch). Refuses to delete the default branch.

action enum branch string
readOnlyHint false idempotentHint false destructiveHint true
get_commit
annotations: none low

Get details of a specific commit by its ID. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'id,message,author.name'` for a custom subset).

commitId string
compare_refs
annotations: none low

Compare two refs and list commits accessible from `to` but not from `from`. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'id,message,author.name'` for a custom subset).

list_default_reviewer_conditions
annotations: none low

List default reviewer conditions for a repository. These conditions determine which users are automatically added as reviewers to pull requests.

get_server_info
annotations: none low

Get Bitbucket Server version and properties. Useful to check connectivity and server version.

get_code_insights
annotations: none low

Get code insight reports and their annotations for a pull request. Shows build results, code quality, and other analysis.

get_build_status
annotations: none low

Get CI build status for a commit or pull request. When prId is provided, automatically resolves the latest commit. Returns build state (SUCCESSFUL, FAILED, INPROGRESS), name, and URL to the CI build.

manage_deployments
annotations: verified low

Manage deployments for a commit. Actions: "get" (retrieve a deployment), "create" (record a new deployment), "delete" (remove a deployment).

commitId string
readOnlyHint false idempotentHint false
create_pull_request
annotations: verified low

Create a new pull request. Supports cross-repo PRs via sourceProject/sourceRepository and automatic default reviewer merging.

title string sourceBranch string targetBranch string
readOnlyHint false idempotentHint false
get_pull_request
annotations: verified low

Get details of a specific pull request including status, reviewers, and metadata. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'id,title,state'` for a custom subset).

readOnlyHint false
update_pull_request
annotations: verified low

Update a pull request (title, description, target branch, or reviewers). Only changed fields are applied; reviewers are preserved if not provided.

title string description string targetBranch string
readOnlyHint false
merge_pull_request
annotations: verified low

Merge an approved pull request. Fetches the current version automatically for optimistic locking.

message string
readOnlyHint false idempotentHint false destructiveHint true
decline_pull_request
annotations: verified low

Decline a pull request. Fetches the current version automatically for optimistic locking.

message string
readOnlyHint false idempotentHint false destructiveHint true
list_pull_requests
annotations: none low

List pull requests in a repository. Supports filtering by state, direction, order, and client-side author filtering. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'id,title,state'` for a custom subset).

order enum
list_dashboard_pull_requests
annotations: none low

Get pull requests from the authenticated user dashboard. No project/repo needed. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'id,title,state'` for a custom subset).

order enum
get_pull_request_activity
annotations: none low

Get activity feed for a pull request. Optionally filter to only reviews or comments.

get_diff
annotations: none low

Get the diff of a pull request. Use stat=true for a lightweight summary of changed files (and line counts if the server supports it) instead of the full diff.

get_pull_request_commits
annotations: none low

List commits for a specific pull request. Returns the commits that are part of the pull request with pagination support.

get_commit_pull_requests
annotations: none low

List pull requests that contain a specific commit. Returns the PRs that include the given commit.

commitId string
manage_review
annotations: verified low

Approve, unapprove, or publish a review on a pull request. Use "approve" to approve, "unapprove" to remove your approval, and "publish" to submit a review with an optional overview comment and status.

readOnlyHint false idempotentHint false
list_secret_scanning_rules
annotations: none low

List secret scanning allowlist rules for a repository. Requires Bitbucket Server 8.5+.

manage_comment
annotations: none low

Manage pull request comments. Actions: "create" (general, inline, threaded, or tasks), "edit" (update text/severity/state/threadResolved), "delete", "react" (add emoji reaction), "unreact" (remove reaction). `state: RESOLVED` toggles the task checkbox on a BLOCKER comment; `threadResolved: true` closes the conversation (the "Resolve" button in the UI). They are independent and can be passed together.

search_emoticons
annotations: none low

Search available emoticons for comment reactions. Returns matching shortcut names to use with manage_comment react/unreact.

query string
list_forks
annotations: verified low

List forks of a repository. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'slug,name'` for a custom subset).

readOnlyHint false idempotentHint false
fork_repository
annotations: verified low

Fork a repository into a target project. Creates a copy of the source repository in the specified target project.

repository string
readOnlyHint false idempotentHint false
list_gpg_keys
annotations: verified low

List GPG keys for the authenticated user.

readOnlyHint false idempotentHint false
manage_gpg_keys
annotations: verified low

Manage GPG keys for the authenticated user. Actions: "add" (add a key), "delete" (remove a key).

keyId number action enum
readOnlyHint false idempotentHint false
list_reviewer_groups
annotations: verified low

List reviewer groups configured for a repository.

readOnlyHint false idempotentHint false
manage_reviewer_groups
annotations: verified low

Manage reviewer groups for a repository. Actions: "create" (create a group), "delete" (remove a group).

name string action enum
readOnlyHint false idempotentHint false
get_user_profile
annotations: none low

Get a Bitbucket user profile by user slug. Returns user details including display name, email, and active status.

userSlug string
search_users
annotations: none low

Search Bitbucket users by filter query. Returns matching users.

list_labels
annotations: verified low

List labels for a repository.

readOnlyHint false idempotentHint false
manage_labels
annotations: verified low

Manage repository labels. Actions: "add" (create a new label), "remove" (delete a label).

name string action enum
readOnlyHint false idempotentHint false
list_ssh_keys
annotations: verified low

List SSH keys for the authenticated user.

readOnlyHint false idempotentHint false
manage_ssh_keys
annotations: verified low

Manage SSH keys for the authenticated user. Actions: "add" (add a key), "delete" (remove a key).

keyId number action enum
readOnlyHint false idempotentHint false
list_webhooks
annotations: verified low

List webhooks configured for a repository.

readOnlyHint false idempotentHint false
manage_webhooks
annotations: verified low

Manage repository webhooks. Actions: "create" (add a new webhook), "update" (modify an existing webhook), "delete" (remove a webhook).

readOnlyHint false idempotentHint false
search
annotations: verified low

Search for code or files across Bitbucket repositories. Supports filtering by project, repository, and search type. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'file,hitCount'` for a custom subset).

query string
openWorldHint true
list_tags
annotations: mismatch low

List tags in a repository. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'id,displayId,hash'` for a custom subset).

readOnlyHint false idempotentHint false destructiveHint true
get_tag
annotations: mismatch low

Get details of a specific tag by its name. Supports custom field selection via the `fields` param (`'*all'` for full raw response, `'id,displayId,hash'` for a custom subset).

name string
readOnlyHint false idempotentHint false destructiveHint true
manage_tags
annotations: verified low

Manage tags in a repository. Actions: "create" (create a new tag pointing to a commit), "delete" (delete a tag by name).

name string action enum
readOnlyHint false idempotentHint false destructiveHint true

Permissions 1

env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 127

info
Tool 'fork_repository' annotations are consistent annotation_checker · 80%
info
Tool 'list_gpg_keys' annotations are consistent annotation_checker · 80%
info
Tool 'manage_branches' annotations are consistent annotation_checker · 80%
info
Tool 'list_forks' annotations are consistent annotation_checker · 80%
info
Tool 'list_merge_checks' annotations are consistent annotation_checker · 80%
info
Tool 'manage_merge_checks' annotations are consistent annotation_checker · 80%
info
Tool 'list_repository_hooks' annotations are consistent annotation_checker · 80%
info
Tool 'manage_repository_hooks' annotations are consistent annotation_checker · 80%
info
Tool 'list_commit_comments' annotations are consistent annotation_checker · 80%
info
Tool 'manage_commit_comments' annotations are consistent annotation_checker · 80%
low
Tool 'list_projects' has no annotations annotation_checker · 100%
low
Tool 'list_repositories' has no annotations annotation_checker · 100%
info
Tool 'browse_repository' annotations are consistent annotation_checker · 80%
info
Tool 'get_file_content' annotations are consistent annotation_checker · 80%
info
Tool 'upload_attachment' annotations are consistent annotation_checker · 80%
info
Tool 'edit_file' annotations are consistent annotation_checker · 80%
medium
Tool 'get_file_blame' claims destructive but name implies read-only operation annotation_checker · 80%
info
Tool 'create_repository' annotations are consistent annotation_checker · 80%
info
Tool 'delete_repository' annotations are consistent annotation_checker · 80%
low
Tool 'list_branch_restrictions' has no annotations annotation_checker · 100%
low
Tool 'list_branches' has no annotations annotation_checker · 100%
medium
Tool 'list_commits' claims destructive but name implies read-only operation annotation_checker · 80%
low
Tool 'get_commit' has no annotations annotation_checker · 100%
low
Tool 'compare_refs' has no annotations annotation_checker · 100%
low
Tool 'list_default_reviewer_conditions' has no annotations annotation_checker · 100%
low
Tool 'get_server_info' has no annotations annotation_checker · 100%
low
Tool 'get_code_insights' has no annotations annotation_checker · 100%
low
Tool 'get_build_status' has no annotations annotation_checker · 100%
info
Tool 'manage_deployments' annotations are consistent annotation_checker · 80%
info
Tool 'create_pull_request' annotations are consistent annotation_checker · 80%
info
Tool 'get_pull_request' annotations are consistent annotation_checker · 80%
info
Tool 'update_pull_request' annotations are consistent annotation_checker · 80%
info
Tool 'merge_pull_request' annotations are consistent annotation_checker · 80%
info
Tool 'decline_pull_request' annotations are consistent annotation_checker · 80%
low
Tool 'list_pull_requests' has no annotations annotation_checker · 100%
low
Tool 'list_dashboard_pull_requests' has no annotations annotation_checker · 100%
low
Tool 'get_pull_request_activity' has no annotations annotation_checker · 100%
low
Tool 'get_diff' has no annotations annotation_checker · 100%
low
Tool 'get_pull_request_commits' has no annotations annotation_checker · 100%
low
Tool 'get_commit_pull_requests' has no annotations annotation_checker · 100%
info
Tool 'manage_review' annotations are consistent annotation_checker · 80%
low
Tool 'list_secret_scanning_rules' has no annotations annotation_checker · 100%
low
Tool 'manage_comment' has no annotations annotation_checker · 100%
low
Tool 'search_emoticons' has no annotations annotation_checker · 100%
info
Tool 'manage_gpg_keys' annotations are consistent annotation_checker · 80%
info
Tool 'list_reviewer_groups' annotations are consistent annotation_checker · 80%
info
Tool 'manage_reviewer_groups' annotations are consistent annotation_checker · 80%
low
Tool 'get_user_profile' has no annotations annotation_checker · 100%
low
Tool 'search_users' has no annotations annotation_checker · 100%
info
Tool 'list_labels' annotations are consistent annotation_checker · 80%
info
Tool 'manage_labels' annotations are consistent annotation_checker · 80%
info
Tool 'list_ssh_keys' annotations are consistent annotation_checker · 80%
info
Tool 'manage_ssh_keys' annotations are consistent annotation_checker · 80%
info
Tool 'list_webhooks' annotations are consistent annotation_checker · 80%
info
Tool 'manage_webhooks' annotations are consistent annotation_checker · 80%
info
Tool 'search' annotations are consistent annotation_checker · 80%
medium
Tool 'list_tags' claims destructive but name implies read-only operation annotation_checker · 80%
medium
Tool 'get_tag' claims destructive but name implies read-only operation annotation_checker · 80%
info
Tool 'manage_tags' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: list_merge_checks manifest_parser · 85%
info
Tool: manage_merge_checks manifest_parser · 85%
info
Tool: list_repository_hooks manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Tool: manage_repository_hooks manifest_parser · 85%
info
Tool: list_commit_comments manifest_parser · 85%
info
Tool: manage_commit_comments manifest_parser · 85%
info
Tool: list_projects manifest_parser · 85%
info
Tool: list_repositories manifest_parser · 85%
info
Tool: browse_repository manifest_parser · 85%
info
Tool: get_file_content manifest_parser · 85%
info
Tool: upload_attachment manifest_parser · 85%
info
Tool: edit_file manifest_parser · 85%
info
Tool: get_file_blame manifest_parser · 85%
info
Tool: create_repository manifest_parser · 85%
info
Tool: delete_repository manifest_parser · 85%
info
Tool: list_branch_restrictions manifest_parser · 85%
info
Tool: list_branches manifest_parser · 85%
info
Tool: list_commits manifest_parser · 85%
info
Tool: manage_branches manifest_parser · 85%
info
Tool: get_commit manifest_parser · 85%
info
Tool: compare_refs manifest_parser · 85%
info
Tool: list_default_reviewer_conditions manifest_parser · 85%
info
Tool: get_server_info manifest_parser · 85%
info
Tool: get_code_insights manifest_parser · 85%
info
Tool: get_build_status manifest_parser · 85%
info
Tool: manage_deployments manifest_parser · 85%
info
Tool: create_pull_request manifest_parser · 85%
info
Tool: get_pull_request manifest_parser · 85%
info
Tool: update_pull_request manifest_parser · 85%
info
Tool: merge_pull_request manifest_parser · 85%
info
Tool: decline_pull_request manifest_parser · 85%
info
Tool: list_pull_requests manifest_parser · 85%
info
Tool: list_dashboard_pull_requests manifest_parser · 85%
info
Tool: get_pull_request_activity manifest_parser · 85%
info
Tool: get_diff manifest_parser · 85%
info
Tool: get_pull_request_commits manifest_parser · 85%
info
Tool: get_commit_pull_requests manifest_parser · 85%
info
Tool: manage_review manifest_parser · 85%
info
Tool: list_secret_scanning_rules manifest_parser · 85%
info
Tool: manage_comment manifest_parser · 85%
info
Tool: search_emoticons manifest_parser · 85%
info
Tool: list_forks manifest_parser · 85%
info
Tool: fork_repository manifest_parser · 85%
info
Tool: list_gpg_keys manifest_parser · 85%
info
Tool: manage_gpg_keys manifest_parser · 85%
info
Tool: list_reviewer_groups manifest_parser · 85%
info
Tool: manage_reviewer_groups manifest_parser · 85%
info
Tool: get_user_profile manifest_parser · 85%
info
Tool: search_users manifest_parser · 85%
info
Tool: list_labels manifest_parser · 85%
info
Tool: manage_labels manifest_parser · 85%
info
Tool: list_ssh_keys manifest_parser · 85%
info
Tool: manage_ssh_keys manifest_parser · 85%
info
Tool: list_webhooks manifest_parser · 85%
info
Tool: manage_webhooks manifest_parser · 85%
info
Tool: search manifest_parser · 85%
info
Tool: list_tags manifest_parser · 85%
info
Tool: get_tag manifest_parser · 85%
info
Tool: manage_tags manifest_parser · 85%
info
Required env vars (16) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 1041 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%