inhouse_confluence_mcp

In-house Confluence (Data Center/Server) MCP server implementation. Default mode is read-only, and write tools are controlled by policy.

Tools

• confluence_list_spaces

• confluence_search_cql

• confluence_get_content

• confluence_get_labels

• confluence_get_children

• confluence_get_attachments

• confluence_get_comments

• confluence_scan_content

• confluence_get_likes (experimental, off by default)

• confluence_create_page (write, off by default)

• confluence_update_page (write, off by default)

• confluence_add_label (write, off by default)

• confluence_add_comment (write, off by default)

Quick Start

1. Copy .env.example to .env

2. Set required values:

• CONFLUENCE_BASE_URL

• CONFLUENCE_AUTH_MODE (pat or basic)

• CONFLUENCE_PAT or CONFLUENCE_USERNAME/CONFLUENCE_PASSWORD

3. Install and run:

python -m pip install -e .
confluence-mcp

Or:

python -m confluence_mcp.main

OpenCode Registration

Use OpenCode local MCP config with a command array and environment object.

{
  "mcp": {
    "inhouse-confluence": {
      "type": "local",
      "command": [
        "C:\\Users\\jae_chul.lee\\inhouse_confluence_mcp\\.venv\\Scripts\\python.exe",
        "-m",
        "confluence_mcp.main",
        "--env-file",
        "C:\\Users\\jae_chul.lee\\inhouse_confluence_mcp\\.env"
      ],
      "environment": {
        "PYTHONIOENCODING": "utf-8"
      }
    }
  }
}

Notes:

• Do not rely on Activate.ps1 in MCP commands.

• Prefer direct venv python path.

• --env-file makes startup independent from cwd.

• Optional override: set CONFLUENCE_MCP_ENV_FILE in environment.

.env Loading Rules

On startup, the server looks for .env in this order:

1. --env-file path

2. CONFLUENCE_MCP_ENV_FILE

3. Current working directory (.env, .env.local)

4. Python executable neighborhood (useful for .venv layout)

5. Project/module directory

If no file is found, startup logs searched paths.

Space Auto-Discovery

• If ALLOWED_SPACES is empty and AUTO_DISCOVER_SPACES=true, the server auto-loads available space keys on startup.

• DENIED_SPACES is optional. Use it only when you need an explicit sensitive-space blocklist.

• To generate a ready-to-copy env line manually:

confluence-mcp-sync-spaces

• Output file: logs/spaces_discovered.json

Recommended Settings

• Keep WRITE_ENABLED=false initially

• Configure ALLOWED_SPACES first

• Add DENIED_SPACES only for sensitive spaces

• Keep EXPERIMENTAL_LIKES=false unless needed

Logs

• Audit log path: AUDIT_LOG_PATH (default: logs/audit.jsonl)

• Fields: timestamp, tool, status, latencyMs, traceId, error

Tests

python -m unittest discover -s tests -v

Tool Probe on Startup

• By default, the server probes API permissions at startup and exposes only reachable tools.

• Toggle all probes with TOOL_PROBE_ON_STARTUP=true|false.

• Disable only space probe with SPACE_PROBE_ON_STARTUP=false.

• When SPACE_PROBE_ON_STARTUP=false, user-declared ALLOWED_SPACES is trusted for policy checks.

• If /rest/api/space is blocked, confluence_list_spaces is hidden.

• If /rest/api/content/search is blocked, read/write content tools are hidden.