Skip to main content

Confluence Server

Confluence is a team workspace and knowledge management tool for creating, organizing, and collaborating on documentation, meeting notes, project plans, and more.

Authentication Types

Confluence Server supports 3 authentication methods:

  • OAuth - Create your own Atlassian OAuth app with custom scopes. Every user connects with their Atlassian account.

    • Pros: Full control, per-user tracking, production-ready
    • Cons: ~2 min setup
  • API Key - Use your Atlassian email and API token for authentication.

    • Pros: Easy setup
    • Cons: Single credential for all users
  • API Key Per User - Each user provides their own Atlassian email and API token.

    • Pros: Per-user tracking, better security
    • Cons: Each user needs to set up their own token

Configuration

Before using the connector, you need to configure:

  • Confluence Organization Domain - Your Confluence instance domain (e.g., yourcompany.atlassian.net)

Setting up OAuth

  1. Go to https://developer.atlassian.com/console/myapps/
  1. Click CreateOAuth 2.0 integration
  1. Enter a name for your app and click Create
  1. In the left sidebar, go to Permissions

  2. Click Add next to Confluence API and configure the scopes you need

  1. In the left sidebar, go to Authorization

  2. Click Add next to OAuth 2.0 (3LO)

  1. Set the Callback URL:
    • For SaaS deployments: https://{org}.mcp-s.com/{org}/api/auth/callback
    • For On-Premise deployments: {connectUrl}/{org}/api/auth/callback
  1. Click Save changes

  2. In the left sidebar, go to Settings

  3. Copy the Client ID and Secret

  1. In Willow, paste the Client ID and Client Secret

  2. Select the scopes you need. Available scopes include:

    • Content operations (read, write, delete pages, blog posts, comments)
    • Space management (read, write, delete spaces and permissions)
    • User and group management
    • Attachments, labels, templates
    • Analytics and audit logs
    • Whiteboards and custom content
  3. Enter your Confluence Organization Domain in Configuration.

    Since OAuth uses the Atlassian API gateway, the base URL should be:

    https://api.atlassian.com/ex/confluence/{cloudId}

    For example: https://api.atlassian.com/ex/confluence/e1acb0fb-318d-4fc3-ba56-db2b0ae14466

    To find your Cloud ID, open the following URL in your browser (replace your-org with your Atlassian subdomain):

    https://your-org.atlassian.net/_edge/tenant_info

    Copy the cloudId value from the JSON response.

  4. Click Save Changes

Generating an API Key

  1. Go to https://id.atlassian.com/manage-profile/security/api-tokens
  1. Click Create API token

  2. Give your token a descriptive label (e.g., "Willow Confluence Integration")

  1. Click Create

  2. Copy the token immediately (it won't be shown again)

  3. In Willow, enter the token in the format email:api_token (e.g. [email protected]:your_api_token)

Required Classic Scopes

When setting up OAuth, you need to add the following classic scopes in the Atlassian developer console under Permissions → Confluence API. These scopes cover all the built-in tools:

Classic ScopeDescriptionUsed By
read:confluence-content.allRead pages, comments, labels, and child pages (including body content)Get Page, List Pages in Space, Get Child Pages, Get Comments, Get Labels
read:confluence-space.summaryRead space informationList Spaces, Get Space
search:confluenceSearch content using CQLSearch Content
write:confluence-contentCreate and update pages, blog posts, comments, and labelsCreate Page, Update Page, Add Comment, Add Labels, Create Blog Post
write:confluence-spaceDelete content (maps to Atlassian's DELETE permission level)Delete Page
Minimal read-only setup

If you only need read access, use: read:confluence-content.all, read:confluence-space.summary, and search:confluence.

note

search:confluence may return data covered by read:confluence-space.summary and read:confluence-content.summary, but it is not a substitute for those scopes — you still need them separately.

Available Scopes

The Confluence Server connector provides comprehensive access with the following scope categories:

  • Content Management: Read, write, and delete pages, blog posts, comments, and inline comments
  • Space Operations: Manage spaces, space properties, and space permissions
  • Labels & Attachments: Add, modify, and remove labels and attachments
  • User & Group Management: Access user and group information
  • Templates: Read and write content templates
  • Analytics: Access content analytics data
  • Audit: Read audit logs
  • Custom Content: Manage custom content types
  • Whiteboards: Create and manage whiteboards

For a complete list of scopes, refer to the Atlassian Confluence API documentation.