Skip to content

Adding toolsets#123

Open
iosamaatlassian wants to merge 1 commit into
mainfrom
adding-tool-set-filtering
Open

Adding toolsets#123
iosamaatlassian wants to merge 1 commit into
mainfrom
adding-tool-set-filtering

Conversation

@iosamaatlassian

@iosamaatlassian iosamaatlassian commented Mar 25, 2026

Copy link
Copy Markdown
Collaborator

Rovo Dev code review: Rovo Dev has reviewed this pull request
Any suggestions or improvements have been posted as pull request comments.

Comment thread README.md
| `SEARCH_JIRA` | Search Jira issues using JQL | OAuth + Headless |
| `READ_CONFLUENCE` | Get pages, spaces, descendants, ancestors, footer comments, inline comments, comment children | OAuth + Headless |
| `WRITE_CONFLUENCE` | Create pages, update pages, create footer comments, create inline comments | OAuth + Headless |
| `SEARCH_CONFLUENCE` | Search Confluence content using CQL | OAuth + Headless |

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

hey @iosamaatlassian should we expose supported oauth types for these capabilities/toolsets? this is more internal for admin controls

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Or maybe it does make sense, because I had split them up based on what tools are rolled out by each auth type, so yes we can do the same mapping here

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

For admins, we shouldn't really IMHO. The capability here is just a tool filter technique not an actual permission.

Comment thread README.md

### Capability compatibility by authentication mode

Capability availability also depends on authentication mode:

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

considering this is because we dont have some tools supported in oauth and headless, is this distinction necessary to clarify or would it confuse them more?

also considering we will have a toolset selection at consent for oauth, how does this work when we rollout new consent, then there would be 3 levels of filtering for oauth flows?

Copy link
Copy Markdown
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We have this distinction in our tool docs already. In this experience it's better to state this until we support all scopes under all auth methods.

Folks might see Toolsets for JSM and might not know why it's not showing for them.

Comment thread README.md

| Capability | Enables | Supported auth mode |
| --- | --- | --- |
| `READ_JIRA` | Get issues, projects, transitions, issue type metadata, worklogs, remote links | OAuth + Headless |

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@iosamaatlassian are we not having these for TWG tools yet? we are calling it read_atlassian and write_atlassian.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants