{
  "checker": {
    "claims": [
      {
        "claim": "Hosted endpoint accepts TLS 1.2 connections (unauthenticated request returns 401; tool results not checked)",
        "command": "curl -sS --tlsv1.2 -o /dev/null -w '%{http_code}' -m 30 https://mcp.atlassian.com/v2/mcp",
        "evidence": "401",
        "expected": "HTTP 401 from the endpoint over TLS 1.2",
        "input": "curl --tlsv1.2 https://mcp.atlassian.com/v2/mcp",
        "kind": "claim",
        "outcome": "Real input produced the expected result: 401",
        "returncode": 0,
        "source": "HTTPS (TLS 1.2 or later)",
        "source_checked": true,
        "source_file": "README.md",
        "verdict": "yes"
      },
      {
        "claim": "Local MCP proxy needs Node.js v18+ (mcp-remote)",
        "command": "",
        "evidence": "Node 18.19.1 was installed first; npx mcp-remote then failed because its undici dependency needs Node >=20.18.1. Upgraded to Node v24.22.1 with n lts. The remaining prerequisite is the Atlassian OAuth browser sign-in, which is not available in this guest.",
        "expected": "",
        "input": "",
        "kind": "claim",
        "outcome": "Node 18.19.1 was installed first; npx mcp-remote then failed because its undici dependency needs Node >=20.18.1. Upgraded to Node v24.22.1 with n lts. The remaining prerequisite is the Atlassian OAuth browser sign-in, which is not available in this guest.",
        "source": "installed to run the local MCP proxy",
        "source_checked": true,
        "source_file": "README.md",
        "verdict": "blocked"
      },
      {
        "claim": "Headless authentication uses API token credentials",
        "command": "",
        "evidence": "Needs an Atlassian Cloud site and API token credentials, which this guest does not have and must not obtain.",
        "expected": "",
        "input": "",
        "kind": "claim",
        "outcome": "Needs an Atlassian Cloud site and API token credentials, which this guest does not have and must not obtain.",
        "source": "API token credentials for headless authentication",
        "source_checked": true,
        "source_file": "README.md",
        "verdict": "blocked"
      },
      {
        "claim": "Recommended endpoint for all clients",
        "command": "",
        "evidence": "Tool calls require OAuth sign-in (browser) or an API token, neither available in this guest, so no tool result can be checked.",
        "expected": "",
        "input": "",
        "kind": "claim",
        "outcome": "Tool calls require OAuth sign-in (browser) or an API token, neither available in this guest, so no tool result can be checked.",
        "source": "The recommended endpoint for all clients is:",
        "source_checked": true,
        "source_file": "README.md",
        "verdict": "blocked"
      }
    ],
    "cycle_checks": [
      {
        "claim": "Scheduled or looping main behavior",
        "command": "",
        "evidence": "Entry points inspected: package.json scripts (test, validate), .mcp.json, mcp.json, server.json, and a grep for cron, schedule, webhook, --once, setInterval and loop. The product is a hosted remote MCP endpoint (https://mcp.atlassian.com/v2/mcp) with a stdio proxy (mcp-remote) run on demand. It has no scheduler or self-triggered cycle in this repository.",
        "expected": "identify the product trigger",
        "input": "source inspection",
        "kind": "cycle",
        "outcome": "Entry points inspected: package.json scripts (test, validate), .mcp.json, mcp.json, server.json, and a grep for cron, schedule, webhook, --once, setInterval and loop. The product is a hosted remote MCP endpoint (https://mcp.atlassian.com/v2/mcp) with a stdio proxy (mcp-remote) run on demand. It has no scheduler or self-triggered cycle in this repository.",
        "source": "repository entry points",
        "verdict": "yes"
      }
    ],
    "details": {
      "checks": [
        {
          "check": "credentials_error",
          "details": {
            "argv": [
              "npx",
              "-y",
              "mcp-remote",
              "https://mcp.atlassian.com/v2/mcp"
            ],
            "credentials_error": "MCP response missing for request 1: argv did not answer as a stdio MCP server (a client CLI that talks to servers is kind cli); stderr: [10024] Using callback port derived from the server URL: 38677\n[10024] Discovering OAuth server configuration...\n[10024] Discovered authorization server: https://auth.atlassian.com/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3\n[10024] Initializing auth coordination on-demand\n[10024] OAuth callback server running at http://127.0.0.1:38677\n[10024] This instance is running the sign-in for this server (callback port 38677)\n[10024] [10024] Connecting to remote server: https://mcp.atlassian.com/v2/mcp\n[10024] Using transport strategy: http-first\n[10024] \nPlease authorize this client by visiting:\nhttps://auth.atlassian.com/authorize?response_type=code&client_id=9Huky75heaaO0FvZA0Aro7vSIyhtZz2H&code_challenge=ToH0wbZSK8LxhmksUQOyJs36jXu2DUuoE7v5BwNkcrE&code_challenge_method=S256&redirect_uri=http%3A%2F%2Flocalhost%3A38677%2Foauth%2Fcallback&state=433a2754-0d5c-48ff-b539-ab65aea10974&scope=read%3Ame+read%3Aaccount+offline_access+email+read%3Ajira%3Aagent-interface+write%3Ajira%3Aagent-interface+search%3Ajira%3Aagent-interface+delete%3Ajira%3Aagent-interface+manage%3Ajira%3Aagent-interface+read%3Aconfluence%3Aagent-interface+write%3Aconfluence%3Aagent-interface+search%3Aconfluence%3Aagent-interface+search%3Arovo%3Aagent-interface+search%3Acode%3Aagent-interface+read%3Ajsm%3Aagent-interface+write%3Ajsm%3Aagent-interface+read%3Aall%3Atwg+write%3Aall%3Atwg+read%3Agoals%3Aagent-interface+write%3Agoals%3Aagent-interface+read%3Aprojects%3Aagent-interface+write%3Aprojects%3Aagent-interface+read%3Abitbucket%3Aagent-interface+write%3Abitbucket%3Aagent-interface+read%3Aloom%3Aagent-interface+write%3Aloom%3Aagent-interface+read%3Atalent%3Aagent-interface+write%3Atalent%3Aagent-interface+read%3Ajira-align%3Aagent-interface+write%3Ajira-align%3Aagent-interface+read%3Ateams%3Aagent-interface+write%3Ateams%3Aagent-interface+read%3Aartifacts%3Aagent-interface+write%3Aartifacts%3Aagent-interface+read%3Acapacity-planning%3Aagent-interface+write%3Acapacity-planning%3Aagent-interface+read%3Afocus%3Aagent-interface+write%3Afocus%3Aagent-interface+read%3Aassets%3Aagent-interface+write%3Aassets%3Aagent-interface&prompt=consent&resource=https%3A%2F%2Fmcp.atlassian.com%2Fv2%2Fmcp\n\n[10024] Trying /usr/bin/xdg-open to open the browser...\n[10024] Trying gio to open the browser...\n[10024] Trying x-www-browser to open the browser...\n[10024] Trying sensible-browser to open the browser...\n[10024] Could not open a browser automatically. Please copy and paste the URL above into your browser.\n[10024] Authentication required. Initializing auth...\n[10024] Authentication required. Waiting for authorization...\n",
            "kind": "mcp",
            "needs_credentials": true,
            "working": false
          },
          "optional": false,
          "status": "PASS"
        }
      ],
      "scope": "partial checks",
      "working": false
    },
    "evidence_strength": "partly_checked",
    "example_checks": [
      {
        "claim": "Validate the Agent Plugins package and client files",
        "command": "npm run validate",
        "deferred": false,
        "evidence": "> validate\n> node scripts/validate-template.mjs\n\nWarnings:\n- atlassian: no hooks/hooks.json file found (only needed when using hooks).\n\nValidation passed.",
        "expected": "Validation passed.",
        "input": "npm run validate",
        "kind": "example",
        "outcome": "command completed successfully",
        "returncode": 0,
        "source": "CONTRIBUTING.md",
        "verdict": "yes"
      },
      {
        "claim": "Run the offline validation test suite",
        "command": "npm test",
        "deferred": false,
        "evidence": "ained Windows-style cwd paths pass validation (0.334603ms)\n\u2714 plugin.json rejects every non-object root value (64.629648ms)\n\u2714 mcp.json rejects every non-object root value (49.58032ms)\n\u2714 malformed Agent Skill YAML is rejected (4.532447ms)\n\u2714 non-mapping Agent Skill frontmatter is rejected (0.811154ms)\n\u2714 quoted, folded, and literal YAML strings are parsed (1.077517ms)\n\u2714 Agent Skill fields must use valid string values (35.483073ms)\n\u2714 Agent Skill names must match their parent directory (22.921808ms)\n\u2139 tests 17\n\u2139 suites 0\n\u2139 pass 17\n\u2139 fail 0\n\u2139 cancelled 0\n\u2139 skipped 0\n\u2139 todo 0\n\u2139 duration_ms 2475.341611",
        "expected": "17 tests pass, 0 fail",
        "input": "npm test",
        "kind": "example",
        "outcome": "command completed successfully",
        "returncode": 0,
        "source": "CONTRIBUTING.md",
        "verdict": "yes"
      }
    ],
    "status": "PASS"
  },
  "deviations": [
    "Guest had no node/npm. Installed with sudo -n apt-get install -y nodejs npm (Node v18.19.1, npm 9.2.0).",
    "npx -y mcp-remote failed on Node v18.19.1: its undici dependency needs Node >=20.18.1 (ReferenceError: File is not defined). Upgraded with sudo -n npm install -g n && sudo -n env N_PREFIX=/usr/local n lts to Node v24.22.1 (npm 11.19.1). Node 24 satisfies the README's 'Node.js v18+'.",
    "No Atlassian OAuth sign-in or API token available; the mcp-remote call stops at the browser authorization step. No tool call was made, so no product result was observed.",
    "Checker path: /inputs/coldpass-preflight.py does not exist in this guest; used <guest-path> with the same --validate --replay arguments.",
    "Pinned commit b74220d41142fae52b4f680c805b2ab81050991a was not fetched with git; the workspace is a non-git snapshot that was used as provided."
  ],
  "fault_owner": "prerequisite",
  "main_blocker": "No Atlassian sign-in is available in this guest: the endpoint requires OAuth consent in a browser or an API token",
  "operation": "Connect a local MCP client through the README's mcp-remote proxy to the hosted Atlassian MCP server (https://mcp.atlassian.com/v2/mcp) and call a real Jira/Confluence tool",
  "operation_scope": "Requires an Atlassian Cloud site and either an interactive OAuth 2.1 browser sign-in or an API token. Neither is available in this disposable guest, and no credentials were obtained. Node.js v18+ is required (v24 was used).",
  "outcome": "needs_credentials",
  "plain_failure": "The Atlassian MCP server is hosted and only answers after you sign in to an Atlassian Cloud site. This test guest has no browser and no account, so the server could not be asked to run a real Jira or Confluence action. The local setup itself works: Node was installed, the repo's own checks pass, and the server responds with its sign-in prompt.",
  "steps": [
    "README 'For IDEs or local clients (desktop setup)': install Node.js v18+ (sudo -n apt-get install -y nodejs npm; Node v18.19.1 installed)",
    "npm ci (repo lockfile; 0 vulnerabilities)",
    "npm run validate (from CONTRIBUTING.md; 'Validation passed.')",
    "npm test (from CONTRIBUTING.md; 17 pass, 0 fail)",
    "README 'Architecture and communication': endpoint https://mcp.atlassian.com/v2/mcp; unauthenticated curl returns HTTP 401",
    "README local client path: npx -y mcp-remote https://mcp.atlassian.com/v2/mcp (run from /tmp); printed an OAuth authorize URL, could not open a browser, and waited for authorization"
  ],
  "stuck_step": "Authenticating to the hosted Atlassian MCP server (OAuth browser sign-in or API token) through mcp-remote",
  "suggested_fix": "Run the probe on a machine with a browser and an Atlassian account, or supply an API token for headless use (the README says API tokens work for headless authentication). Then add a read-only tool call (for example a Jira search) with an expected_text from its result. Also consider updating README's 'Node.js v18+' to note that current mcp-remote needs Node >= 20.18.1."
}