# atlassian probes, 2026-09-17T18:06Z, from a cloud container (one IP), no credentials, no payment
# Responses are cut at 6000 bytes (initialize), 2500 (protected resource), 9000 (authorization server), 4000 (REST). Nothing here was sent with a credential.

## 1. MCP initialize, POST https://mcp.atlassian.com/v2/mcp
$ curl -sS -i -m 25 -X POST https://mcp.atlassian.com/v2/mcp -H 'Content-Type: application/json' -H 'Accept: application/json, text/event-stream' -d '<initialize>'
HTTP/1.1 200 Connection Established

HTTP/2 401 
date: Thu, 17 Sep 2026 18:06:07 GMT
content-type: application/json; charset=utf-8
content-length: 25
vary: Origin
access-control-allow-origin: 
access-control-allow-credentials: true
access-control-expose-headers: WWW-Authenticate,Mcp-Protocol-Version,Mcp-Protocol-Id,Mcp-Session-Id,Retry-After,X-RateLimit-Limit,X-RateLimit-Remaining,X-RateLimit-Reset
www-authenticate: Bearer resource_metadata="https://mcp.atlassian.com/.well-known/oauth-protected-resource/v2/mcp"
server: AtlassianEdge
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
atl-traceid: 0a240895d19e44b897f7e307ef28a27d
atl-request-id: 0a240895-d19e-44b8-97f7-e307ef28a27d
strict-transport-security: max-age=63072000; preload
report-to: {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}
nel: {"failure_fraction": 0.01, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}
server-timing: atl-edge;dur=61,atl-edge-internal;dur=39,atl-edge-upstream;dur=22,atl-edge-pop;desc="aws-ca-central-1"

{"error":"invalid_token"}

## 2. Protected-resource metadata, GET https://mcp.atlassian.com/.well-known/oauth-protected-resource/v2/mcp
HTTP/1.1 200 Connection Established

HTTP/2 200 
date: Thu, 17 Sep 2026 18:06:07 GMT
content-type: application/json
content-length: 1244
vary: Origin
access-control-allow-origin: 
access-control-allow-credentials: true
access-control-expose-headers: WWW-Authenticate,Mcp-Protocol-Version,Mcp-Protocol-Id,Mcp-Session-Id,Retry-After,X-RateLimit-Limit,X-RateLimit-Remaining,X-RateLimit-Reset
cache-control: public, max-age=3600
server: AtlassianEdge
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
atl-traceid: 2323dae22858411ca336d621d754a430
atl-request-id: 2323dae2-2858-411c-a336-d621d754a430
strict-transport-security: max-age=63072000; preload
report-to: {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}
nel: {"failure_fraction": 0.01, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}
server-timing: atl-edge;dur=24,atl-edge-internal;dur=3,atl-edge-upstream;dur=21,atl-edge-pop;desc="aws-ca-central-1"

{"resource":"https://mcp.atlassian.com/v2/mcp","authorization_servers":["https://auth.atlassian.com/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3"],"bearer_methods_supported":["header"],"scopes_supported":["read:me","read:account","offline_access","email","read:jira:agent-interface","write:jira:agent-interface","search:jira:agent-interface","delete:jira:agent-interface","manage:jira:agent-interface","read:confluence:agent-interface","write:confluence:agent-interface","search:confluence:agent-interface","search:rovo:agent-interface","search:code:agent-interface","read:all:twg","write:all:twg","read:goals:agent-interface","write:goals:agent-interface","read:projects:agent-interface","write:projects:agent-interface","read:bitbucket:agent-interface","write:bitbucket:agent-interface","read:loom:agent-interface","write:loom:agent-interface","read:talent:agent-interface","write:talent:agent-interface","read:teams:agent-interface","write:teams:agent-interface","read:artifacts:agent-interface","write:artifacts:agent-interface","read:capacity-planning:agent-interface","write:capacity-planning:agent-interface","read:focus:agent-interface","write:focus:agent-interface"],"resource_documentation":"https://www.atlassian.com/platform/remote-mcp-server"}

## 3. Authorization-server metadata, GET https://auth.atlassian.com/.well-known/oauth-authorization-server/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3
HTTP/1.1 200 Connection Established

HTTP/2 200 
content-type: application/json;charset=UTF-8
content-length: 969
date: Thu, 17 Sep 2026 18:06:08 GMT
cache-control: no-cache
access-control-allow-origin: *
x-frame-options: DENY
server: AtlassianEdge
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
atl-traceid: e9f31bdd8b6c49da938ac5ded02321af
atl-request-id: e9f31bdd-8b6c-49da-938a-c5ded02321af
strict-transport-security: max-age=63072000; preload
report-to: {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}
nel: {"failure_fraction": 0.01, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}
x-cache: Miss from cloudfront
via: 1.1 5ee8fb3fa2d9e2b4c274a8647312261e.cloudfront.net (CloudFront)
x-amz-cf-pop: BOS50-P4
x-amz-cf-id: qG--3BKqyFvDkmMbRDv7p-mZr--OkNpMfrejmlWlrCudCo4X_x-9Xg==
server-timing: cdn-upstream-layer;desc="EDGE",cdn-upstream-dns;dur=1,cdn-upstream-connect;dur=0,cdn-upstream-fbl;dur=67,atl-edge;dur=53,atl-edge-internal;dur=36,atl-edge-upstream;dur=17,atl-edge-pop;desc="aws-ca-central-1",cdn-cache-miss,cdn-pop;desc="BOS50-P4",cdn-rid;desc="qG--3BKqyFvDkmMbRDv7p-mZr--OkNpMfrejmlWlrCudCo4X_x-9Xg==",cdn-downstream-fbl;dur=79

{"authorization_endpoint":"https://auth.atlassian.com/authorize","client_id_metadata_document_supported":true,"code_challenge_methods_supported":["S256"],"grant_types_supported":["authorization_code","client_credentials","refresh_token","urn:ietf:params:oauth:grant-type:token-revoke","urn:ietf:params:oauth:grant-type:jwt-bearer","urn:ietf:params:oauth:grant-type:token-exchange"],"issuer":"https://auth.atlassian.com/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3","jwks_uri":"https://auth.atlassian.com/.well-known/jwks.json","pushed_authorization_request_endpoint":"https://auth.atlassian.com/oauth/par","registration_endpoint":"https://auth.atlassian.com/VCeDsk8ZHncYF1g234fKtc4lNipbBhu3/dcr/register","response_types_supported":["code","token"],"revocation_endpoint":"https://auth.atlassian.com/oauth/revoke","token_endpoint":"https://auth.atlassian.com/oauth/token","token_endpoint_auth_methods_supported":["none","client_secret_post","client_secret_basic","private_key_jwt"]}

## 4. REST, GET https://api.atlassian.com/oauth/token/accessible-resources, no Authorization header
HTTP/1.1 200 Connection Established

HTTP/2 401 
content-type: application/json
content-length: 37
date: Thu, 17 Sep 2026 18:06:09 GMT
x-trace-id: 422ccd58be014517b44dae76f46a2f72
x-failure-category: FAILURE_CLIENT_AUTH_MISMATCH
x-frame-options: SameOrigin
server: AtlassianEdge
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
atl-traceid: 422ccd58be014517b44dae76f46a2f72
atl-request-id: 422ccd58-be01-4517-b44d-ae76f46a2f72
strict-transport-security: max-age=63072000; preload
report-to: {"endpoints": [{"url": "https://dz8aopenkvv6s.cloudfront.net"}], "group": "endpoint-1", "include_subdomains": true, "max_age": 600}
nel: {"failure_fraction": 0.01, "include_subdomains": true, "max_age": 600, "report_to": "endpoint-1"}
server-timing: atl-edge;dur=4,atl-edge-internal;dur=3,atl-edge-upstream;dur=1,atl-edge-pop;desc="aws-ca-central-1"
x-cache: Error from cloudfront
via: 1.1 06e338caf45078abd373430683aff538.cloudfront.net (CloudFront)
x-amz-cf-pop: BOS50-P6
x-amz-cf-id: lChvL5_cvRuOUzmhDi0JvGQhRVRDgBBClK8oNV4gCqXJcnJsg_P-QQ==

{"code":401,"message":"Unauthorized"}