MCP.Market

Bitbucket MCP server

by droplinkperformance·io.github.droplinkperformance/bitbucket-mcp-server·v1.2.0
No reviews yet

Provider-agnostic, AI-review-first MCP server for Bitbucket Cloud.

B80/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B80/100

full report

Adoption
Growing

0 stars103 downloads/wk

Reviews

Write one

Nobody has reviewed Bitbucket yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Bitbucket tools (9, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • analyze_pull_requestwrite action

    Runs an AI code review of a pull request and returns a standard ReviewResult (summary,

  • comment_pull_request

    Adds a comment to a pull request. Provide `inline` to attach the comment to a file/line.

  • create_pull_requestwrite action

    Creates a pull request from a source branch to a destination branch.

  • get_current_user

    Returns the authenticated Bitbucket user.

  • get_pull_request

    Fetches a single pull request by id.

  • get_pull_request_comments

    Lists the (non-deleted) comments on a pull request.

  • get_pull_request_diff

    Returns the raw unified diff for a pull request.

  • get_pull_request_files

    Lists the files changed by a pull request with add/remove line stats.

  • list_pull_requests

    Lists pull requests in a repository, optionally filtered by state or a query.

Public scan report

scanner v0.1.10 · 2026-10-31 · same rubric, same numbers if you re-run it

no findings
  • Code scan195 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 24 days ago15/15
  • Maintainer identityregistry namespace matches repository owner6/10
Overall 80/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Bitbucket compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
80/100
higher than 60% of 48,273 servers
Tools
9
the typical server has 7
Tools that change things
22%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
103
more than 64% of 11,915 servers with a package

What its tools let an agent do: 6 read · 1 create · 1 change · 1 send or post

Install Bitbucket in Claude Code, Cursor or VS Code

Runs npx -y @droplinkperformance/bitbucket-mcp-server on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add bitbucket-mcp-server -- npx -y @droplinkperformance/bitbucket-mcp-server
Add to Cursor

What the publisher says

From the Bitbucket repository's README, as published. We do not edit it. Read it on GitHub

@droplinkperformance/bitbucket-mcp-server

Provider-agnostic, AI-review-first Model Context Protocol (MCP) server for Bitbucket Cloud.

The primary value of this server is AI-powered code review and pull request analysis, not CRUD against the Bitbucket API. Every major dependency (SCM access, cache, token storage, rate limiting, LLM, events) is hidden behind a provider-agnostic interface so the same business logic can later target GitHub / GitLab / Azure DevOps and OpenAI / Anthropic / Gemini / Bedrock without changes to use-cases, agents, or domain contracts.

Status: Phase 1. See Roadmap.

Features (Phase 1)

  • Dual transports: stdio (Cursor / Claude Desktop) and Streamable HTTP (Node http, for remote/production).
  • Auto-discovered tools via a ToolRegistry — no manual registration.
  • Explicit BitbucketContext (workspace + optional repository) on every tool — multi-workspace ready.
  • Resilient BitbucketClient: auth injection, auto-pagination, retry/backoff, rate-limit handling, caching, secret masking.
  • Two auth strategies: OAuth 2.0 (Authorization Code, with rotating refresh-token persistence) and Bearer token.
  • AI code review (analyzepullrequest) backed by a CodeReviewAgent that chunks large PRs and returns a standard ReviewResult.
  • Pluggable LLM provider (OpenAI / Anthropic / Gemini / Bedrock), cache (memory / Redis), and token store (file / memory / Redis).

Tools

All tool inputs accept workspace (optional if BITBUCKETDEFAULTWORKSPACE is set) and, where applicable, repository.

Architecture

src/
  index.ts            entry: chooses transport
  container.ts        composition root (the only place wiring concretes)
  mcp/                McpServer + ToolRegistry (auto-discovery) + transports
  tools/              thin MCP adapters (*.tool.ts) -> call exactly one use-case
  application/        use-cases (CQRS-ish: command|query) with Input/Output DTOs
  agents/             autonomous workflows implementing Agent<TInput,TOutput>
  domain/             provider-agnostic types, repository contracts, ReviewResult
  repositories/bitbucket/  Bitbucket implementations of the contracts
  clients/bitbucket/  resilient REST client
  auth/               AuthProvider (+ token/oauth) and TokenStore implementations
  cache/              CacheProvider (+ memory/redis)
  ratelimit/          RateLimitStrategy (+ bitbucket)
  llm/                LlmProvider (+ openai/anthropic/gemini/bedrock)
  events/             EventBus (+ in-memory)
  services/           reusable services (masking, chunking)
  telemetry/          OpenTelemetry bootstrap + metrics
  infrastructure/     config, logger, http, attachments
  shared/             errors, result envelope, http-status, BitbucketContext

Flow: tool -> use-case -> (agent | repository contract) -> repositories/bitbucket -> BitbucketClient. Agents may also use the LlmProvider and EventBus. Tools never contain business logic.

Requirements

  • Node.js 23+

Install

Published as @droplinkperformance/bitbucket-mcp-server.

npx -y @droplinkperformance/bitbucket-mcp-server

From source:

npm install
npm run build

Release

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Bitbucket: common questions

Is Bitbucket MCP server safe?
Mostly: it is graded B (80/100). Read the Bitbucket safety report
How do I install Bitbucket?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Bitbucket need an API key?
Yes. The registry entry asks for BITBUCKET_ACCESS_TOKEN, OPENAI_API_KEY.
Is Bitbucket maintained?
The last commit was 25 days ago (2026-10-08). The latest release is v1.2.0.
How does Bitbucket compare with other MCP servers?
safety score 80/100 (higher than 60% of 48,273 servers); tools 9 (the typical server has 7); tools that change things 22% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.