We have a fairly complete REST API, so it's unusual to need this, but there are some operations that can only be scripted using SpringMVC controllers (such as setting a mail server or updating a license).

It would be good to support for X-Atlassian-Token for consistency with the other products as well.