Summary

Currently, the Atlassian Rovo MCP Server allows users to access all content for which they have been granted access permissions within the Atlassian application.

• https://support.atlassian.com/atlassian-rovo-mcp-server/docs/getting-started-with-the-atlassian-remote-mcp-server/#Permission-management

There is currently no way to limit the MCP Server's access to a specific subset of "approved" projects, spaces, or sites without changing the user's global permissions.

Suggestion

Introduce an administrative "Accessible Content Whitelist" configuration for the Atlassian Rovo MCP Server.