@crypto512/jicon-mcp 1.0.0 → 1.0.2

package/.jicon.json.safewrite

@@ -0,0 +1,17 @@
+{
+  "jira": {
+    "url": "https://jira.example.com",
+    "username": "your-email@example.com",
+    "token": "your-jira-api-token"
+  },
+  "confluence": {
+    "url": "https://confluence.example.com",
+    "username": "your-email@example.com",
+    "token": "your-confluence-api-token"
+  },
+  "permissions": {
+    "mode": "custom",
+    "whitelist": ["jira_read", "confluence_write", "tempo_read"],
+    "confluenceWriteHome": true
+  }
+}

package/README.md

@@ -3,7 +3,7 @@
 [![npm version](https://badge.fury.io/js/%40crypto512%2Fjicon-mcp.svg)](https://badge.fury.io/js/%40crypto512%2Fjicon-mcp)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 
-> Connect Claude to your Jira, Confluence, and Tempo. Search issues, create pages, log time - all through natural conversation.
+> Connect your AI assistant to Jira, Confluence, and Tempo. Search issues, create pages, log time - all through natural conversation.
 
 ## Quick Start
 
@@ -17,7 +17,7 @@ npm install -g @crypto512/jicon-mcp
 
 ## What Can You Do?
 
-Once configured, just ask Claude in natural language:
+Once configured, just ask in natural language:
 
 ### Jira
 - *"Find all high-priority bugs assigned to me"*
@@ -144,16 +144,16 @@ Create `.jicon.json` in your project root for project-specific settings:
 
 ### Permission Modes
 
-Control what operations are allowed:
+Control what operations are allowed. **By default, Jicon runs in read-only mode** - all read tools across Jira, Confluence, and Tempo are available, but no write operations. Safe for exploration without risk of accidental modifications.
 
-**Full Access** (default):
+**Read-Only** (default) - all read tools enabled:
 ```json
-{ "permissions": { "mode": "full" } }
+{ "permissions": { "mode": "readonly" } }
 ```
 
-**Read-Only** - safe for exploration:
+**Full Access** - all operations enabled:
 ```json
-{ "permissions": { "mode": "readonly" } }
+{ "permissions": { "mode": "full" } }
 ```
 
 **Custom** - fine-grained control:
@@ -166,6 +166,24 @@ Control what operations are allowed:
 }
 ```
 
+**Safe Write** - recommended for controlled write access:
+```json
+{
+  "permissions": {
+    "mode": "custom",
+    "whitelist": ["jira_read", "confluence_write", "tempo_read"],
+    "confluenceWriteHome": true
+  }
+}
+```
+
+This configuration allows:
+- **Jira**: Read-only (search, view issues, sprints, boards)
+- **Confluence**: Write restricted to your personal space only
+- **Tempo**: Read-only (view worklogs, no time logging)
+
+The `confluenceWriteHome: true` setting ensures all Confluence write operations (drafts, comments, attachments) can only target your personal space, preventing accidental modifications to shared team spaces.
+
 Available virtual actions: `jira_read`, `jira_write`, `jira_all`, `confluence_read`, `confluence_write`, `confluence_all`, `tempo_read`, `tempo_write`, `tempo_all`
 
 ## Authentication
@@ -205,7 +223,13 @@ Plus utility tools for content buffering, time calculations, URL generation, and
 
 ### Safe Confluence Editing
 
-Confluence changes go through a draft workflow - Claude creates drafts, you review and publish. No accidental overwrites.
+Confluence write operations use a **draft workflow** for safety:
+
+1. **Draft Creation**: When asked to create or edit content, Jicon creates a draft in your personal space
+2. **User Review**: You review the draft content before it goes live
+3. **Manual Publish**: You decide when and where to publish the final content
+
+This means the AI assistant **never directly publishes** to shared team spaces - all changes are staged as drafts that require your explicit approval. Combined with `confluenceWriteHome: true`, this ensures complete control over what gets published.
 
 ### PlantUML Diagrams
 

package/dist/config/types.js

@@ -22,13 +22,13 @@ export const PermissionsConfigSchema = z.object({
     confluenceWriteHome: z.boolean().default(false),
 });
 // Main configuration schema
-// Default: custom mode with jira_read + confluence_read only (Tempo disabled by default)
+// Default: readonly mode for safety (no write operations allowed)
 export const ConfigSchema = z.object({
     jira: ServiceConfigSchema.optional(),
     confluence: ServiceConfigSchema.optional(),
     permissions: PermissionsConfigSchema.default({
-        mode: "custom",
-        whitelist: ["jira_read", "confluence_read"],
+        mode: "readonly",
+        whitelist: [],
         blacklist: [],
     }),
 });

package/dist/config/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6BAA6B;AAC7B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG1D,+BAA+B;AAC/B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAIH,yBAAyB;AACzB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG3E,mCAAmC;AACnC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,iFAAiF;IACjF,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAChD,CAAC,CAAC;AAIH,4BAA4B;AAC5B,yFAAyF;AACzF,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,uBAAuB,CAAC,OAAO,CAAC;QAC3C,IAAI,EAAE,QAAQ;QACd,SAAS,EAAE,CAAC,WAAW,EAAE,iBAAiB,CAAC;QAC3C,SAAS,EAAE,EAAE;KACd,CAAC;CACH,CAAC,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/config/types.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,6BAA6B;AAC7B,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG1D,+BAA+B;AAC/B,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE;IACrB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC/B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAIH,yBAAyB;AACzB,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;AAG3E,mCAAmC;AACnC,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,IAAI,EAAE,oBAAoB,CAAC,OAAO,CAAC,UAAU,CAAC;IAC9C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,SAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC1C,iFAAiF;IACjF,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC;CAChD,CAAC,CAAC;AAIH,4BAA4B;AAC5B,kEAAkE;AAClE,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC,MAAM,CAAC;IACnC,IAAI,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IACpC,UAAU,EAAE,mBAAmB,CAAC,QAAQ,EAAE;IAC1C,WAAW,EAAE,uBAAuB,CAAC,OAAO,CAAC;QAC3C,IAAI,EAAE,UAAU;QAChB,SAAS,EAAE,EAAE;QACb,SAAS,EAAE,EAAE;KACd,CAAC;CACH,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@crypto512/jicon-mcp",
-  "version": "1.0.0",
+  "version": "1.0.2",
   "description": "Model Context Protocol server for Jira, Confluence, and Tempo integration",
   "main": "dist/index.js",
   "type": "module",