Skip to main content

​
Overview

OneCLI connects AI agents to Confluence Cloud. Agents can search your wiki, read pages, and create or update them. The gateway injects the token into every request, so your agent never sees it. Connecting takes one click. You don’t create an Atlassian app or copy any keys.

​
What you will set up

  • A Confluence Cloud connection through Atlassian OAuth, with no app or keys to create
  • Automatic token injection on every Confluence request
  • Per-agent, per-tool access, such as read freely and approve page edits

​
Connect Confluence

1

Click Connect

In the OneCLI dashboard, open Connections > Confluence and click Connect Confluence.
OneCLI connect window for Confluence, showing the OneCLI and Confluence logos, the Connect to Confluence button, and an auto-connect countdown.

The Confluence connect window in OneCLI.

2

Accept in Atlassian

Sign in to Atlassian, pick your Confluence site, and click Accept. You’re done. OneCLI keeps the connection active from then on.
You don’t need to be a Confluence admin. Atlassian may show a notice that the app hasn’t been reviewed by Atlassian yet. It’s safe to continue.

​
What agents can do

  • Search all spaces with CQL, filtered by space, type, label, or contributor
  • Read a page’s full content, metadata, comments, and attachments
  • Create pages and update existing ones
  • Add comments and labels
  • List spaces and browse page hierarchies

​
Controlling access

Grant the connection to each agent that needs it, and choose per tool what runs freely, what needs approval, and what’s blocked. Organization rules add guardrails on top. A blocked request never reaches Confluence. To disconnect, remove the connection in Connections > Confluence, then revoke OneCLI in Atlassian under Account settings > Connected apps.

​
Self-hosted: use your own Atlassian app

Skip this section on OneCLI Cloud. It’s only for self-hosted OneCLI without ATLASSIAN_CLIENT_ID and ATLASSIAN_CLIENT_SECRET set, or if you want your own company name on Atlassian’s consent screen. One Atlassian app serves both Jira and Confluence: if you already set one up for Jira, add the Confluence scopes below and you’re done.

1. Create the Atlassian app

Follow Create the Atlassian app on the Jira page. If you already have one for Jira, reuse it.
Open Permissions, click Add next to Confluence API, then Configure. Add these on both tabs:Also add read:me under User identity API if it isn’t there yet, and the Jira scopes from the Jira page. Atlassian keeps one consent per person for each app, so OneCLI asks for the Confluence and Jira scopes together. If any of them is missing from the app, Atlassian shows an error instead of the consent screen.
Use read:confluence-space.summary (space), not read:confluence-content.summary (content). If the space scope is missing, Atlassian shows “Something went wrong” instead of the consent screen.
Upgrading an existing app? OneCLI now also asks for search:confluence, which CQL search needs. Add it to the app’s Classic scopes before you upgrade OneCLI, or Atlassian shows an error instead of the consent screen. Then reconnect Confluence so the new token includes it. Until you do, search returns 401 “scope does not match” while page reads keep working.
In OneCLI, open Connections > Confluence > Custom credentials and copy the Redirect URI. It ends in /v1/apps/oauth/atlassian/callback, the same URI as Jira. Add it to the app’s Callback URLs under Authorization. Then paste the app’s Client ID and Secret, select Save & Connect, and accept in Atlassian.
OneCLI Custom credentials card for Confluence with the setup guide link, the Redirect URI and its copy button, and the client ID and secret fields.

Copy the Redirect URI from Custom credentials in OneCLI.

​
FAQ

No. Any Confluence user can connect. Atlassian may show a notice that the app hasn’t been reviewed yet, and it’s safe to continue.
No. The token stays in OneCLI, and the gateway adds it to each Confluence request at the proxy. See How it works.
Yes. When you grant the connection, allow search and read tools and block or require approval for creating and updating pages.
Reconnect from Connections > Confluence. To revoke, remove the connection there, then revoke OneCLI in Atlassian under Account settings > Connected apps.