Jira + Kroy

Connect Jira once. Use it safely with any AI.

  1. Jira, where it already is.

    Jira stays the authoritative record. Nothing moves, and nothing is copied that doesn’t need to be.

  2. Jira connects to Kroy.

    OAuth 2. Kroy holds the connection.

  3. Your AI connects to Kroy.

    Claude, ChatGPT or another AI connects to Kroy — not to Jira. It never receives Jira credentials.

  4. Exactly what is allowed.

    Each Jira action is a Kroy capability; move issue through workflow waits for a person by default. Jira Cloud first. Self-managed Jira is not in scope for the first release.

  5. A real request.

    Claude asks for read issue. Kroy checks the person, the agent and the policy, calls Jira, and records the request.

Jira
Kroy
Claude
Priya Client manager
AUDIT

Jira capabilities

  • jira.issue.read
  • jira.issue.search
  • jira.issue.create
  • !jira.issue.transition
  • Jira Cloud first. Self-managed Jira i…
Jira
Kroy
Claude
Priya Client manager
AUDIT

Jira capabilities

  • jira.issue.read
  • jira.issue.search
  • jira.issue.create
  • !jira.issue.transition
  • Jira Cloud first. Self-managed Jira i…
Jira connecting to Kroy, then to an authorised AI. Jira, where it already is.. Jira connects to Kroy.. Your AI connects to Kroy.. Exactly what is allowed.. A real request..

Supported resources

  • Projects
  • Issues, including fields, labels and links
  • Comments
  • Workflow transitions
  • Sprints and boards (read)

Authentication

OAuth 2.0 with Atlassian for Jira Cloud. Kroy holds the connection; AI clients never receive Atlassian tokens.

Supported actions

CapabilityTypeDefault
jira.issue.read
Read issue
readPolicy
jira.issue.search
Search issues
readPolicy
jira.issue.create
Create issue
writePolicy
jira.issue.comment
Add comment
writePolicy
jira.issue.update
Update issue fields
writePolicy
jira.issue.transition
Move issue through workflow
writeHuman approval

Events

jira.issue.createdjira.issue.updatedjira.issue.transitioned

Overview

Jira records what a team has agreed to do. AI is useful around it: turning a meeting into tickets, summarising a sprint, finding duplicates, writing the status update nobody wants to write.

Kroy connects to Jira once. Authorised AI tools reach Jira through Kroy, which knows who each request is for and limits it to the projects that person works on.

Permissions

Each Jira action is a Kroy capability. Kroy decides every request against the person, the agent, the delegation between them and the organisation’s policies.

By default, AI may search, read, create issues, comment and update fields. Moving an issue through the workflow — for example to Done or to Released — requires approval, because transitions often trigger automation elsewhere. Organisations can relax or tighten this per project.

Jira and Kroy State

Jira holds the tickets. Kroy State can hold the working context around them: the decisions behind a ticket, the notes an agent left for the next agent, the link between a Jira issue and the GitHub branch that fixes it. Any authorised AI can pick up where another left off.

Industries

Technology companies use Jira for engineering work. Consultancies often use it to run client projects, where a partner may want AI to prepare weekly status from Jira without exposing other clients’ projects.

Security

Kroy holds the Atlassian connection. AI clients never see the tokens. Every request is recorded with the person, agent, project and issue involved, and revoking an AI’s Kroy access removes its Jira access immediately.

Limitations

  • Jira Cloud first. Self-managed Jira is not in scope for the first release.
  • Issues cannot be deleted through Kroy.
  • Project configuration, workflows and permission schemes cannot be changed through Kroy.
  • Kroy respects Jira project permissions; it cannot grant access Jira does not.
  • Actions are subject to Atlassian’s own API rate limits.