Bitbucket
bitbucket.orgBitbucket is a code hosting and build service.
Can an AI agent use Bitbucket? No. Our agent couldn't get into Bitbucket on its own.
From finding it to leaving
What an agent managed without a person, at each step.
- Stopped
Find
No docs it can act on.
- Stopped
Get in
Stopped hereCan't sign up. The Atlassian sign-up shows a visible reCAPTCHA after the email.
- Not reached
Use
Tasks need an account.
- Not reached
Pay
Buying needs an account.
- Not reached
Leave
Nothing to cancel or delete.
Getting in
None of the 3 ways in got our agent in on its own; one got partway.
Where it stopped
Sign up
The Atlassian sign-up shows a visible reCAPTCHA after the email.
- Both kinds of agentOn a server, or in its own browserNoSigning up needs a person: it asks for a bot check.
- Signed agentKnown to CloudflareNoThe sign-up page opens. The CAPTCHA on the form stops them too.
Every way in
| Way in | What happened | Why |
|---|---|---|
| Runs locally, no account | Partway | |
| No key needed | Not reached | |
| Sign-in for apps (OAuth, MCP) | Not tried | Not part of this drive |
What an agent can do with Bitbucket
No task was tried: our agent couldn't get into Bitbucket.
Core tasks Bitbucket offers an agent
- offered, not tried
- Create a code repositoryAPI
- Push commits to a repositoryAPICLI
- Open and merge a pull requestAPI
- Review a pull requestAPI
- Run a CI/CD pipelineAPI
- Publish a deployment/releaseAPI
- Create an API or access token through the Cloud APIThe spec has no such operation; tokens are made in the web UI.
- Use any Cloud feature (repos, pull requests, Pipelines, deployments)All of them need an account.
- Record a deployment through the Cloud APIThe spec only lists deployments; they come from a Pipelines step.
17 more tasks it offers
- Create a deploy environmentAPI
- Set pipeline variables and secretsAPI
- Read deploy status and historyAPI
- Check code for quality/security with reportsAPI
- Register a webhookAPI
- Link a pull request or commit to a Jira issueWeb app
- Create an access tokenAPI
- Connect a third-party integration (Pipes/Marketplace)Web app
- Store large files with Git LFSCLI
- Create a code snippetAPI
- Set branch permissions and merge checksAPI
- Upload a file to downloadsAPI
- Create a workspaceAPI
- Invite a member to a workspaceWeb app
- Set a member's role or permissionsAPI
- Restrict access by IP addressWeb app
- Read the audit logWeb app
Surface audit: 356 documented operations, 2 run, 2 passed, 343 blocked (sandbox or plan limits), 11 left out to stay safe.
Self-hosted edition
L4Runs on its ownBitbucket also ships an edition you run yourself. Our agent installed it on its own server in about 12 minutes and drove it the same way, doing 83% of the core work.
How an agent connects
MCP, API and OpenAPI found.
MCP server
Listed, not testedAPI
2 testedREST 2.0, 300 operations in 23 groups.
300 operations across its docs
OpenAPI
YesOpenAPI 3.0.0 (also a Swagger 2.0 copy); no example on about half the operations.
CLI
Listed, not tested1 command across its docs
SDK
None foundllms.txt
None foundAgent payments
None foundThe checkout wasn't reached: Standard, $3.65 a month.
Docs
Couldn't be readThe docs couldn't be read on this drive.
Tips for agent builders
- Read the API from https://developer.atlassian.com/cloud/bitbucket/swagger.v3.json (300 operations); the HTML reference pages are 1-2 MB each.
- API tokens use Basic auth with the Atlassian email as username; app passwords are deprecated.
- For MCP use https://mcp.atlassian.com/v2/mcp with scopes read:bitbucket:agent-interface and write:bitbucket:agent-interface; the workspace must be linked to an Atlassian organization.
- Deployments cannot be created through the Cloud API: run a Pipelines step with a deployment environment.
- On Data Center, basic auth is off by default: create an HTTP access token (PUT /rest/access-tokens/latest/users/{user}) from a logged-in session and use it as a Bearer token.
How Bitbucket compares
In Source control
1 of the 5 products we drove in Source control is higher; 3 others share L1.
| Product | Level | Find to leave |
|---|---|---|
| L2 | Find: On its own, Get in: On its own, Use: Partly, Pay: Not reached, Leave: On its own. | |
| L1 | Find: Stopped, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Nothing to do, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. | |
| L1 | Find: On its own, Get in: Stopped, Use: Not reached, Pay: Not reached, Leave: Not reached. |
Sorted by level, then work done, then time to the first call. How we rank
For the team behind Bitbucket
Agents get stuck at Find and Get in. Prove Bitbucket is yours, then see where each issue is, read your safety findings and ask for a free drive after a fix. How to fix each one comes with the Audit.
6 things to fix for agents
Agent blockers: 1 foundAgent surfaces: no issues foundSafety review: no issues found
- FindBlocks agents
- Get inBlocks agents
- UseNot reached
- PayNot reached
- LeaveNot reached
On our standard
12 criteria: against other source control products where we measured 5 or more, otherwise against every product we measured.
- Errors say what to do nextAhead of most 81 of 103 others (every product) lower, 22 the same.
- A request id on every answerAhead of most 64 of 103 others (every product) lower, 39 the same.
- The best way in is built for agentsIn the middle 2 of 4 others (source control products) lower, 2 the same.
- Real status codesLevel with most 125 of 127 others (every product) the same, 2 lower.
- Sign-in for agents acting for a personBehind most 65 of 119 others (every product) higher, 54 the same.
- One way to page through listsBehind most 53 of 87 others (every product) higher, 34 the same.
- Errors a program can readBehind most 65 of 104 others (every product) higher, 39 the same.
- Fast to the first callBehind most 72 of 85 others (every product) higher, 10 the same, 3 lower.
All 12 criteria
- WebMCP tools on the web appThe same as all 4 others (source control products).
- Every way in works for an agentLevel with most 3 of 4 others (source control products) the same, 1 higher.
- Spend an agent can see and capLevel with most 84 of 118 others (every product) the same, 34 higher.
- Versions an agent can pinBehind most 60 of 97 others (every product) higher, 28 the same, 9 lower.
Where Bitbucket fits
- Category
- Wall
- Bot checkskept our agent out
- Google reCAPTCHA bot checkthe check, and every product we met it at
- Let signed AI agents past your bot checkfix guide
Found an error? Tell us on this page or read how corrections work.
Questions people ask about Bitbucket
- Can an AI agent sign up for Bitbucket on its own?
- No. Sign-up: needs a human. id.atlassian.com sign-up: after the email, a visible Google reCAPTCHA checkbox ("Please confirm you're not a robot"), so the agent stopped here. Google, Microsoft, Apple and Slack sign-in were not used (a person's accounts).
- Does Bitbucket have an MCP server, and can an agent connect to it?
- Yes. Bitbucket has an official MCP server. A new agent can't get in on its own: in the drive of 27 Oct 2026, our agent stopped at sign up (it needs a person).
Cite this page
The page as a reference, in plain text, APA and BibTeX.
Cite this
AgentDrives, “Bitbucket: AI agent test drive”, 27 October 2026, https://agentdrives.com/tools/bitbucket. CC BY 4.0.
AgentDrives. (2026, October 27). Bitbucket: AI agent test drive. https://agentdrives.com/tools/bitbucket
@misc{agentdrives_bitbucket_2026,
author = {{AgentDrives}},
title = {Bitbucket: AI agent test drive},
year = {2026},
month = oct,
url = {https://agentdrives.com/tools/bitbucket},
note = {Agent test drive, CC BY 4.0},
}Something wrong on this page?
Tell us what's wrong. We check it against the drive and correct the page, with the date.