# Bitbucket L1 · Needs a person

Bitbucket is a code hosting and build service.

**Can an AI agent use Bitbucket? No.** Our agent couldn't get into Bitbucket on its own.

Category: Source control · Connects by: MCP, API · Agent payments: None found · Driven: 27 Oct 2026

**How to connect**
- MCP server URL: `https://mcp.atlassian.com/v2/mcp` (streamable HTTP, documented). Source: https://mcp.atlassian.com/v2/mcp
- API base URL: `https://api.bitbucket.org/2.0` (documented). Source: https://developer.atlassian.com/cloud/bitbucket/swagger.v3.json
- Docs page: `https://support.atlassian.com/bitbucket-cloud/resources/` (documented). Source: https://support.atlassian.com/bitbucket-cloud/resources/

**Level 1: Needs a person.** Agents can't get in on their own.
- Got in by: A person sets it up (Not on its own in its drive)
- Got as far as: Sign up (Use, Pay and Leave not reached)
- To reach L2: Let an agent sign up on its own.

1 drive, awaiting confirmation

[What the levels mean](https://agentdrives.com/method/levels?via=md)

## From finding it to leaving

What an agent managed without a person, at each step.

1. **Find**: Stopped. No docs it can act on.
2. **Get in**: Stopped. Can't sign up. The Atlassian sign-up shows a visible reCAPTCHA after the email. Stopped here.
3. **Use**: Not reached. Tasks need an account.
4. **Pay**: Not reached. Buying needs an account.
5. **Leave**: Not reached. Nothing to cancel or delete.

## Getting in

None of the 3 ways in got our agent in on its own; one got partway.

Where it stopped: **Sign up**. The Atlassian sign-up shows a visible reCAPTCHA after the email.

- Both kinds of agent (On a server, or in its own browser): No. Signing up needs a person: it asks for a bot check.
- Signed agent (Known to Cloudflare): No. The sign-up page opens. The CAPTCHA on the form stops them too.

| Way in | What happened |
|---|---|
| Runs locally, no account | Partway |
| No key needed | Not reached |
| Sign-in for apps (OAuth, MCP) | Not tried: Not part of this drive |

[How agents get past bot checks](https://agentdrives.com/guides/let-signed-agents-past-your-bot-check.md?via=md)

## What an agent can do with Bitbucket

No task was tried: our agent couldn't get into Bitbucket.

Core tasks Bitbucket offers an agent:

- Create a code repository (API)
- Push commits to a repository (API, CLI)
- Open and merge a pull request (API)
- Review a pull request (API)
- Run a CI/CD pipeline (API)
- Publish a deployment/release (API)

What it can't do, and why:

- Create an API or access token through the Cloud API: The spec has no such operation; tokens are made in the web UI.
- Use any Cloud feature (repos, pull requests, Pipelines, deployments): All of them need an account.
- Record a deployment through the Cloud API: The spec only lists deployments; they come from a Pipelines step.

17 more tasks it offers:

- Create a deploy environment (API)
- Set pipeline variables and secrets (API)
- Read deploy status and history (API)
- Check code for quality/security with reports (API)
- Register a webhook (API)
- Link a pull request or commit to a Jira issue (Web app)
- Create an access token (API)
- Connect a third-party integration (Pipes/Marketplace) (Web app)
- Store large files with Git LFS (CLI)
- Create a code snippet (API)
- Set branch permissions and merge checks (API)
- Upload a file to downloads (API)
- Create a workspace (API)
- Invite a member to a workspace (Web app)
- Set a member's role or permissions (API)
- Restrict access by IP address (Web app)
- Read the audit log (Web app)

**Surface audit:** 356 documented operations, 2 run, 2 passed, 343 blocked (sandbox or plan limits), 11 left out to stay safe.

### Self-hosted edition

L4 · Runs on its own.

Bitbucket also ships an edition you run yourself. Our agent installed it on its own server in about 12 minutes and drove it the same way, doing 83% of the core work.

## How an agent connects

MCP, API and OpenAPI found.

Agent surfaces: API tested · MCP documented · CLI documented · SDK none found · Docs documented · Agent payments none found. Issues found: 1.

- **MCP server**: Listed, not tested. Official server. Sign-in needed to see its tools. https://mcp.atlassian.com/v2/mcp (44 tools across its docs)
- **API**: 2 tested. REST 2.0, 300 operations in 23 groups. (300 operations across its docs)
- **OpenAPI**: Yes. OpenAPI 3.0.0 (also a Swagger 2.0 copy); no example on about half the operations.
- **CLI**: Listed, not tested. (1 command across its docs)
- **SDK**: None found.
- **llms.txt**: None found.
- **Agent payments**: None found. The checkout wasn't reached: Standard, $3.65 a month.
- **Docs**: Couldn't be read. The docs couldn't be read on this drive. https://support.atlassian.com/bitbucket-cloud/resources/

[The standards](https://agentdrives.com/standard)

## Tips for agent builders

- Read the API from https://developer.atlassian.com/cloud/bitbucket/swagger.v3.json (300 operations); the HTML reference pages are 1-2 MB each.
- API tokens use Basic auth with the Atlassian email as username; app passwords are deprecated.
- For MCP use https://mcp.atlassian.com/v2/mcp with scopes read:bitbucket:agent-interface and write:bitbucket:agent-interface; the workspace must be linked to an Atlassian organization.
- Deployments cannot be created through the Cloud API: run a Pipelines step with a deployment environment.
- On Data Center, basic auth is off by default: create an HTTP access token (PUT /rest/access-tokens/latest/users/{user}) from a logged-in session and use it as a Bearer token.

## How Bitbucket compares

In Source control: 1 of the 5 products we drove in Source control is higher; 3 others share L1.

- [Graphite](https://agentdrives.com/tools/graphite.md?via=md): L2, Gets in on its own
- **Bitbucket** (this page): L1, Can't sign up on its own
- [Codeberg](https://agentdrives.com/tools/codeberg.md?via=md): L1, Can't sign up on its own
- [Gitea](https://agentdrives.com/tools/gitea.md?via=md): L1, Can't sign up on its own
- [GitHub](https://agentdrives.com/tools/github.md?via=md): L1, Can't sign up on its own

[All 5 in Source control](https://agentdrives.com/categories/source-control?via=md)

Sorted by level, then work done, then time to the first call. [How we rank](https://agentdrives.com/method?via=md#order)

On our standard (12 criteria: against other source control products where we measured 5 or more, otherwise against every product we measured):

- [Errors say what to do next](https://agentdrives.com/standard#err-03): **Ahead of most** 81 of 103 others (every product) lower, 22 the same.
- [A request id on every answer](https://agentdrives.com/standard#err-07): **Ahead of most** 64 of 103 others (every product) lower, 39 the same.
- [The best way in is built for agents](https://agentdrives.com/standard#in-12): **In the middle** 2 of 4 others (source control products) lower, 2 the same.
- [Real status codes](https://agentdrives.com/standard#err-01): **Level with most** 125 of 127 others (every product) the same, 2 lower.
- [WebMCP tools on the web app](https://agentdrives.com/standard#proto-02): **The same as all** 4 others (source control products).
- [Every way in works for an agent](https://agentdrives.com/standard#in-11): **Level with most** 3 of 4 others (source control products) the same, 1 higher.
- [Spend an agent can see and cap](https://agentdrives.com/standard#pay-05): **Level with most** 84 of 118 others (every product) the same, 34 higher.
- [Versions an agent can pin](https://agentdrives.com/standard#api-07): **Behind most** 60 of 97 others (every product) higher, 28 the same, 9 lower.
- [Sign-in for agents acting for a person](https://agentdrives.com/standard#in-08): **Behind most** 65 of 119 others (every product) higher, 54 the same.
- [One way to page through lists](https://agentdrives.com/standard#api-03): **Behind most** 53 of 87 others (every product) higher, 34 the same.
- [Errors a program can read](https://agentdrives.com/standard#err-02): **Behind most** 65 of 104 others (every product) higher, 39 the same.
- [Fast to the first call](https://agentdrives.com/standard#in-03): **Behind most** 72 of 85 others (every product) higher, 10 the same, 3 lower.

[How each criterion is graded](https://agentdrives.com/standard)

## For the team behind Bitbucket

**6 things to fix for agents.**

Agent blockers: 1 found · Agent surfaces: no issues found. Safety review: no issues found.

Agents get stuck at Find and Get in. Prove Bitbucket is yours, then see where each issue is, read your safety findings and ask for a free drive after a fix. How to fix each one comes with the Audit.

- Find: Blocks agents
- Get in: Blocks agents
- Use: Not reached
- Pay: Not reached
- Leave: Not reached

[Claim Bitbucket, free](https://agentdrives.com/app/products?add=bitbucket.org&ref=listing) · [What a drive covers](https://agentdrives.com/method?via=md)

## Where Bitbucket fits

- Category: [Developer platform](https://agentdrives.com/categories/developer?via=md), [Source control](https://agentdrives.com/categories/source-control?via=md)
- Wall: [Bot checks](https://agentdrives.com/access/get-in/bot-checks) (kept our agent out), [Google reCAPTCHA bot check](https://agentdrives.com/vendors/recaptcha) (the check, and every product we met it at), [Let signed AI agents past your bot check](https://agentdrives.com/guides/let-signed-agents-past-your-bot-check?via=md) (fix guide)
- Standards: [MCP](https://agentdrives.com/standards/mcp) (tools an agent can call), [OpenAPI](https://agentdrives.com/standards/openapi) (its API, described)
- Steps: [Find](https://agentdrives.com/access/find), [Get in](https://agentdrives.com/access/get-in) (stopped here), [Use](https://agentdrives.com/access/use), [Pay](https://agentdrives.com/access/pay), [Leave](https://agentdrives.com/access/leave)
- Rivals: [Codeberg](https://agentdrives.com/tools/codeberg?via=md) (L1), [Gitea](https://agentdrives.com/tools/gitea?via=md) (L1), [GitHub](https://agentdrives.com/tools/github?via=md) (L1)

Data: [JSON](https://agentdrives.com/api/tools/bitbucket.json?via=md) · [Markdown](https://agentdrives.com/tools/bitbucket.md?via=md) · [History](https://agentdrives.com/tools/bitbucket/history?via=md) · [Atom](https://agentdrives.com/feeds/tools/bitbucket.atom) · [JSON Feed](https://agentdrives.com/feeds/tools/bitbucket.json) · licence [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/)

**Found an error?** [Tell us on this page](https://agentdrives.com/tools/bitbucket?via=md#correct) or read [how corrections work](https://agentdrives.com/corrections?via=md).
